Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/D75UCB7SzvAN5hU8La4QaivvFAo.roa
File: D75UCB7SzvAN5hU8La4QaivvFAo.roa (raw, json)
Hash identifier: QM7gDS6fFPQ5OkHEbhzfK5rqaG/RxyId4cyl9oK6/Dg=
Subject key identifier: 0F:BE:54:08:1E:D2:CE:F0:0D:E6:15:3C:2D:AE:10:6A:2B:EF:14:0A
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 019441417F867D49F0EF4F73D6CC46649027
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/D75UCB7SzvAN5hU8La4QaivvFAo.roa
Signing time: Tue 07 Jan 2025 14:53:19 +0000
ROA not before: Tue 07 Jan 2025 14:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16789
IP address blocks: 94.127.118.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 08 Jan 2025 17:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:41:7f:86:7d:49:f0:ef:4f:73:d6:cc:46:64:90:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Jan 7 14:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fbe54081ed2cef00de6153c2dae106a2bef140a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9c:b1:37:24:09:f3:90:89:cf:e9:8c:32:a1:
36:13:65:10:dc:5a:dc:e6:79:e7:c7:18:39:d0:f8:
ba:a6:97:f6:cd:9f:50:3e:b2:e2:5b:ea:4e:ba:6b:
7f:37:6c:72:65:41:68:4b:cf:ef:c4:af:b1:2d:0f:
56:26:e8:8c:b9:b9:09:77:c6:13:8f:52:e4:90:31:
79:2f:f4:2a:f4:a6:52:42:cd:13:7d:6e:ee:9c:3e:
71:03:6e:87:de:2b:2d:e6:5c:04:77:09:ef:19:3f:
60:3f:ac:6f:d7:dd:0a:fc:94:a6:f8:23:48:79:19:
5b:ab:ea:e0:5b:1f:c6:23:82:9c:e2:87:8f:7e:a3:
7d:c0:1a:1d:05:37:91:a9:e8:5a:be:fb:0e:dd:81:
7b:53:b4:3a:7e:5b:5e:61:da:99:86:77:a7:f4:22:
9f:e0:ac:8b:dc:3a:ae:97:12:6f:de:72:6a:24:25:
27:4b:46:a0:62:2c:a1:00:fa:31:e1:bf:f4:c2:98:
d7:2b:d4:b1:7e:51:cd:9e:12:96:02:98:5a:d4:84:
76:e9:0e:ee:e8:9e:e1:fb:14:d7:fd:39:d0:a3:16:
11:34:b5:2b:a1:d5:10:b9:de:01:16:01:60:0f:11:
04:69:0a:42:50:39:5d:eb:88:15:75:a0:23:5f:0e:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:54:08:1E:D2:CE:F0:0D:E6:15:3C:2D:AE:10:6A:2B:EF:14:0A
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/D75UCB7SzvAN5hU8La4QaivvFAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.118.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:ec:9d:5b:5e:dc:9a:d5:22:64:c8:5f:0b:9b:a6:8b:25:d5:
f5:b1:51:2c:70:6a:d4:ff:43:c6:13:57:2e:c9:72:0f:21:20:
68:53:5c:a2:ed:1f:c0:6a:da:8b:1a:06:fe:53:93:1a:57:5d:
f5:94:12:dd:2e:4a:9e:36:2d:d3:ae:93:50:35:ce:c5:5d:2d:
c8:0c:c9:04:c1:47:2b:c5:9c:ca:a3:6c:9d:4a:cd:57:0f:34:
05:f8:3e:95:06:da:c2:d8:09:8f:5e:37:80:e0:e6:c2:7a:15:
2b:a0:a3:0c:45:62:63:72:cd:44:e5:5d:3e:10:1f:a1:d9:ac:
ca:ef:94:66:f7:83:e8:31:86:d8:7e:cb:6d:5a:1b:20:d9:da:
8e:19:b5:e1:79:c1:5d:4d:62:84:3b:96:85:21:08:af:5f:b0:
16:62:18:5f:97:a9:00:33:2f:55:2f:54:77:78:85:91:84:61:
ac:28:2d:bb:ea:42:af:61:85:bf:39:0a:d5:ac:f9:c5:5c:aa:
1c:ac:fb:3e:25:a5:18:13:ff:ec:55:4a:c9:04:06:7e:d7:87:
0f:60:b8:7e:37:73:b5:52:4c:a7:dc:52:4e:49:08:38:25:af:
47:6d:96:4f:3d:bc:18:28:05:09:49:64:d1:c1:23:ed:4b:7f:
05:15:f2:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRBQX+GfUnw709z1sxGZJAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzFkYmVkMDg5N2NjZTg1YzE0ODM3MWI0N2NjODA3ODJl
NWU3MmIwHhcNMjUwMTA3MTQ1MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmJlNTQwODFlZDJjZWYwMGRlNjE1M2MyZGFlMTA2YTJiZWYxNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZyxNyQJ85CJz+mMMqE2E2UQ3Frc
5nnnxxg50Pi6ppf2zZ9QPrLiW+pOumt/N2xyZUFoS8/vxK+xLQ9WJuiMubkJd8YT
j1LkkDF5L/Qq9KZSQs0TfW7unD5xA26H3ist5lwEdwnvGT9gP6xv190K/JSm+CNI
eRlbq+rgWx/GI4Kc4oePfqN9wBodBTeRqehavvsO3YF7U7Q6flteYdqZhnen9CKf
4KyL3DqulxJv3nJqJCUnS0agYiyhAPox4b/0wpjXK9SxflHNnhKWApha1IR26Q7u
6J7h+xTX/TnQoxYRNLUrodUQud4BFgFgDxEEaQpCUDld64gVdaAjXw7cKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA++VAge0s7wDeYVPC2uEGor7xQKMB8GA1UdIwQY
MBaAFHMx2+0Il8zoXBSDcbR8yAeC5ecrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmIt
MDQ2NTA3MmU0MWEzLzEvRDc1VUNCN1N6dkFONWhVOExhNFFhaXZ2RkFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmItMDQ2NTA3MmU0MWEz
LzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXn92MA0G
CSqGSIb3DQEBCwUAA4IBAQA87J1bXtya1SJkyF8Lm6aLJdX1sVEscGrU/0PGE1cu
yXIPISBoU1yi7R/AatqLGgb+U5MaV131lBLdLkqeNi3TrpNQNc7FXS3IDMkEwUcr
xZzKo2ydSs1XDzQF+D6VBtrC2AmPXjeA4ObCehUroKMMRWJjcs1E5V0+EB+h2azK
75Rm94PoMYbYfsttWhsg2dqOGbXhecFdTWKEO5aFIQivX7AWYhhfl6kAMy9VL1R3
eIWRhGGsKC276kKvYYW/OQrVrPnFXKocrPs+JaUYE//sVUrJBAZ+14cPYLh+N3O1
Ukyn3FJOSQg4Ja9HbZZPPbwYKAUJSWTRwSPtS38FFfIq
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:51:26 2025 by rpki-client