Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/IFs71rd-SRqh7KQnELiFqIDW-AE.roa
File: IFs71rd-SRqh7KQnELiFqIDW-AE.roa (raw, json)
Hash identifier: MBaUbz5hktCV0IHSMwOgUNM2rgXbGFM5oW+Pl2lNI6Q=
Subject key identifier: 20:5B:3B:D6:B7:7E:49:1A:A1:EC:A4:27:10:B8:85:A8:80:D6:F8:01
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 018F9F62D235B05379643B63FB43864FB458
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/IFs71rd-SRqh7KQnELiFqIDW-AE.roa
Signing time: Wed 22 May 2024 08:20:04 +0000
ROA not before: Wed 22 May 2024 08:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.93.64.0/24 maxlen: 24
193.93.65.0/24 maxlen: 24
193.93.66.0/24 maxlen: 24
193.93.67.0/24 maxlen: 24
2001:678:890::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:62:d2:35:b0:53:79:64:3b:63:fb:43:86:4f:b4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: May 22 08:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=205b3bd6b77e491aa1eca42710b885a880d6f801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:d7:a7:2c:e9:d7:3b:7a:9d:13:7b:27:46:
82:c7:a3:04:da:d7:e1:b0:66:18:e5:18:8f:aa:f6:
e0:1a:29:37:6f:9e:97:4f:50:c5:ef:c9:6a:a9:ba:
92:9c:65:06:83:11:1d:4d:7e:c1:88:6b:7a:0b:e5:
e9:6c:27:b2:50:f3:55:1a:af:f5:63:6f:cd:0d:e0:
b7:1c:2d:a6:d9:d2:bb:9d:bb:06:30:0e:ba:9b:14:
b7:e8:2a:96:f9:9d:19:4d:88:b1:0a:a8:cf:2c:5a:
08:a5:c1:6c:db:2f:3c:84:34:38:cd:a1:2d:4d:38:
a4:68:e7:77:15:e4:06:9b:4b:f2:66:73:a3:bb:d4:
16:be:97:a6:e2:cc:b3:56:1e:ce:37:9a:a3:8a:ab:
78:0b:02:d5:44:5e:63:62:bd:60:21:09:64:d9:fa:
5c:fe:00:14:bf:0a:4b:a7:fa:fb:a6:2d:d2:f3:ff:
76:83:b7:8e:16:b3:a8:c1:69:f0:52:8c:4e:89:88:
81:95:18:88:68:87:13:c8:c1:9e:b2:28:91:76:3b:
2e:52:f3:bf:4d:9e:35:29:bc:e5:0b:ab:67:06:70:
45:de:1c:2a:94:ae:b2:b1:2d:f3:ea:f8:00:f5:90:
0c:65:f7:6b:77:00:6d:0e:47:3a:86:07:91:e3:c8:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:3B:D6:B7:7E:49:1A:A1:EC:A4:27:10:B8:85:A8:80:D6:F8:01
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/IFs71rd-SRqh7KQnELiFqIDW-AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
IPv6:
2001:678:890::/48
Signature Algorithm: sha256WithRSAEncryption
68:75:a0:db:f3:08:02:a0:96:21:25:d2:c1:e8:0b:dc:94:30:
5c:43:42:ab:20:95:f4:0e:2c:bc:1e:6b:7b:ce:3c:ad:52:fc:
f3:a3:b2:37:94:ab:74:7b:49:92:48:1d:17:4c:cc:67:db:e8:
a0:37:d5:4e:e3:cc:eb:4c:b4:8d:44:cc:2e:2c:54:8d:89:b2:
e8:a4:38:04:d7:b5:59:b0:67:f1:9e:fe:59:e4:c7:c8:fe:1c:
bb:2e:fc:1a:6c:9c:4c:5c:0f:6f:01:ac:f1:9c:7a:32:20:c4:
67:0b:8e:ef:fe:f4:9f:cf:e4:70:2c:cc:0c:52:94:fc:a3:66:
c6:5a:f0:bc:c9:12:c2:87:5e:8b:33:cb:6c:cb:af:0f:1e:27:
f4:9c:00:0c:be:d8:2b:33:b4:5f:6a:8b:d7:60:31:64:1e:bb:
37:28:4d:ac:50:86:81:05:76:d1:a2:88:8f:6d:ac:25:42:46:
f2:35:6a:3c:81:05:1a:1a:77:b7:fe:26:31:25:cf:52:a7:ef:
98:71:18:bf:0c:35:8c:95:91:5e:be:23:f6:49:15:3f:bf:88:
75:c6:f0:92:12:cc:2d:ed:18:4c:15:fb:57:ba:4c:be:9f:cb:
5a:fb:e0:11:a3:9a:f5:6a:a7:cd:56:9d:30:35:71:73:10:05:
a4:0c:33:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+fYtI1sFN5ZDtj+0OGT7RYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3
OTAwYTgwHhcNMjQwNTIyMDgyMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDViM2JkNmI3N2U0OTFhYTFlY2E0MjcxMGI4ODVhODgwZDZmODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6XXpyzp1zt6nRN7J0aCx6ME2tfh
sGYY5RiPqvbgGik3b56XT1DF78lqqbqSnGUGgxEdTX7BiGt6C+XpbCeyUPNVGq/1
Y2/NDeC3HC2m2dK7nbsGMA66mxS36CqW+Z0ZTYixCqjPLFoIpcFs2y88hDQ4zaEt
TTikaOd3FeQGm0vyZnOju9QWvpem4syzVh7ON5qjiqt4CwLVRF5jYr1gIQlk2fpc
/gAUvwpLp/r7pi3S8/92g7eOFrOowWnwUoxOiYiBlRiIaIcTyMGesiiRdjsuUvO/
TZ41KbzlC6tnBnBF3hwqlK6ysS3z6vgA9ZAMZfdrdwBtDkc6hgeR48hoQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCBbO9a3fkkaoeykJxC4haiA1vgBMB8GA1UdIwQY
MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt
NTY2M2RlMTZkNjZmLzEvSUZzNzFyZC1TUnFoN0tRbkVMaUZxSURXLUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDktNTY2M2RlMTZkNjZm
LzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwV1AMA8E
AgACMAkDBwAgAQZ4CJAwDQYJKoZIhvcNAQELBQADggEBAGh1oNvzCAKgliEl0sHo
C9yUMFxDQqsglfQOLLwea3vOPK1S/POjsjeUq3R7SZJIHRdMzGfb6KA31U7jzOtM
tI1EzC4sVI2JsuikOATXtVmwZ/Ge/lnkx8j+HLsu/BpsnExcD28BrPGcejIgxGcL
ju/+9J/P5HAszAxSlPyjZsZa8LzJEsKHXoszy2zLrw8eJ/ScAAy+2CsztF9qi9dg
MWQeuzcoTaxQhoEFdtGiiI9trCVCRvI1ajyBBRoad7f+JjElz1Kn75hxGL8MNYyV
kV6+I/ZJFT+/iHXG8JISzC3tGEwV+1e6TL6fy1r74BGjmvVqp81WnTA1cXMQBaQM
MyI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:12 2025 by rpki-client