Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z1TEqiOZuLn663TBFm4ds0TH60A.roa
File: Z1TEqiOZuLn663TBFm4ds0TH60A.roa (raw, json)
Hash identifier: W0k6n6TuikbXPvcEB5SXPw6Xb1vtx124nIBr3svXnAA=
Subject key identifier: 67:54:C4:AA:23:99:B8:B9:FA:EB:74:C1:16:6E:1D:B3:44:C7:EB:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01939B3E9590F24952FFD2DC2B0CE62B5F34
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z1TEqiOZuLn663TBFm4ds0TH60A.roa
Signing time: Fri 06 Dec 2024 09:13:10 +0000
ROA not before: Fri 06 Dec 2024 09:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203576
IP address blocks: 77.93.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:3e:95:90:f2:49:52:ff:d2:dc:2b:0c:e6:2b:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 6 09:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6754c4aa2399b8b9faeb74c1166e1db344c7eb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:ce:3b:ba:0a:d6:fd:bb:18:e5:e4:4d:7c:
20:8f:e4:5e:c1:0d:2f:37:50:6d:94:e0:a3:fd:7d:
bd:e7:b0:0a:09:8b:a3:d5:1b:1f:53:53:21:d9:5d:
29:80:64:f0:a8:a7:de:df:ab:5d:99:ad:46:6f:f9:
75:42:5c:fc:55:67:ff:c0:3c:49:20:15:1c:0b:b8:
05:03:91:5d:12:22:80:a1:84:d2:06:cd:21:6f:14:
f1:6c:f1:c5:98:9f:71:ee:30:0d:cc:e3:d6:85:54:
68:57:47:e1:34:e8:1f:df:e5:f7:15:8c:16:5a:35:
20:e8:e4:8a:ec:53:f1:05:30:26:ec:65:79:c1:c6:
0a:9b:c4:db:77:a0:56:2e:45:85:d1:8b:54:f2:67:
ab:f9:1e:a3:5a:d1:b9:6e:4c:09:a4:60:2c:5f:66:
2a:19:b2:2d:80:9f:bf:7b:62:09:f7:2f:c6:64:c9:
b3:2f:3d:fe:0c:d7:e5:8f:de:96:9f:aa:8b:a8:33:
75:a0:3b:73:09:5e:ed:68:b0:16:06:d3:6c:be:6c:
1c:8d:5f:6f:3d:f2:90:4d:85:17:7a:7a:82:a1:e1:
8a:33:70:f0:df:80:64:c0:ac:e7:91:db:b9:40:bc:
7d:f0:5e:81:74:6c:59:df:5d:0d:28:71:54:97:19:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:54:C4:AA:23:99:B8:B9:FA:EB:74:C1:16:6E:1D:B3:44:C7:EB:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z1TEqiOZuLn663TBFm4ds0TH60A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8b:03:43:6c:d0:53:55:dd:0e:2c:15:6d:ed:80:4b:d9:87:
38:e8:96:c4:7e:3d:fb:96:e8:76:da:b8:fe:61:d2:46:0c:6c:
99:48:e8:10:5b:bb:14:29:dd:81:e3:30:d7:90:89:42:07:6c:
15:2f:10:c6:16:67:63:d2:fc:fe:15:69:06:36:1d:81:3f:19:
07:cf:c6:cc:cf:ae:79:c2:be:1f:4a:fd:3f:47:89:db:4b:15:
90:43:ba:95:fd:c8:e5:75:57:bd:38:ca:bb:e0:fa:80:42:6f:
7a:2a:27:4f:66:9c:57:9b:06:1b:50:ab:a0:3b:d4:55:96:8d:
72:33:b4:e7:d6:14:5b:38:41:3c:9d:c2:33:4a:e0:aa:88:1f:
e9:e6:cf:ff:a5:fc:01:fb:e4:b4:a0:47:5b:5a:69:71:c3:c9:
43:8a:a5:88:6f:7b:44:53:2e:05:be:1c:13:5c:77:40:ac:5b:
8f:b2:82:8b:bf:ef:5c:0b:50:ce:70:9f:0e:05:94:64:27:0a:
8d:d0:98:2c:2c:ac:d8:71:8f:c0:76:54:64:06:20:88:86:97:
3e:82:73:68:cf:41:06:fb:eb:8d:1c:d5:6f:63:12:a9:b5:b4:
63:f7:e0:6c:a3:01:de:89:d6:2c:ca:ea:97:bf:f2:4d:de:30:
55:9e:a7:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZObPpWQ8klS/9LcKwzmK180MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMjA2MDkxMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzU0YzRhYTIzOTliOGI5ZmFlYjc0YzExNjZlMWRiMzQ0YzdlYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0HOO7oK1v27GOXkTXwgj+RewQ0v
N1BtlOCj/X2957AKCYuj1RsfU1Mh2V0pgGTwqKfe36tdma1Gb/l1Qlz8VWf/wDxJ
IBUcC7gFA5FdEiKAoYTSBs0hbxTxbPHFmJ9x7jANzOPWhVRoV0fhNOgf3+X3FYwW
WjUg6OSK7FPxBTAm7GV5wcYKm8Tbd6BWLkWF0YtU8mer+R6jWtG5bkwJpGAsX2Yq
GbItgJ+/e2IJ9y/GZMmzLz3+DNflj96Wn6qLqDN1oDtzCV7taLAWBtNsvmwcjV9v
PfKQTYUXenqCoeGKM3Dw34BkwKznkdu5QLx98F6BdGxZ310NKHFUlxmyDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGdUxKojmbi5+ut0wRZuHbNEx+tAMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWjFURXFpT1p1TG42NjNUQkZtNGRzMFRINjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV2UMA0G
CSqGSIb3DQEBCwUAA4IBAQCjiwNDbNBTVd0OLBVt7YBL2Yc46JbEfj37luh22rj+
YdJGDGyZSOgQW7sUKd2B4zDXkIlCB2wVLxDGFmdj0vz+FWkGNh2BPxkHz8bMz655
wr4fSv0/R4nbSxWQQ7qV/cjldVe9OMq74PqAQm96KidPZpxXmwYbUKugO9RVlo1y
M7Tn1hRbOEE8ncIzSuCqiB/p5s//pfwB++S0oEdbWmlxw8lDiqWIb3tEUy4FvhwT
XHdArFuPsoKLv+9cC1DOcJ8OBZRkJwqN0JgsLKzYcY/AdlRkBiCIhpc+gnNoz0EG
++uNHNVvYxKptbRj9+BsowHeidYsyuqXv/JN3jBVnqdS
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:45 2025 by rpki-client