Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q9ftJkz4TKa4zEi-g5xwaIXjWoA.roa
File: Q9ftJkz4TKa4zEi-g5xwaIXjWoA.roa (raw, json)
Hash identifier: Ud8LDY9LZbwlMEvNIyrNltgmG7c3N/yd9C4bShgNEec=
Subject key identifier: 43:D7:ED:26:4C:F8:4C:A6:B8:CC:48:BE:83:9C:70:68:85:E3:5A:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01927AE48E85FEC808861810F85C4A0B3E5A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q9ftJkz4TKa4zEi-g5xwaIXjWoA.roa
Signing time: Fri 11 Oct 2024 09:24:11 +0000
ROA not before: Fri 11 Oct 2024 09:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 37.202.214.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:e4:8e:85:fe:c8:08:86:18:10:f8:5c:4a:0b:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 11 09:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43d7ed264cf84ca6b8cc48be839c706885e35a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:e5:39:8d:48:63:43:0e:4d:ab:e5:41:b8:
a5:46:9a:69:2b:ec:79:7d:c6:54:15:49:f1:5d:2e:
5d:2f:94:57:a6:5a:d1:c7:df:6d:4f:ea:ae:60:eb:
4a:bc:05:a2:00:76:19:d4:21:b8:21:c5:72:54:81:
97:26:28:19:1b:76:50:5a:3f:77:fe:42:0c:a8:08:
9c:40:70:c8:52:32:1f:08:8d:f1:1d:cb:8a:81:72:
7f:87:ed:8a:0c:b4:84:cb:76:55:a7:f9:f0:52:8f:
bb:4c:83:b5:e7:bf:7e:01:bb:af:02:62:7b:64:d0:
f9:28:2a:60:ff:b8:2a:44:0a:02:e7:d4:2f:4a:a8:
32:a5:23:38:34:e6:2a:c5:d7:8b:c4:77:86:a2:ed:
34:74:62:d1:f6:a7:20:35:67:54:76:37:5e:b6:fd:
c2:27:e3:ce:d0:82:ff:09:38:d6:6f:99:87:58:d3:
e8:4d:37:03:d0:70:62:ce:82:48:41:2a:e7:54:8c:
b7:e0:6e:40:ba:a1:bc:5d:9f:0d:67:7b:ce:85:d6:
1a:c9:cc:48:c0:9b:56:10:d1:bf:1b:16:d4:a5:f7:
5c:e5:15:4c:d1:c4:d9:b5:f6:b5:62:f8:d7:58:ce:
99:e5:d6:c2:f4:a1:46:4d:5e:10:d6:60:5d:db:80:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:ED:26:4C:F8:4C:A6:B8:CC:48:BE:83:9C:70:68:85:E3:5A:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q9ftJkz4TKa4zEi-g5xwaIXjWoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.214.0/23
Signature Algorithm: sha256WithRSAEncryption
34:09:5f:10:b8:4e:69:64:fc:01:73:d8:71:f6:95:ef:10:38:
9f:2a:59:25:df:bd:7e:86:b0:d6:e9:cb:2e:27:c8:fc:01:a2:
d1:a7:54:a7:62:65:91:8c:f2:c6:0f:e7:ea:5e:3c:c4:04:75:
50:d9:de:8d:d1:d1:ed:c3:f7:b2:a9:03:cd:a2:e5:e5:28:77:
d8:c0:bd:e7:85:1a:71:c0:a3:e6:3f:7e:4d:88:02:43:a7:c8:
2f:1d:36:f5:7d:77:87:ba:3a:19:45:c2:da:66:62:af:fd:45:
9f:a1:7d:2d:8a:6a:38:96:2e:3c:00:ad:45:42:64:98:f7:df:
fd:59:54:a1:c7:dc:fb:10:69:0d:40:b1:72:11:5f:95:60:42:
34:94:5f:79:4b:bc:c0:eb:0c:2c:4b:d0:4c:93:72:dd:eb:09:
8c:2b:71:69:cc:68:06:be:00:cb:e8:a5:8a:ef:8b:69:b6:bb:
2b:86:66:b9:7c:b4:43:b6:43:20:08:c6:b4:18:46:2e:1f:48:
dd:5c:0c:80:51:b3:81:06:2f:ae:5a:e7:8e:f4:1b:cf:ab:71:
fb:46:d0:28:f3:41:61:bd:e2:18:9f:b7:24:88:54:39:65:b2:
f1:bc:52:73:91:c0:1a:e9:91:7f:7b:2d:c8:00:66:58:2e:19:
4c:7a:90:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJ65I6F/sgIhhgQ+FxKCz5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMDExMDkyNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2Q3ZWQyNjRjZjg0Y2E2YjhjYzQ4YmU4MzljNzA2ODg1ZTM1YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjzlOY1IY0MOTavlQbilRpppK+x5
fcZUFUnxXS5dL5RXplrRx99tT+quYOtKvAWiAHYZ1CG4IcVyVIGXJigZG3ZQWj93
/kIMqAicQHDIUjIfCI3xHcuKgXJ/h+2KDLSEy3ZVp/nwUo+7TIO1579+AbuvAmJ7
ZND5KCpg/7gqRAoC59QvSqgypSM4NOYqxdeLxHeGou00dGLR9qcgNWdUdjdetv3C
J+PO0IL/CTjWb5mHWNPoTTcD0HBizoJIQSrnVIy34G5AuqG8XZ8NZ3vOhdYaycxI
wJtWENG/GxbUpfdc5RVM0cTZtfa1YvjXWM6Z5dbC9KFGTV4Q1mBd24B3/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPX7SZM+EymuMxIvoOccGiF41qAMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUTlmdEprejRUS2E0ekVpLWc1eHdhSVhqV29BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJcrWMA0G
CSqGSIb3DQEBCwUAA4IBAQA0CV8QuE5pZPwBc9hx9pXvEDifKlkl371+hrDW6csu
J8j8AaLRp1SnYmWRjPLGD+fqXjzEBHVQ2d6N0dHtw/eyqQPNouXlKHfYwL3nhRpx
wKPmP35NiAJDp8gvHTb1fXeHujoZRcLaZmKv/UWfoX0timo4li48AK1FQmSY99/9
WVShx9z7EGkNQLFyEV+VYEI0lF95S7zA6wwsS9BMk3Ld6wmMK3FpzGgGvgDL6KWK
74tptrsrhma5fLRDtkMgCMa0GEYuH0jdXAyAUbOBBi+uWueO9BvPq3H7RtAo80Fh
veIYn7ckiFQ5ZbLxvFJzkcAa6ZF/ey3IAGZYLhlMepDO
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:52 2025 by rpki-client