Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nQ01TE9bkgT7MHtnfuIKieMDQVs.roa
File: nQ01TE9bkgT7MHtnfuIKieMDQVs.roa (raw, json)
Hash identifier: PQllWkaIIrk9fGOMmKB59IFgvI4YVZ3f4SJIjaMjjZk=
Subject key identifier: 9D:0D:35:4C:4F:5B:92:04:FB:30:7B:67:7E:E2:0A:89:E3:03:41:5B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6DBABE8C82F792039B7D6B45BFDC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nQ01TE9bkgT7MHtnfuIKieMDQVs.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214361
IP address blocks: 178.239.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 10:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6d:ba:be:8c:82:f7:92:03:9b:7d:6b:45:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d0d354c4f5b9204fb307b677ee20a89e303415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:f3:93:4c:15:1e:89:26:19:7e:4d:4a:4d:
00:c9:02:75:ed:16:cb:16:30:89:b2:60:ed:8e:35:
1b:60:ac:b6:70:7a:15:49:33:7d:ba:d4:63:e9:b5:
8f:1e:5a:bb:0e:84:b3:03:6a:57:a9:d8:78:29:6d:
ff:f5:0e:e6:67:3a:1a:52:26:4a:23:73:86:17:d4:
ec:8d:1b:3e:33:c0:05:e4:02:63:76:e8:fc:e2:23:
db:90:fc:d9:f1:e6:3c:3b:de:78:4e:87:d4:18:0a:
ef:0d:ef:8b:ac:9c:6d:72:3f:d8:e8:88:6f:85:25:
91:7d:6a:ab:7e:73:7e:d6:1a:30:b2:fc:1b:27:5b:
64:bd:60:9a:08:ed:71:9c:03:3f:0a:84:c2:8c:77:
64:7e:39:87:b5:11:04:bc:0c:68:06:6a:b5:ab:5e:
f3:74:59:6f:52:b5:9a:e0:1e:03:e7:de:6a:71:29:
5f:82:77:50:f7:3f:f3:6d:41:c0:07:23:6a:5d:fd:
24:72:3a:66:04:51:0a:48:84:03:f9:fc:f9:d6:bb:
c0:1d:13:61:70:00:34:60:cc:29:b5:08:0b:8f:ed:
6f:40:60:4a:db:44:19:ce:86:38:7d:8f:fd:7b:ba:
78:3d:3b:a0:c6:04:6c:35:dd:d7:c4:17:66:4c:45:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:35:4C:4F:5B:92:04:FB:30:7B:67:7E:E2:0A:89:E3:03:41:5B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nQ01TE9bkgT7MHtnfuIKieMDQVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cc:73:fc:38:8d:ee:87:90:a7:00:24:d3:c2:b5:b3:5a:c0:
92:61:1f:15:51:fd:5e:e6:3f:65:cc:56:4c:d0:17:62:b7:22:
34:74:49:46:59:10:46:63:31:72:ba:60:f7:3c:8b:d9:ff:71:
bb:42:ac:fc:35:02:21:fa:e0:da:ae:c4:8b:ee:ba:e0:a5:49:
09:97:40:79:5f:bc:3d:9a:90:0d:77:bb:81:7f:5d:3a:cc:a9:
36:f3:43:3e:6a:4b:28:c7:60:a5:9f:5b:c3:63:ee:83:d0:08:
28:3e:2d:c7:21:e7:77:a3:ff:6f:71:b7:6e:6d:d2:64:a8:86:
33:5c:5f:60:1c:35:d4:1a:2b:a0:79:1e:ff:71:3d:a8:9d:f4:
c3:c2:f0:de:9b:b3:c7:1f:da:56:80:1b:cb:58:8f:cf:81:a2:
6c:a7:73:1c:32:38:e8:ac:d6:47:c6:82:d8:c8:54:a3:36:b8:
ab:3b:70:58:0f:f3:33:72:6d:ed:89:6b:37:78:12:03:ab:d5:
5a:82:84:43:2d:1b:c8:06:56:5a:27:98:48:16:38:07:69:82:
56:f3:cc:16:11:7e:c7:d6:01:5d:7c:c7:73:04:69:f8:5e:b9:
d9:29:e9:ee:7a:97:c1:4b:fe:23:25:b8:73:1d:fd:8f:80:12:
e2:32:14:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+m26voyC95IDm31rRb/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwMTAxMDM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDBkMzU0YzRmNWI5MjA0ZmIzMDdiNjc3ZWUyMGE4OWUzMDM0MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBnzk0wVHokmGX5NSk0AyQJ17RbL
FjCJsmDtjjUbYKy2cHoVSTN9utRj6bWPHlq7DoSzA2pXqdh4KW3/9Q7mZzoaUiZK
I3OGF9TsjRs+M8AF5AJjduj84iPbkPzZ8eY8O954TofUGArvDe+LrJxtcj/Y6Ihv
hSWRfWqrfnN+1howsvwbJ1tkvWCaCO1xnAM/CoTCjHdkfjmHtREEvAxoBmq1q17z
dFlvUrWa4B4D595qcSlfgndQ9z/zbUHAByNqXf0kcjpmBFEKSIQD+fz51rvAHRNh
cAA0YMwptQgLj+1vQGBK20QZzoY4fY/9e7p4PTugxgRsNd3XxBdmTEUj3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ0NNUxPW5IE+zB7Z37iConjA0FbMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvblEwMVRFOWJrZ1Q3TUh0bmZ1SUtpZU1EUVZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+SMA0G
CSqGSIb3DQEBCwUAA4IBAQALzHP8OI3uh5CnACTTwrWzWsCSYR8VUf1e5j9lzFZM
0BdityI0dElGWRBGYzFyumD3PIvZ/3G7Qqz8NQIh+uDarsSL7rrgpUkJl0B5X7w9
mpANd7uBf106zKk280M+aksox2Cln1vDY+6D0AgoPi3HIed3o/9vcbdubdJkqIYz
XF9gHDXUGiugeR7/cT2onfTDwvDem7PHH9pWgBvLWI/PgaJsp3McMjjorNZHxoLY
yFSjNrirO3BYD/Mzcm3tiWs3eBIDq9VagoRDLRvIBlZaJ5hIFjgHaYJW88wWEX7H
1gFdfMdzBGn4XrnZKenuepfBS/4jJbhzHf2PgBLiMhTM
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:17:24 2025 by rpki-client