Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/eUDz3I5vZl2P7O0GTWnOrlQS8GE.roa
File: eUDz3I5vZl2P7O0GTWnOrlQS8GE.roa (raw, json)
Hash identifier: Wwu6thMbOGhpgIcWkqQV6Kvp7VfSg02yLAxtQEXORcY=
Subject key identifier: 79:40:F3:DC:8E:6F:66:5D:8F:EC:ED:06:4D:69:CE:AE:54:12:F0:61
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC4589FCD571B6CEC0FA4A803EFDA8
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/eUDz3I5vZl2P7O0GTWnOrlQS8GE.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44597
IP address blocks: 193.232.225.0/24 maxlen: 24
2a0c:a9c7:225::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:45:89:fc:d5:71:b6:ce:c0:fa:4a:80:3e:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7940f3dc8e6f665d8feced064d69ceae5412f061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:3a:85:73:39:21:d4:69:d4:5a:83:78:18:
13:3a:75:9b:2a:99:29:7d:1b:1d:b6:73:25:9f:67:
f7:5b:0c:e2:79:85:90:82:87:32:d3:3a:a2:bd:97:
39:55:76:d7:21:c5:ef:cf:af:7f:cd:a8:7d:61:7a:
4c:20:2d:a3:39:8a:61:31:16:7c:85:a8:1c:8b:e4:
a8:fe:c3:d2:99:1e:25:9b:cd:3e:89:77:9e:b7:15:
b1:5c:c5:d6:2c:55:21:44:34:bd:24:b9:6a:b2:45:
d3:f3:d2:e1:6a:51:35:71:f2:78:53:ee:a4:2c:f0:
11:da:d2:17:15:78:63:0a:3a:61:0f:e7:39:17:7e:
86:17:25:f2:f2:7e:fd:f1:7e:3f:db:f2:e2:a4:61:
82:97:7f:3f:d4:30:7b:d1:6b:a4:ff:19:6d:4d:11:
a8:9b:17:96:0c:04:7a:2e:9b:48:d8:cc:8c:e7:fe:
e1:53:f8:51:0b:24:49:25:0f:a7:11:58:5e:c0:99:
f2:c7:97:1c:e0:51:0f:c7:1a:cf:1a:dc:b3:fe:5a:
ae:a2:8b:1f:b8:ce:de:8d:63:35:db:09:d9:bd:08:
16:be:77:c4:5c:ea:f8:83:35:02:39:b7:d7:97:94:
eb:c4:b5:01:7d:06:ab:e0:df:84:23:05:1b:8f:07:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:F3:DC:8E:6F:66:5D:8F:EC:ED:06:4D:69:CE:AE:54:12:F0:61
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/eUDz3I5vZl2P7O0GTWnOrlQS8GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.225.0/24
IPv6:
2a0c:a9c7:225::/48
Signature Algorithm: sha256WithRSAEncryption
3f:a2:75:fe:5e:5e:de:0f:fe:fb:fd:21:46:91:76:63:f9:98:
6e:24:fb:5b:67:1e:09:55:20:87:d7:14:8b:d3:9e:dd:62:a6:
d5:77:ae:07:16:74:ad:51:98:65:55:e2:83:b9:fb:58:b5:b5:
11:6f:dc:cc:53:dc:b1:2c:56:90:6a:e3:08:2f:c0:d6:97:48:
1f:8a:76:9c:84:ec:47:90:2f:43:89:6a:4b:2a:cf:bf:ad:69:
be:c1:e2:1b:0d:6d:e1:74:16:eb:c1:7a:14:56:9b:88:2b:fc:
2d:86:1b:38:ce:3e:2c:af:74:b8:ec:74:2d:e4:43:34:89:d1:
be:37:93:7f:ec:d0:79:59:62:36:94:20:4e:ea:6c:00:8f:a7:
6e:67:c4:f9:fb:f9:eb:cc:30:3a:38:13:7a:40:d9:e1:7a:36:
3f:5a:4e:a6:fd:99:a0:21:08:d1:8c:63:c9:12:85:80:a7:1c:
e5:d3:48:d7:2e:72:6f:68:2b:ff:a2:8d:06:b0:1e:83:3c:0f:
69:df:a8:53:7f:9b:d1:27:39:0b:87:4a:44:c2:dc:5f:51:4d:
5d:16:7e:ec:af:1a:90:3d:39:e1:b7:ad:c5:40:93:b3:07:45:
21:3e:7c:83:9f:f9:3c:2c:f3:0f:fd:0a:cc:e2:99:8a:59:d2:
8e:f1:46:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzF3EWJ/NVxts7A+kqAPv2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjQwMTAxMTYyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQwZjNkYzhlNmY2NjVkOGZlY2VkMDY0ZDY5Y2VhZTU0MTJmMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAM6hXM5IdRp1FqDeBgTOnWbKpkp
fRsdtnMln2f3WwzieYWQgocy0zqivZc5VXbXIcXvz69/zah9YXpMIC2jOYphMRZ8
hagci+So/sPSmR4lm80+iXeetxWxXMXWLFUhRDS9JLlqskXT89LhalE1cfJ4U+6k
LPAR2tIXFXhjCjphD+c5F36GFyXy8n798X4/2/LipGGCl38/1DB70Wuk/xltTRGo
mxeWDAR6LptI2MyM5/7hU/hRCyRJJQ+nEVhewJnyx5cc4FEPxxrPGtyz/lquoosf
uM7ejWM12wnZvQgWvnfEXOr4gzUCObfXl5TrxLUBfQar4N+EIwUbjwfypwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHlA89yOb2Zdj+ztBk1pzq5UEvBhMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvZVVEejNJNXZabDJQN08wR1RXbk9ybFFTOEdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwejhMA8E
AgACMAkDBwAqDKnHAiUwDQYJKoZIhvcNAQELBQADggEBAD+idf5eXt4P/vv9IUaR
dmP5mG4k+1tnHglVIIfXFIvTnt1iptV3rgcWdK1RmGVV4oO5+1i1tRFv3MxT3LEs
VpBq4wgvwNaXSB+KdpyE7EeQL0OJaksqz7+tab7B4hsNbeF0FuvBehRWm4gr/C2G
GzjOPiyvdLjsdC3kQzSJ0b43k3/s0HlZYjaUIE7qbACPp25nxPn7+evMMDo4E3pA
2eF6Nj9aTqb9maAhCNGMY8kShYCnHOXTSNcucm9oK/+ijQawHoM8D2nfqFN/m9En
OQuHSkTC3F9RTV0WfuyvGpA9OeG3rcVAk7MHRSE+fIOf+Tws8w/9CszimYpZ0o7x
Ruo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:05 2025 by rpki-client