Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/_MXfF5fmUkqnCjyIDWcLeSSnK_s.roa
File: _MXfF5fmUkqnCjyIDWcLeSSnK_s.roa (raw, json)
Hash identifier: rBQ1QvGrIvG0sspGiT7EBe0UvF97rt+UJCm3wDjRgqI=
Subject key identifier: FC:C5:DF:17:97:E6:52:4A:A7:0A:3C:88:0D:67:0B:79:24:A7:2B:FB
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 018CC3B70BDDA83839B8870AB70AAA4B1672
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/_MXfF5fmUkqnCjyIDWcLeSSnK_s.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 193.16.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0b:dd:a8:38:39:b8:87:0a:b7:0a:aa:4b:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcc5df1797e6524aa70a3c880d670b7924a72bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:c3:bd:ed:68:0a:49:03:b3:0f:d5:67:08:
02:a5:36:c7:93:30:67:5e:2a:97:e2:97:d2:78:f1:
bd:bb:9f:58:16:13:29:3d:db:db:65:8d:93:cf:94:
6e:d5:bf:76:e6:27:20:76:1d:98:5f:7f:9e:58:40:
84:12:5b:b3:4e:e0:e5:cf:c1:af:d5:83:21:d2:46:
5d:33:04:04:2c:e4:17:8e:fa:26:f4:58:16:5c:ab:
40:06:1e:67:c2:8c:24:ec:47:a0:d8:29:f5:14:19:
fa:23:10:4e:70:1e:f9:c9:c9:3d:40:b6:08:81:05:
3f:14:15:31:01:e0:1a:d0:18:18:71:1b:17:4f:c6:
6c:0b:1b:4d:3d:3f:d2:be:18:66:8e:bd:30:93:d5:
83:c1:42:1c:c4:5f:f4:1a:a9:95:60:10:e2:70:c3:
41:be:41:fb:a3:2a:c6:51:73:0a:44:b7:4c:1b:7f:
e2:af:58:90:de:3d:9b:74:16:d4:39:2c:7d:33:e5:
a8:bd:bd:f6:31:75:fb:6e:13:20:8e:15:de:34:81:
62:99:f3:02:fd:9b:4d:5e:8d:a1:e8:b4:0f:6f:57:
7c:d3:8e:01:d4:b2:48:5e:ad:e7:f9:53:05:94:17:
3a:e3:e4:9f:4d:3b:76:49:1d:c6:89:7d:00:40:dd:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:DF:17:97:E6:52:4A:A7:0A:3C:88:0D:67:0B:79:24:A7:2B:FB
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/_MXfF5fmUkqnCjyIDWcLeSSnK_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
29:86:0a:87:f7:2c:64:c7:8f:6a:71:cf:20:9b:cc:ae:6b:ad:
5d:2a:a4:d9:9a:f3:0c:18:fb:76:af:b3:f2:b8:d1:80:3d:e2:
a1:e9:2e:8a:bc:be:16:77:63:16:55:44:a2:08:f2:b0:12:55:
82:14:79:c1:d4:60:27:d8:09:31:61:1f:bc:68:58:6f:df:cb:
93:27:85:f7:c1:f3:d1:29:70:d1:7c:f5:ec:63:62:73:e3:b0:
79:fe:b7:a3:c0:13:65:93:b8:22:6b:90:3e:a4:ec:9b:55:3f:
31:ee:8c:13:45:54:7e:23:1e:7f:46:a3:63:e8:ad:e1:e0:78:
13:71:d0:e3:a3:60:a8:68:27:71:2e:50:09:d6:c0:a1:7b:53:
4d:e9:eb:2d:a1:3d:ff:5a:95:8c:dd:4d:85:5e:5a:90:44:58:
c3:20:e7:d0:c2:cb:f5:22:7c:6b:01:ad:5b:9e:b2:19:98:6a:
fe:20:fa:8e:63:5b:2c:3b:41:61:62:c7:8a:f4:66:f0:d3:d1:
e4:6c:f3:0e:2d:b0:5a:75:1e:da:ca:56:20:af:c0:f1:50:91:
e8:f3:b3:07:f8:86:51:ec:da:32:8d:b5:c7:cb:64:1a:78:75:
0a:c1:3c:fb:ba:61:55:72:df:53:96:3d:d3:3d:3c:90:fe:72:
59:97:8b:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtwvdqDg5uIcKtwqqSxZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmU3ZmU3YWYyYmE1YTMwNDZlMTc2NDRmYWJlOGYwMzhi
NGU3ZGYwHhcNMjQwMTAxMDYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2M1ZGYxNzk3ZTY1MjRhYTcwYTNjODgwZDY3MGI3OTI0YTcyYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3HDve1oCkkDsw/VZwgCpTbHkzBn
XiqX4pfSePG9u59YFhMpPdvbZY2Tz5Ru1b925icgdh2YX3+eWECEEluzTuDlz8Gv
1YMh0kZdMwQELOQXjvom9FgWXKtABh5nwowk7Eeg2Cn1FBn6IxBOcB75yck9QLYI
gQU/FBUxAeAa0BgYcRsXT8ZsCxtNPT/Svhhmjr0wk9WDwUIcxF/0GqmVYBDicMNB
vkH7oyrGUXMKRLdMG3/ir1iQ3j2bdBbUOSx9M+Wovb32MXX7bhMgjhXeNIFimfMC
/ZtNXo2h6LQPb1d8044B1LJIXq3n+VMFlBc64+SfTTt2SR3GiX0AQN2GrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzF3xeX5lJKpwo8iA1nC3kkpyv7MB8GA1UdIwQY
MBaAFEouf+evK6WjBG4XZE+r6PA4tOffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMt
ZTY3MGEyZDQ3Yjg2LzEvX01YZkY1Zm1Va3FuQ2p5SURXY0xlU1NuS19zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMtZTY3MGEyZDQ3Yjg2
LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRDxMA0G
CSqGSIb3DQEBCwUAA4IBAQAphgqH9yxkx49qcc8gm8yua61dKqTZmvMMGPt2r7Py
uNGAPeKh6S6KvL4Wd2MWVUSiCPKwElWCFHnB1GAn2AkxYR+8aFhv38uTJ4X3wfPR
KXDRfPXsY2Jz47B5/rejwBNlk7gia5A+pOybVT8x7owTRVR+Ix5/RqNj6K3h4HgT
cdDjo2CoaCdxLlAJ1sChe1NN6estoT3/WpWM3U2FXlqQRFjDIOfQwsv1InxrAa1b
nrIZmGr+IPqOY1ssO0FhYseK9Gbw09HkbPMOLbBadR7aylYgr8DxUJHo87MH+IZR
7NoyjbXHy2QaeHUKwTz7umFVct9Tlj3TPTyQ/nJZl4tL
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:09 2025 by rpki-client