Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/h9j-neDkJbt9q6GPQPBgDTpWQ5M.roa
File: h9j-neDkJbt9q6GPQPBgDTpWQ5M.roa (raw, json)
Hash identifier: kU49mDuKfpxXShBoejhMfrybn+fq9OcInh1DH14nwKg=
Subject key identifier: 87:D8:FE:9D:E0:E4:25:BB:7D:AB:A1:8F:40:F0:60:0D:3A:56:43:93
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 018CC72766F64B717C7744556529A4817E93
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/h9j-neDkJbt9q6GPQPBgDTpWQ5M.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50599
IP address blocks: 91.244.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:66:f6:4b:71:7c:77:44:55:65:29:a4:81:7e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87d8fe9de0e425bb7daba18f40f0600d3a564393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:17:1a:52:ff:0d:aa:ae:cd:ec:b3:a2:4b:
2f:4d:bf:86:d6:25:ab:ed:c3:80:3a:38:0f:ab:cf:
61:33:cb:66:fe:9d:90:b0:2d:ce:3e:fd:9f:5b:36:
3d:38:37:f3:f0:65:f8:d0:45:92:d4:3c:d8:b4:91:
cc:12:72:33:76:d7:33:33:68:2b:8a:29:b8:96:73:
14:88:c7:fa:29:5c:61:e9:56:22:d7:73:9d:65:8e:
2e:96:95:7d:e3:8e:dc:9b:9b:5f:a8:9f:78:8c:69:
82:12:b5:f1:dd:07:08:8c:57:2c:74:b9:18:a4:1e:
35:41:15:8d:53:74:ad:8f:67:41:2f:3c:91:da:db:
6b:75:8f:ee:be:b0:2a:98:10:2f:2c:1d:b9:d1:b3:
5e:99:4f:19:de:17:93:fa:2d:57:4f:1b:cf:b8:cf:
ac:53:6c:d2:55:21:7c:76:cd:b7:1e:bb:85:86:fb:
17:7e:c4:a2:d7:ec:db:cc:22:c2:08:f3:4b:b1:d1:
01:ac:62:48:d3:af:bb:80:c0:0b:d1:09:42:ff:e9:
d0:49:11:e9:8a:05:7b:92:e4:ec:88:5b:04:84:1a:
b0:55:1e:28:57:e0:00:09:c2:2b:51:3a:cb:2d:03:
b8:b8:f7:10:ac:65:8d:34:a7:cf:6c:72:71:1d:58:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D8:FE:9D:E0:E4:25:BB:7D:AB:A1:8F:40:F0:60:0D:3A:56:43:93
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/h9j-neDkJbt9q6GPQPBgDTpWQ5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e1:80:93:86:41:b8:18:c4:b1:be:e9:01:a3:51:b6:82:15:
51:a1:aa:20:a6:f5:20:e6:1b:d0:7a:5b:5a:a1:fd:d3:eb:7a:
61:c1:ad:16:e9:86:70:69:f4:78:c2:8b:eb:10:45:53:f6:48:
23:48:dd:f3:5f:b0:69:6b:cc:1f:58:0c:0c:90:29:ea:d4:dd:
e5:db:e8:3d:7e:33:c1:c8:a1:8a:a8:2a:79:9e:04:c9:9d:99:
3e:db:e0:26:ca:8e:f7:cc:5a:99:19:43:14:68:27:c3:d2:b2:
a6:fc:3f:3a:fa:26:ea:fe:1d:39:1c:83:fb:cb:f2:91:88:e5:
fd:e8:a3:85:9d:0f:7a:bd:e0:62:46:7c:d5:99:30:f3:63:8b:
df:e8:96:12:b2:f9:11:e0:67:99:fa:74:cd:aa:01:1c:cc:84:
c9:33:58:0d:05:0c:34:8b:15:64:cd:7f:59:fd:c2:b2:28:a6:
e2:8f:52:6c:64:92:d9:4a:c9:7c:49:6e:41:67:11:64:36:35:
89:60:ca:1b:1c:b6:cb:6f:0b:58:1f:32:a9:19:6f:6f:cd:99:
bd:6c:22:6f:f3:b0:a2:e3:f1:2a:14:7d:8c:ed:e3:2e:6b:54:
2b:80:18:1b:63:71:6d:3c:6a:b9:1d:23:45:31:5d:03:b5:ad:
5c:07:18:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ2b2S3F8d0RVZSmkgX6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGUzMDgwNzkyY2ZhOWYxNWYwM2ViM2ZkNzZjYTY4Yzhj
ZGUyMjAwHhcNMjQwMTAxMjIzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2Q4ZmU5ZGUwZTQyNWJiN2RhYmExOGY0MGYwNjAwZDNhNTY0MzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXYXGlL/DaquzeyzoksvTb+G1iWr
7cOAOjgPq89hM8tm/p2QsC3OPv2fWzY9ODfz8GX40EWS1DzYtJHMEnIzdtczM2gr
iim4lnMUiMf6KVxh6VYi13OdZY4ulpV9447cm5tfqJ94jGmCErXx3QcIjFcsdLkY
pB41QRWNU3Stj2dBLzyR2ttrdY/uvrAqmBAvLB250bNemU8Z3heT+i1XTxvPuM+s
U2zSVSF8ds23HruFhvsXfsSi1+zbzCLCCPNLsdEBrGJI06+7gMAL0QlC/+nQSRHp
igV7kuTsiFsEhBqwVR4oV+AACcIrUTrLLQO4uPcQrGWNNKfPbHJxHVhYGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIfY/p3g5CW7fauhj0DwYA06VkOTMB8GA1UdIwQY
MBaAFJ0OMIB5LPqfFfA+s/12ymjIzeIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYt
MjZmMzkzODQ4NzRmLzEvaDlqLW5lRGtKYnQ5cTZHUFFQQmdEVHBXUTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYtMjZmMzkzODQ4NzRm
LzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/ThMA0G
CSqGSIb3DQEBCwUAA4IBAQCl4YCThkG4GMSxvukBo1G2ghVRoaogpvUg5hvQelta
of3T63phwa0W6YZwafR4wovrEEVT9kgjSN3zX7Bpa8wfWAwMkCnq1N3l2+g9fjPB
yKGKqCp5ngTJnZk+2+Amyo73zFqZGUMUaCfD0rKm/D86+ibq/h05HIP7y/KRiOX9
6KOFnQ96veBiRnzVmTDzY4vf6JYSsvkR4GeZ+nTNqgEczITJM1gNBQw0ixVkzX9Z
/cKyKKbij1JsZJLZSsl8SW5BZxFkNjWJYMobHLbLbwtYHzKpGW9vzZm9bCJv87Ci
4/EqFH2M7eMua1QrgBgbY3FtPGq5HSNFMV0Dta1cBxjz
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:52 2025 by rpki-client