Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/_PawDzdGWAmBf6mTCzqbEKRpx5M.roa
File: _PawDzdGWAmBf6mTCzqbEKRpx5M.roa (raw, json)
Hash identifier: wjEsYXOrPtJMQ2vvHiaQTPCJxQMXvKJKW0vyMwxdd44=
Subject key identifier: FC:F6:B0:0F:37:46:58:09:81:7F:A9:93:0B:3A:9B:10:A4:69:C7:93
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC3CF19C805371219BC6BF91AF9BA4
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/_PawDzdGWAmBf6mTCzqbEKRpx5M.roa
Signing time: Mon 01 Jan 2024 16:29:54 +0000
ROA not before: Mon 01 Jan 2024 16:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 72
IP address blocks: 212.193.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3c:f1:9c:80:53:71:21:9b:c6:bf:91:af:9b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcf6b00f37465809817fa9930b3a9b10a469c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:60:19:f9:75:81:6d:c4:c2:e8:9e:c5:12:ef:
06:8f:77:db:eb:75:36:ec:59:81:b6:af:2c:ce:43:
a1:ed:80:72:8a:76:95:56:c4:73:85:f1:d4:89:f5:
a3:1d:14:2c:1f:11:7d:69:90:0b:5d:81:ab:64:c6:
f5:8b:41:e3:95:d2:0d:8c:fc:e8:51:a3:b9:32:65:
48:4e:88:03:71:9c:5d:bf:d2:92:d1:77:38:f7:50:
11:ea:72:42:d4:8a:b3:a4:1e:fb:5a:a8:d0:70:9a:
8c:4a:53:2b:1c:2a:85:04:f5:77:0e:c7:ea:6b:bc:
43:07:58:58:ec:61:98:e0:0e:7f:bc:82:b9:c9:19:
e9:8b:b4:59:a0:1a:a3:3a:55:3b:81:88:f9:f6:df:
ec:d1:e6:96:60:e9:8e:44:04:bf:15:16:4c:af:27:
bd:09:15:7b:04:f1:be:e1:1a:5c:cc:e8:c7:3a:0f:
fc:e4:81:9f:57:1e:1f:68:94:e0:23:fd:31:9f:d0:
e7:f6:c7:50:14:51:72:24:89:dd:e1:f3:b3:6a:25:
5e:33:f8:b6:bd:bd:52:c3:04:10:b5:ce:d9:c3:a0:
6c:f6:55:da:54:87:b8:3c:4e:e9:aa:c4:d7:cf:80:
d0:46:5f:f9:f4:73:8d:08:d2:c1:0e:1b:d5:26:e3:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:B0:0F:37:46:58:09:81:7F:A9:93:0B:3A:9B:10:A4:69:C7:93
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/_PawDzdGWAmBf6mTCzqbEKRpx5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.96.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ec:1f:9a:14:6a:52:a9:2b:31:00:8e:7f:39:b9:61:d8:04:
d3:bd:76:bd:9a:d1:9a:ea:8d:61:ad:23:d4:fb:25:d5:99:31:
60:05:7d:bc:09:b3:2e:be:e4:c6:9b:8a:71:f8:fd:f1:b8:f8:
ed:b5:f7:ee:c2:d4:7e:e0:09:d7:32:77:35:f6:b2:69:e8:e9:
f8:94:59:fd:46:a0:98:f9:da:35:1a:3a:bb:82:37:76:ea:b6:
b2:96:90:08:50:a2:9f:cb:26:69:18:67:8a:d3:93:b1:dc:b0:
9d:51:64:f3:00:16:84:e0:3d:64:89:c2:f8:07:29:a0:63:b3:
02:85:3a:e9:d1:72:c4:10:84:4e:41:ff:5b:1b:d7:76:bb:4f:
8b:0a:c7:99:6d:e1:49:c9:83:63:6c:5b:9c:60:ec:80:91:36:
c1:6c:63:f6:52:83:e0:97:ab:44:8e:b5:71:09:ea:6b:75:ba:
a7:5d:f0:52:a3:f0:6b:52:44:47:63:61:e1:53:72:0d:61:00:
ce:89:2b:16:09:69:cd:ab:49:df:84:43:5b:f7:72:23:dc:49:
05:12:86:fc:48:39:ae:84:12:ca:ce:64:79:ee:f2:3c:66:48:
f8:18:5c:24:36:6e:63:4b:48:ce:4d:31:20:f1:5c:2e:51:f4:
0a:e0:aa:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3DzxnIBTcSGbxr+Rr5ukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjQwMTAxMTYyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2Y2YjAwZjM3NDY1ODA5ODE3ZmE5OTMwYjNhOWIxMGE0NjljNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWAZ+XWBbcTC6J7FEu8Gj3fb63U2
7FmBtq8szkOh7YByinaVVsRzhfHUifWjHRQsHxF9aZALXYGrZMb1i0HjldINjPzo
UaO5MmVITogDcZxdv9KS0Xc491AR6nJC1IqzpB77WqjQcJqMSlMrHCqFBPV3Dsfq
a7xDB1hY7GGY4A5/vIK5yRnpi7RZoBqjOlU7gYj59t/s0eaWYOmORAS/FRZMrye9
CRV7BPG+4RpczOjHOg/85IGfVx4faJTgI/0xn9Dn9sdQFFFyJInd4fOzaiVeM/i2
vb1SwwQQtc7Zw6Bs9lXaVIe4PE7pqsTXz4DQRl/59HONCNLBDhvVJuP3ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPz2sA83RlgJgX+pkws6mxCkaceTMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvX1Bhd0R6ZEdXQW1CZjZtVEN6cWJFS1JweDVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MFgMA0G
CSqGSIb3DQEBCwUAA4IBAQAn7B+aFGpSqSsxAI5/Oblh2ATTvXa9mtGa6o1hrSPU
+yXVmTFgBX28CbMuvuTGm4px+P3xuPjttffuwtR+4AnXMnc19rJp6On4lFn9RqCY
+do1Gjq7gjd26raylpAIUKKfyyZpGGeK05Ox3LCdUWTzABaE4D1kicL4BymgY7MC
hTrp0XLEEIROQf9bG9d2u0+LCseZbeFJyYNjbFucYOyAkTbBbGP2UoPgl6tEjrVx
CeprdbqnXfBSo/BrUkRHY2HhU3INYQDOiSsWCWnNq0nfhENb93Ij3EkFEob8SDmu
hBLKzmR57vI8Zkj4GFwkNm5jS0jOTTEg8VwuUfQK4KrN
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:23 2025 by rpki-client