Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/qJ_6yYMzf0a9zdUic80iZpqJFZA.roa
File: qJ_6yYMzf0a9zdUic80iZpqJFZA.roa (raw, json)
Hash identifier: 5bBzA5O9FBTvrLZLBDhCQx4l9fBQhy+zXvX3jbXY/so=
Subject key identifier: A8:9F:FA:C9:83:33:7F:46:BD:CD:D5:22:73:CD:22:66:9A:89:15:90
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 018CC8DFAFB03229F162DCD7EBD99EF6D5E1
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/qJ_6yYMzf0a9zdUic80iZpqJFZA.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25094
IP address blocks: 194.154.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:af:b0:32:29:f1:62:dc:d7:eb:d9:9e:f6:d5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a89ffac983337f46bdcdd52273cd22669a891590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:6d:6e:2b:95:8c:59:a1:55:ae:9d:9f:cf:
f8:90:2f:fd:93:6d:c0:4b:7a:67:21:1a:0f:f5:13:
3e:e7:4d:20:12:65:56:c2:4f:56:ff:a7:d7:33:26:
79:a9:62:12:98:f7:82:3d:59:91:79:36:f8:81:95:
03:4e:45:9c:28:03:5c:db:a8:6f:90:36:76:28:5d:
c7:4e:8b:76:85:57:a8:22:93:92:f6:b6:67:23:f2:
48:c3:fb:e9:4a:ee:0b:2e:49:15:bb:0a:d9:c3:c8:
05:38:2d:1d:07:d5:6c:27:45:68:03:24:53:be:27:
29:8a:a1:2b:4a:88:bb:99:cb:af:e9:7c:84:2a:fb:
03:d5:7b:3b:25:2f:0c:dd:4b:5e:90:e5:8b:27:fe:
72:ad:58:7d:ba:09:3a:fc:62:0a:b4:ea:30:5f:22:
88:e2:1d:c0:e2:87:d2:c1:7e:92:66:0b:18:f3:a9:
4a:3a:8a:4b:ec:19:79:72:e6:bf:0b:af:9f:b2:52:
c6:b8:07:dc:9a:76:dd:79:c8:19:8b:73:fc:0a:67:
02:51:e1:03:47:c3:65:f3:f8:dc:53:dd:4a:09:90:
f0:36:5a:bb:35:86:e2:34:14:a8:6d:cf:ef:ff:36:
b5:44:1a:f9:c4:05:39:91:7e:f0:40:d3:17:e1:dd:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:FA:C9:83:33:7F:46:BD:CD:D5:22:73:CD:22:66:9A:89:15:90
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/qJ_6yYMzf0a9zdUic80iZpqJFZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.154.205.0/24
Signature Algorithm: sha256WithRSAEncryption
27:21:aa:1f:86:de:c3:80:c3:13:94:b2:b7:e6:4b:83:cc:e2:
96:c1:ed:a2:58:4b:f3:ea:d0:3e:93:97:e4:07:03:d3:d6:81:
50:8b:88:11:cf:0a:56:98:9f:eb:5e:94:24:5b:eb:08:98:f3:
58:e6:8a:ac:94:40:da:8a:19:45:3b:36:55:42:a0:61:d8:b4:
9d:95:90:de:f1:5a:49:c4:ad:54:7e:89:ad:1c:0a:4a:a9:70:
2e:6c:6f:44:29:f0:22:0d:68:7a:11:0c:0c:a9:77:71:21:dc:
b9:e3:c0:54:18:39:b3:99:08:65:ad:14:60:ea:6b:38:25:d6:
4b:ae:56:0a:aa:19:14:84:3b:f4:2f:b3:7f:7d:52:6b:76:69:
fe:ae:8e:ee:82:f8:a4:27:af:82:16:af:37:cd:3b:a4:24:30:
03:cf:88:78:d7:f3:32:89:e1:76:35:1c:0b:14:91:37:81:59:
44:04:22:40:50:ce:c8:5d:08:f0:0f:c3:21:e2:d5:be:5e:04:
e4:7d:11:27:04:7b:3e:f9:86:bd:20:df:d0:46:b1:df:b7:13:
b5:b3:c4:80:88:cc:c5:fc:c3:d8:56:8d:95:95:4e:f0:ea:48:
e2:4d:1a:87:a3:df:24:38:e6:36:1d:ee:a3:31:7e:c8:90:4a:
93:38:44:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI36+wMinxYtzX69me9tXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjNkYTZlYjNiN2EwN2ZkYzQ1MjU4ODMwMDQ5NzBkNjQw
YjAzNmIwHhcNMjQwMTAyMDYzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODlmZmFjOTgzMzM3ZjQ2YmRjZGQ1MjI3M2NkMjI2NjlhODkxNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+RtbiuVjFmhVa6dn8/4kC/9k23A
S3pnIRoP9RM+500gEmVWwk9W/6fXMyZ5qWISmPeCPVmReTb4gZUDTkWcKANc26hv
kDZ2KF3HTot2hVeoIpOS9rZnI/JIw/vpSu4LLkkVuwrZw8gFOC0dB9VsJ0VoAyRT
vicpiqErSoi7mcuv6XyEKvsD1Xs7JS8M3UtekOWLJ/5yrVh9ugk6/GIKtOowXyKI
4h3A4ofSwX6SZgsY86lKOopL7Bl5cua/C6+fslLGuAfcmnbdecgZi3P8CmcCUeED
R8Nl8/jcU91KCZDwNlq7NYbiNBSobc/v/za1RBr5xAU5kX7wQNMX4d251wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKif+smDM39Gvc3VInPNImaaiRWQMB8GA1UdIwQY
MBaAFPVj2m6zt6B/3EUliDAElw1kCwNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUt
ZTU1MjBhYTdiYTM3LzEvcUpfNnlZTXpmMGE5emRVaWM4MGlacHFKRlpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUtZTU1MjBhYTdiYTM3
LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwprNMA0G
CSqGSIb3DQEBCwUAA4IBAQAnIaofht7DgMMTlLK35kuDzOKWwe2iWEvz6tA+k5fk
BwPT1oFQi4gRzwpWmJ/rXpQkW+sImPNY5oqslEDaihlFOzZVQqBh2LSdlZDe8VpJ
xK1UfomtHApKqXAubG9EKfAiDWh6EQwMqXdxIdy548BUGDmzmQhlrRRg6ms4JdZL
rlYKqhkUhDv0L7N/fVJrdmn+ro7ugvikJ6+CFq83zTukJDADz4h41/MyieF2NRwL
FJE3gVlEBCJAUM7IXQjwD8Mh4tW+XgTkfREnBHs++Ya9IN/QRrHftxO1s8SAiMzF
/MPYVo2VlU7w6kjiTRqHo98kOOY2He6jMX7IkEqTOESF
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:02 2025 by rpki-client