Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/X77Jvu5PCZZM6bPzm8SKilCV8_k.roa
File: X77Jvu5PCZZM6bPzm8SKilCV8_k.roa (raw, json)
Hash identifier: OOTj5JJwFKpiA7vBi2Iuqf7amRowcOAU3vLq3gEP+Fc=
Subject key identifier: 5F:BE:C9:BE:EE:4F:09:96:4C:E9:B3:F3:9B:C4:8A:8A:50:95:F3:F9
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 018CCA2B29201E3CC4C0707769833A656045
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/X77Jvu5PCZZM6bPzm8SKilCV8_k.roa
Signing time: Tue 02 Jan 2024 12:34:35 +0000
ROA not before: Tue 02 Jan 2024 12:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 193.218.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 09:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:29:20:1e:3c:c4:c0:70:77:69:83:3a:65:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 2 12:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fbec9beee4f09964ce9b3f39bc48a8a5095f3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:73:f4:9f:2c:48:51:c7:59:d3:c0:86:09:88:
3a:e9:5f:8f:09:2f:50:23:5e:b5:f7:d5:ef:e6:30:
c7:22:6a:87:f2:87:34:6b:07:10:b9:73:e0:e3:34:
8b:71:4b:cb:0a:6d:82:61:b9:f6:64:4b:11:9b:69:
0c:41:ec:e7:63:04:6b:a5:5a:9f:c6:d0:a9:27:2c:
f8:89:d3:41:ef:01:55:e6:13:43:75:69:b2:b2:7e:
f6:b6:8b:2e:a7:d0:f0:91:6c:a3:f9:e5:5b:7f:15:
dd:65:08:e9:0f:b5:a3:93:6e:08:3e:71:f5:23:21:
2b:4e:c4:93:88:d8:70:4a:44:25:f5:6d:c5:72:51:
48:50:12:63:5d:d7:1b:83:10:12:74:12:9d:10:46:
ea:2d:e1:8a:23:aa:d5:e9:20:64:ab:8d:aa:e3:f5:
c8:ce:30:4c:1c:f5:40:f3:40:55:45:a0:4b:76:91:
ca:8a:6e:48:7d:a6:c1:48:bc:ce:ac:da:a2:e6:0a:
7c:4b:13:f8:a5:ed:d4:63:8a:37:4a:77:0f:12:10:
66:03:3c:e3:0f:94:e3:aa:83:8d:5c:3e:d0:e0:db:
0e:bb:d1:e3:b8:e7:05:ba:4f:8b:d9:bb:98:38:17:
dd:db:c4:e0:34:0f:ee:77:f3:df:ff:0e:07:71:23:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:C9:BE:EE:4F:09:96:4C:E9:B3:F3:9B:C4:8A:8A:50:95:F3:F9
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/X77Jvu5PCZZM6bPzm8SKilCV8_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.190.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7b:20:df:c8:4a:bf:57:2b:32:6c:dc:8a:ac:79:6b:81:c6:
b1:e2:37:56:63:1c:6e:62:ac:af:2a:c2:00:42:a3:a1:bc:7b:
d2:45:89:84:87:ff:9d:90:6e:9d:38:c2:1c:ee:c4:74:6f:b5:
d0:95:9b:c1:bf:55:fb:bf:aa:8c:f1:c8:d8:70:94:fd:61:62:
82:0f:7e:b0:46:8e:1c:95:71:ab:7d:b6:9f:8a:33:97:03:8a:
21:ed:31:57:a0:49:df:30:7f:3e:5a:b8:b2:0b:6d:cd:45:df:
f5:c9:35:cd:c3:48:ef:3f:a0:80:fd:6c:15:70:6d:85:c3:59:
e1:46:c6:f0:cb:4a:ff:4d:2a:a6:8a:b2:9e:45:83:3d:19:09:
af:29:0d:bc:6b:52:05:5e:58:2d:42:82:f4:2b:e7:67:c7:b4:
7f:c3:ec:44:e0:66:55:a5:48:55:1c:04:20:ad:b0:5e:6f:f6:
fd:64:ff:94:74:ab:53:43:b0:23:8d:4d:bf:62:d1:f8:da:2e:
ad:55:3d:a7:10:37:18:23:c1:50:79:e5:63:d5:3a:ec:3b:a9:
60:4b:98:bf:d5:07:d7:c1:35:71:f4:56:95:53:1d:0f:18:99:
d2:bc:e2:9e:a2:4a:cf:40:b5:83:cf:c3:22:17:f5:9b:31:19:
ba:ef:59:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKykgHjzEwHB3aYM6ZWBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk
NjhiY2YwHhcNMjQwMTAyMTIzNDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmJlYzliZWVlNGYwOTk2NGNlOWIzZjM5YmM0OGE4YTUwOTVmM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHP0nyxIUcdZ08CGCYg66V+PCS9Q
I16199Xv5jDHImqH8oc0awcQuXPg4zSLcUvLCm2CYbn2ZEsRm2kMQeznYwRrpVqf
xtCpJyz4idNB7wFV5hNDdWmysn72tosup9DwkWyj+eVbfxXdZQjpD7Wjk24IPnH1
IyErTsSTiNhwSkQl9W3FclFIUBJjXdcbgxASdBKdEEbqLeGKI6rV6SBkq42q4/XI
zjBMHPVA80BVRaBLdpHKim5IfabBSLzOrNqi5gp8SxP4pe3UY4o3SncPEhBmAzzj
D5TjqoONXD7Q4NsOu9HjuOcFuk+L2buYOBfd28TgNA/ud/Pf/w4HcSMHqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF++yb7uTwmWTOmz85vEiopQlfP5MB8GA1UdIwQY
MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct
MmY5MzNkOTg5NmUwLzEvWDc3SnZ1NVBDWlpNNmJQem04U0tpbENWOF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw
LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdq+MA0G
CSqGSIb3DQEBCwUAA4IBAQASeyDfyEq/VysybNyKrHlrgcax4jdWYxxuYqyvKsIA
QqOhvHvSRYmEh/+dkG6dOMIc7sR0b7XQlZvBv1X7v6qM8cjYcJT9YWKCD36wRo4c
lXGrfbafijOXA4oh7TFXoEnfMH8+WriyC23NRd/1yTXNw0jvP6CA/WwVcG2Fw1nh
Rsbwy0r/TSqmirKeRYM9GQmvKQ28a1IFXlgtQoL0K+dnx7R/w+xE4GZVpUhVHAQg
rbBeb/b9ZP+UdKtTQ7AjjU2/YtH42i6tVT2nEDcYI8FQeeVj1TrsO6lgS5i/1QfX
wTVx9FaVUx0PGJnSvOKeokrPQLWDz8MiF/WbMRm671kN
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:02 2025 by rpki-client