Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_x-NIooSZWBPLQ4Az_WwZ10ryIc.roa
File: _x-NIooSZWBPLQ4Az_WwZ10ryIc.roa (raw, json)
Hash identifier: 1q1YEUpLhSHdHVjO+dAm1j2I/7ErMFlG9+mcpsSQTLM=
Subject key identifier: FF:1F:8D:22:8A:12:65:60:4F:2D:0E:00:CF:F5:B0:67:5D:2B:C8:87
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194ACB628FEAD5D2B8057A8903BB784BC4F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_x-NIooSZWBPLQ4Az_WwZ10ryIc.roa
Signing time: Tue 28 Jan 2025 11:40:06 +0000
ROA not before: Tue 28 Jan 2025 11:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50867
IP address blocks: 109.176.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 14:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:b6:28:fe:ad:5d:2b:80:57:a8:90:3b:b7:84:bc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 28 11:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff1f8d228a1265604f2d0e00cff5b0675d2bc887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:f9:fa:a6:90:33:5d:50:be:80:40:d5:ad:
79:04:69:e4:0a:b5:9b:1c:04:6c:67:92:7c:ae:74:
ba:ed:9c:3b:f4:37:c0:9f:f6:e8:fb:bb:59:ab:ca:
7a:14:0d:2f:75:67:83:52:90:11:8f:ca:15:b0:7e:
7b:49:37:d8:6c:72:0e:e7:44:6a:75:0d:e6:06:bf:
26:ad:4b:11:7b:26:ab:a6:5f:42:66:a4:0c:62:73:
33:31:b2:1e:65:a2:48:eb:f5:46:8e:3c:9f:0b:6c:
3e:4e:61:48:a1:c8:ba:c6:a5:37:c2:a0:13:22:6a:
fc:dd:23:db:2f:e2:d3:cb:c7:5a:93:97:04:14:07:
f6:c2:27:dd:96:c5:d5:df:49:e8:26:f1:4b:28:1d:
1f:99:29:2c:70:46:43:39:b4:75:e3:01:4b:b4:b3:
05:7a:35:30:70:8a:e0:b3:4b:67:36:b8:71:b1:f0:
30:bc:86:df:a9:fc:03:69:c3:60:e7:76:cc:61:9f:
f3:bc:a6:0c:d2:1a:ae:58:4a:83:b9:2e:22:a3:8a:
72:5a:2b:e6:61:a1:9f:14:22:d1:1d:ad:00:c5:c7:
75:20:f8:4f:a2:13:5d:7c:30:be:85:09:54:b7:2c:
87:37:87:fe:54:12:da:f9:6c:5d:8b:5b:59:3f:3c:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:8D:22:8A:12:65:60:4F:2D:0E:00:CF:F5:B0:67:5D:2B:C8:87
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_x-NIooSZWBPLQ4Az_WwZ10ryIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.252.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f1:03:a2:48:e0:ca:82:09:d0:50:42:88:ef:e7:7a:05:60:
77:a7:20:84:8b:31:b5:20:2c:3a:d2:70:98:dc:d4:d9:69:b7:
f4:4c:35:4b:14:c8:60:ad:f0:4f:e0:ec:2e:c1:be:be:29:ea:
c4:6e:8d:4b:9d:84:ef:5d:ee:29:c2:eb:3e:d9:ab:66:a8:0c:
57:d7:44:b1:25:bd:32:41:80:90:5b:3f:5f:09:8d:6c:e9:89:
b5:7e:99:f9:d3:f9:8c:2f:47:29:5a:10:5b:4e:aa:91:5f:7b:
89:71:a7:3a:36:1a:89:35:01:0a:df:2b:5e:c3:c5:21:df:bb:
32:15:d3:73:6e:22:cf:47:0b:bb:a3:52:10:59:8a:e5:c9:1f:
30:ac:eb:ad:69:3d:c8:aa:b3:4d:1e:8d:bd:24:69:b2:28:8b:
6d:61:c0:9e:14:c5:a1:06:31:1e:02:61:6d:d5:64:49:c0:1d:
34:59:ff:43:5d:b8:16:f0:0a:67:a9:46:d2:6c:f7:0b:24:15:
c1:24:f1:1b:28:57:68:f1:67:64:8c:73:cc:06:16:af:45:77:
d3:29:a6:73:94:cb:99:c1:c2:b9:03:3d:aa:aa:7e:64:7b:a0:
75:f5:57:2c:bb:6a:ed:79:72:ac:ff:0b:63:92:7f:8f:8e:77:
23:97:58:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSstij+rV0rgFeokDu3hLxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTI4MTE0MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjFmOGQyMjhhMTI2NTYwNGYyZDBlMDBjZmY1YjA2NzVkMmJjODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21/5+qaQM11QvoBA1a15BGnkCrWb
HARsZ5J8rnS67Zw79DfAn/bo+7tZq8p6FA0vdWeDUpARj8oVsH57STfYbHIO50Rq
dQ3mBr8mrUsReyarpl9CZqQMYnMzMbIeZaJI6/VGjjyfC2w+TmFIoci6xqU3wqAT
Imr83SPbL+LTy8dak5cEFAf2wifdlsXV30noJvFLKB0fmSkscEZDObR14wFLtLMF
ejUwcIrgs0tnNrhxsfAwvIbfqfwDacNg53bMYZ/zvKYM0hquWEqDuS4io4pyWivm
YaGfFCLRHa0Axcd1IPhPohNdfDC+hQlUtyyHN4f+VBLa+Wxdi1tZPzxkgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8fjSKKEmVgTy0OAM/1sGddK8iHMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvX3gtTklvb1NaV0JQTFE0QXpfV3daMTByeUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbD8MA0G
CSqGSIb3DQEBCwUAA4IBAQCr8QOiSODKggnQUEKI7+d6BWB3pyCEizG1ICw60nCY
3NTZabf0TDVLFMhgrfBP4Owuwb6+KerEbo1LnYTvXe4pwus+2atmqAxX10SxJb0y
QYCQWz9fCY1s6Ym1fpn50/mML0cpWhBbTqqRX3uJcac6NhqJNQEK3ytew8Uh37sy
FdNzbiLPRwu7o1IQWYrlyR8wrOutaT3IqrNNHo29JGmyKIttYcCeFMWhBjEeAmFt
1WRJwB00Wf9DXbgW8ApnqUbSbPcLJBXBJPEbKFdo8WdkjHPMBhavRXfTKaZzlMuZ
wcK5Az2qqn5ke6B19Vcsu2rteXKs/wtjkn+Pjncjl1iY
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:34:49 2025 by rpki-client