Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/Wn9L85Nqm6i1cRrdwnG-bP7UOEY.roa
File: Wn9L85Nqm6i1cRrdwnG-bP7UOEY.roa (raw, json)
Hash identifier: dYwtj9Bw00MvY/9zRpxV4wEKNh/dntYQB8+bDcrBF4E=
Subject key identifier: 5A:7F:4B:F3:93:6A:9B:A8:B5:71:1A:DD:C2:71:BE:6C:FE:D4:38:46
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01935A1A3FFD35BD921532CFE8B52C08DF64
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/Wn9L85Nqm6i1cRrdwnG-bP7UOEY.roa
Signing time: Sat 23 Nov 2024 17:38:09 +0000
ROA not before: Sat 23 Nov 2024 17:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 195.238.231.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:1a:3f:fd:35:bd:92:15:32:cf:e8:b5:2c:08:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Nov 23 17:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a7f4bf3936a9ba8b5711addc271be6cfed43846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:c7:01:39:a6:d8:ff:29:41:dc:a9:ad:d8:
f0:d1:84:03:e5:95:9f:ef:51:71:39:07:c6:ab:4a:
80:0b:4a:42:27:db:4f:d2:cb:b4:52:2b:dd:df:d0:
dc:58:a9:b8:98:f0:2f:4a:f3:a7:3c:1c:b0:4b:59:
97:3d:a1:cf:f1:71:35:dc:be:49:a2:7d:55:61:3c:
b3:67:f5:23:90:5c:d6:a9:47:cd:14:42:f6:d7:67:
21:3b:f3:a9:fd:d6:f1:5a:00:9a:4b:2e:0e:d7:b6:
0a:71:e2:7c:65:ff:76:64:03:e9:9f:be:12:f3:ba:
df:4f:2e:65:d1:ed:5c:fc:55:4e:36:67:75:c7:fc:
91:20:83:0b:99:b6:12:13:7a:17:3f:3f:e1:3a:5c:
21:6c:e4:f5:ad:bf:94:9e:53:84:7f:73:0b:56:44:
2a:1c:09:a1:c6:53:af:4b:1e:16:b0:95:ee:39:2f:
3b:16:73:e6:08:bd:fc:b1:f9:cf:5f:55:a3:54:ef:
af:cf:2f:72:a2:86:b1:83:a8:ca:78:79:d1:4c:ef:
cf:53:3f:f2:17:12:3e:05:05:be:03:36:6a:e5:5c:
53:1c:05:f1:a6:c5:d3:0f:4d:c7:40:9e:a7:7e:bc:
49:8b:b1:a3:9e:7d:a8:f5:59:64:33:f1:22:b4:52:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7F:4B:F3:93:6A:9B:A8:B5:71:1A:DD:C2:71:BE:6C:FE:D4:38:46
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/Wn9L85Nqm6i1cRrdwnG-bP7UOEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.231.0/24
IPv6:
2a05:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:0d:b7:95:91:3b:84:38:7c:33:b6:43:6c:08:ab:0c:af:3a:
87:aa:39:b8:3b:5a:16:20:51:8f:c2:87:93:8a:48:ad:98:c9:
84:94:ad:5f:81:1f:9c:3d:91:8e:ac:4c:48:cd:3b:e9:fd:c5:
77:69:3b:2e:6d:02:f0:69:35:bc:b3:23:eb:ef:0e:60:7e:45:
e1:55:2f:c6:98:09:94:c4:07:31:af:b1:17:63:f6:a9:67:07:
6a:45:53:b0:18:1c:cf:c9:58:0c:80:b2:56:48:98:dc:e1:7e:
cb:4a:61:43:f3:cd:c5:2f:fd:b2:85:83:51:93:15:c4:f6:51:
14:5a:b3:7d:e4:be:d2:0f:a4:89:64:8b:d0:30:6e:1a:8c:9b:
cd:90:7c:d5:46:a0:20:f7:a3:14:4d:6e:fb:9c:8a:4e:c3:00:
05:92:59:73:d1:1a:b8:d0:7b:af:ac:dd:ad:8a:e2:be:f0:52:
33:2e:5c:21:c1:a3:19:36:2b:6d:68:51:8b:f0:7e:4f:55:b5:
cc:db:50:73:ff:db:41:5c:ba:8d:64:38:c0:aa:09:7a:41:f9:
c4:df:b6:97:c3:3d:5f:52:23:71:d9:28:0e:a0:51:ff:0e:f4:
a3:60:fe:18:7f:1f:34:e0:08:0f:64:a1:59:da:59:5f:67:cd:
a0:b7:55:c8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZNaGj/9Nb2SFTLP6LUsCN9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk
ZmQ5YTgwHhcNMjQxMTIzMTczODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTdmNGJmMzkzNmE5YmE4YjU3MTFhZGRjMjcxYmU2Y2ZlZDQzODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BzHATmm2P8pQdyprdjw0YQD5ZWf
71FxOQfGq0qAC0pCJ9tP0su0Uivd39DcWKm4mPAvSvOnPBywS1mXPaHP8XE13L5J
on1VYTyzZ/UjkFzWqUfNFEL212chO/Op/dbxWgCaSy4O17YKceJ8Zf92ZAPpn74S
87rfTy5l0e1c/FVONmd1x/yRIIMLmbYSE3oXPz/hOlwhbOT1rb+UnlOEf3MLVkQq
HAmhxlOvSx4WsJXuOS87FnPmCL38sfnPX1WjVO+vzy9yooaxg6jKeHnRTO/PUz/y
FxI+BQW+AzZq5VxTHAXxpsXTD03HQJ6nfrxJi7Gjnn2o9VlkM/EitFLmaQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFp/S/OTapuotXEa3cJxvmz+1DhGMB8GA1UdIwQY
MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvV245TDg1TnFtNmkxY1JyZHduRy1iUDdVT0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+7nMA0E
AgACMAcDBQMqBWPAMA0GCSqGSIb3DQEBCwUAA4IBAQCKDbeVkTuEOHwztkNsCKsM
rzqHqjm4O1oWIFGPwoeTikitmMmElK1fgR+cPZGOrExIzTvp/cV3aTsubQLwaTW8
syPr7w5gfkXhVS/GmAmUxAcxr7EXY/apZwdqRVOwGBzPyVgMgLJWSJjc4X7LSmFD
883FL/2yhYNRkxXE9lEUWrN95L7SD6SJZIvQMG4ajJvNkHzVRqAg96MUTW77nIpO
wwAFkllz0Rq40HuvrN2tiuK+8FIzLlwhwaMZNittaFGL8H5PVbXM21Bz/9tBXLqN
ZDjAqgl6QfnE37aXwz1fUiNx2SgOoFH/DvSjYP4Yfx804AgPZKFZ2llfZ82gt1XI
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:54:18 2025 by rpki-client