Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/9_83djMRpTb-ez3oZqaG00v4PQM.roa
File: 9_83djMRpTb-ez3oZqaG00v4PQM.roa (raw, json)
Hash identifier: ZtrkrMNJa4IzxViWHSt0lnz/8x9hKzdTCBt3DpwjdiM=
Subject key identifier: F7:FF:37:76:33:11:A5:36:FE:7B:3D:E8:66:A6:86:D3:4B:F8:3D:03
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 018CC5DBE4CC6DEF8A983886D396520D06A2
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/9_83djMRpTb-ez3oZqaG00v4PQM.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43528
IP address blocks: 91.195.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e4:cc:6d:ef:8a:98:38:86:d3:96:52:0d:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7ff37763311a536fe7b3de866a686d34bf83d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:c1:32:25:bd:52:8d:17:05:e0:39:73:69:
88:c5:14:0a:28:2c:d5:28:c1:84:95:b7:0d:ed:2d:
96:bd:8e:b4:f9:9e:46:5f:57:dd:35:7a:61:23:b4:
95:b9:8c:3d:da:70:85:98:93:1e:77:63:a6:10:fc:
83:15:01:61:51:99:3c:3e:ac:26:d9:b2:d1:1c:4e:
d5:dc:0e:5b:47:68:0b:90:70:7d:41:40:62:a4:0f:
6e:7a:6e:28:4f:65:ce:a0:40:6e:d3:be:85:e2:ae:
5e:9a:b4:ce:00:18:f2:c2:be:b5:29:04:45:32:37:
3a:42:f9:4f:f4:59:db:81:d0:f6:b0:c6:9f:9b:6b:
cc:bc:c4:74:e7:3f:79:2c:26:cb:41:1d:b2:19:65:
b1:7d:e3:79:25:80:bd:12:13:02:0d:18:5f:ff:c1:
1e:7d:72:eb:1f:7d:aa:12:33:d9:44:74:8b:86:9d:
b1:3c:28:37:89:75:f9:e2:9f:71:d1:d3:25:63:4f:
07:ab:38:02:a4:d8:71:0b:41:ef:71:3b:02:6d:5f:
c3:a1:80:97:c8:6e:e2:55:82:1e:dd:78:5b:d1:60:
ea:60:f4:81:1e:32:55:69:95:34:de:84:4e:1d:69:
60:34:18:fa:c5:a3:31:39:bb:86:d2:d2:ac:e6:e2:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FF:37:76:33:11:A5:36:FE:7B:3D:E8:66:A6:86:D3:4B:F8:3D:03
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/9_83djMRpTb-ez3oZqaG00v4PQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.34.0/23
Signature Algorithm: sha256WithRSAEncryption
92:93:15:75:c4:4b:54:b9:48:bb:43:b0:5d:52:c1:41:b9:96:
43:9a:32:bd:0b:53:67:45:aa:35:43:8e:43:66:67:43:cf:0d:
1d:35:33:e0:0c:0f:d0:78:50:96:a7:0d:c7:b8:5f:81:87:4c:
43:80:13:da:d3:d0:83:4b:d6:9a:de:7f:34:08:2e:d7:57:6e:
e9:6d:35:b2:58:58:b6:b4:a7:92:f3:3d:eb:d8:6c:4c:8d:b8:
85:65:ef:d6:f3:d2:a9:5a:f8:a4:61:e1:36:62:37:59:0a:a6:
de:0c:02:b6:a1:10:65:bf:21:19:49:b9:41:ec:70:34:f9:7f:
40:a8:6d:2b:81:e1:e1:0b:64:2a:5a:5d:99:7d:c8:95:d7:b7:
82:da:d1:c7:9f:8d:48:23:15:19:67:02:0d:8f:02:1c:3a:47:
60:ed:d8:a7:14:80:02:9e:b2:66:32:c9:a0:5b:17:f3:be:0b:
e7:17:c9:f1:5d:b0:35:4d:57:21:0f:f6:e7:0d:17:53:c3:63:
c4:28:39:86:9e:1e:08:5b:41:07:f2:1b:0f:e0:3b:12:c2:92:
c0:72:90:27:03:a7:11:10:1a:0e:eb:2c:fb:f9:56:2a:82:f3:
34:d2:9c:3a:c2:03:fc:ae:6a:9d:b2:0c:56:73:91:97:42:bc:
9a:26:2d:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF2+TMbe+KmDiG05ZSDQaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0
NGYzYTgwHhcNMjQwMTAxMTYyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2ZmMzc3NjMzMTFhNTM2ZmU3YjNkZTg2NmE2ODZkMzRiZjgzZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXLBMiW9Uo0XBeA5c2mIxRQKKCzV
KMGElbcN7S2WvY60+Z5GX1fdNXphI7SVuYw92nCFmJMed2OmEPyDFQFhUZk8Pqwm
2bLRHE7V3A5bR2gLkHB9QUBipA9uem4oT2XOoEBu076F4q5emrTOABjywr61KQRF
Mjc6QvlP9FnbgdD2sMafm2vMvMR05z95LCbLQR2yGWWxfeN5JYC9EhMCDRhf/8Ee
fXLrH32qEjPZRHSLhp2xPCg3iXX54p9x0dMlY08HqzgCpNhxC0HvcTsCbV/DoYCX
yG7iVYIe3Xhb0WDqYPSBHjJVaZU03oROHWlgNBj6xaMxObuG0tKs5uITVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPf/N3YzEaU2/ns96GamhtNL+D0DMB8GA1UdIwQY
MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt
ODJlZGVkYTdmZTdhLzEvOV84M2RqTVJwVGItZXozb1pxYUcwMHY0UFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh
LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8MiMA0G
CSqGSIb3DQEBCwUAA4IBAQCSkxV1xEtUuUi7Q7BdUsFBuZZDmjK9C1NnRao1Q45D
ZmdDzw0dNTPgDA/QeFCWpw3HuF+Bh0xDgBPa09CDS9aa3n80CC7XV27pbTWyWFi2
tKeS8z3r2GxMjbiFZe/W89KpWvikYeE2YjdZCqbeDAK2oRBlvyEZSblB7HA0+X9A
qG0rgeHhC2QqWl2ZfciV17eC2tHHn41IIxUZZwINjwIcOkdg7dinFIACnrJmMsmg
WxfzvgvnF8nxXbA1TVchD/bnDRdTw2PEKDmGnh4IW0EH8hsP4DsSwpLAcpAnA6cR
EBoO6yz7+VYqgvM00pw6wgP8rmqdsgxWc5GXQryaJi1H
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:33:59 2025 by rpki-client