Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/yeZINMdHxKtAx84jjDvB1ZY5bQ4.roa
File: yeZINMdHxKtAx84jjDvB1ZY5bQ4.roa (raw, json)
Hash identifier: AeaAgMvOCfTG28DdNWpKJtyuwJZFlXF8mSh8PhainUw=
Subject key identifier: C9:E6:48:34:C7:47:C4:AB:40:C7:CE:23:8C:3B:C1:D5:96:39:6D:0E
Certificate issuer: /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial: 018CC64B5EE84895A37F774AF4E54EBE9136
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/yeZINMdHxKtAx84jjDvB1ZY5bQ4.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213402
IP address blocks: 195.216.230.0/24 maxlen: 24
2a02:e3c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5e:e8:48:95:a3:7f:77:4a:f4:e5:4e:be:91:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9e64834c747c4ab40c7ce238c3bc1d596396d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:94:d7:e8:34:ba:ed:be:7a:ba:28:10:55:
75:d6:7c:54:b8:fb:cb:07:ad:66:1d:07:85:6d:49:
8e:b4:3f:d5:87:36:14:a1:e0:0f:52:ae:fd:85:fc:
0e:b0:91:2b:87:d0:11:a1:a9:4e:1d:77:45:d9:2e:
be:c2:b8:08:bd:7a:e2:55:77:3f:68:ad:39:47:eb:
f8:16:6c:7e:4e:db:41:27:bb:a7:b0:a1:5e:83:a3:
56:67:67:ab:8c:b4:b9:d0:3f:bd:a7:2a:2b:0e:9b:
a7:a5:9e:90:c3:58:77:42:2d:93:8f:e9:17:92:f7:
7a:7f:50:61:38:04:a3:5d:f4:1a:49:3e:8f:c5:86:
1e:b1:95:87:c5:fb:da:fa:66:05:29:de:de:5a:de:
99:46:86:29:2a:06:e7:41:9e:73:43:c7:61:e2:59:
7d:a3:1b:5d:75:cb:4b:40:2f:91:a1:4e:44:e4:c8:
a1:b9:71:75:eb:e8:c8:d1:59:76:b7:92:95:12:ff:
c1:f5:6f:2c:75:fd:e6:f8:e8:80:66:be:b3:6c:c0:
ec:27:f2:20:53:05:68:17:e4:72:b5:36:d2:35:73:
a7:bb:a2:f1:e7:c9:98:64:7f:bb:29:15:55:f6:fe:
bc:45:9b:eb:67:23:b8:63:27:be:ff:9e:64:fe:46:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:48:34:C7:47:C4:AB:40:C7:CE:23:8C:3B:C1:D5:96:39:6D:0E
X509v3 Authority Key Identifier:
keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/yeZINMdHxKtAx84jjDvB1ZY5bQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.230.0/24
IPv6:
2a02:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:2e:30:0c:3d:d6:42:8f:80:27:d1:75:02:d9:24:b6:b0:29:
22:e7:0c:d5:fc:b8:86:71:0d:66:6c:9c:9a:12:23:27:d5:c6:
59:c5:20:34:ec:48:cb:cc:3a:a6:2a:08:cb:ef:d7:a3:67:2a:
52:16:9f:93:84:79:e1:93:0b:ab:27:c3:8b:cb:17:00:51:36:
ca:49:3a:6e:c6:10:63:ee:da:23:02:86:0a:ed:34:36:c9:41:
72:65:66:49:fd:91:5a:ad:f7:2d:d2:30:ae:1c:84:90:18:1b:
43:fe:fc:89:a8:d5:00:2c:79:6e:05:a7:41:7d:f5:05:4f:40:
ea:04:4f:13:63:26:e8:f9:be:de:0a:55:cb:2d:1c:24:3b:4a:
92:ac:00:91:cf:25:00:25:a8:d7:6c:a1:1a:f5:79:5f:09:a2:
a3:35:ea:19:58:11:91:9a:ad:ae:16:6d:25:27:ea:97:29:77:
bd:17:54:8d:ff:1e:aa:3f:dd:df:a5:9c:96:54:3c:1d:9f:40:
a4:47:54:6d:b7:0b:fd:c3:71:3c:da:c2:6b:45:6b:5a:82:c5:
fb:e6:41:db:0f:d1:36:ec:46:67:45:ed:18:c8:40:4b:65:22:
fa:e0:3e:1d:2c:a3:4b:ce:f2:66:d4:78:82:c3:25:f8:eb:7a:
8f:33:ac:05
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGS17oSJWjf3dK9OVOvpE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZjRjYjhjNTIwMmNjNTM1ZWRhZmQyMGFjYjZhODA1MDJl
NGZkMjkwHhcNMjQwMTAxMTgzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWU2NDgzNGM3NDdjNGFiNDBjN2NlMjM4YzNiYzFkNTk2Mzk2ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqSU1+g0uu2+erooEFV11nxUuPvL
B61mHQeFbUmOtD/VhzYUoeAPUq79hfwOsJErh9ARoalOHXdF2S6+wrgIvXriVXc/
aK05R+v4Fmx+TttBJ7unsKFeg6NWZ2erjLS50D+9pyorDpunpZ6Qw1h3Qi2Tj+kX
kvd6f1BhOASjXfQaST6PxYYesZWHxfva+mYFKd7eWt6ZRoYpKgbnQZ5zQ8dh4ll9
oxtddctLQC+RoU5E5MihuXF16+jI0Vl2t5KVEv/B9W8sdf3m+OiAZr6zbMDsJ/Ig
UwVoF+RytTbSNXOnu6Lx58mYZH+7KRVV9v68RZvrZyO4Yye+/55k/kakrwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMnmSDTHR8SrQMfOI4w7wdWWOW0OMB8GA1UdIwQY
MBaAFPf0y4xSAsxTXtr9IKy2qAUC5P0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMt
Y2YzYmRiMzJmZDY0LzEveWVaSU5NZEh4S3RBeDg0ampEdkIxWlk1YlE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMtY2YzYmRiMzJmZDY0
LzEvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw9jmMA0E
AgACMAcDBQMqAuPAMA0GCSqGSIb3DQEBCwUAA4IBAQAJLjAMPdZCj4An0XUC2SS2
sCki5wzV/LiGcQ1mbJyaEiMn1cZZxSA07EjLzDqmKgjL79ejZypSFp+ThHnhkwur
J8OLyxcAUTbKSTpuxhBj7tojAoYK7TQ2yUFyZWZJ/ZFarfct0jCuHISQGBtD/vyJ
qNUALHluBadBffUFT0DqBE8TYybo+b7eClXLLRwkO0qSrACRzyUAJajXbKEa9Xlf
CaKjNeoZWBGRmq2uFm0lJ+qXKXe9F1SN/x6qP93fpZyWVDwdn0CkR1Rttwv9w3E8
2sJrRWtagsX75kHbD9E27EZnRe0YyEBLZSL64D4dLKNLzvJm1HiCwyX463qPM6wF
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:54 2025 by rpki-client