Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/m06kISlyqE6p5RZtf-WA5CTJ2Hs.roa
File: m06kISlyqE6p5RZtf-WA5CTJ2Hs.roa (raw, json)
Hash identifier: xIZkxh/Q7MgAIKkyijtz8zT6I/DED4JN8PtjPxMziP0=
Subject key identifier: 9B:4E:A4:21:29:72:A8:4E:A9:E5:16:6D:7F:E5:80:E4:24:C9:D8:7B
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 01928B3D205770AA5D89DE4CCBA345AB9A7F
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/m06kISlyqE6p5RZtf-WA5CTJ2Hs.roa
Signing time: Mon 14 Oct 2024 13:34:51 +0000
ROA not before: Mon 14 Oct 2024 13:34:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215071
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:3d:20:57:70:aa:5d:89:de:4c:cb:a3:45:ab:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Oct 14 13:34:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b4ea4212972a84ea9e5166d7fe580e424c9d87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:6b:03:db:13:82:5c:a9:55:58:c4:e9:0b:
77:94:23:7a:a3:7c:62:e5:2a:79:77:58:b2:b4:98:
14:e8:e0:6a:35:90:fd:43:63:42:95:b3:78:fe:03:
f0:b3:5f:80:f8:43:9b:b0:ff:f1:e6:c8:50:9c:a0:
1f:54:d1:4a:f3:76:d3:86:aa:89:d4:fb:50:45:c2:
16:65:0d:2e:63:60:13:11:67:64:94:f6:92:0d:39:
66:15:63:5a:a3:c5:71:d0:3d:d8:ac:c0:04:72:83:
e8:c1:b0:a2:47:50:68:b4:33:0f:2c:74:08:0b:5f:
5d:0d:6f:59:26:48:e5:54:66:08:46:3e:36:8a:35:
0d:64:cd:ce:a8:db:c4:f3:6e:1e:93:cd:71:00:b8:
9c:a8:66:32:97:0a:e3:af:12:35:8e:4b:ee:12:ed:
b4:af:7e:cd:09:8b:e2:b2:fc:b2:41:c3:5a:b6:ee:
6c:2b:7a:f0:bd:58:f3:64:25:6e:ff:62:52:c6:ce:
fe:7f:cc:91:24:63:2f:52:87:77:19:87:2c:fa:34:
33:60:0f:64:ed:4a:8d:94:36:8a:3b:fc:21:95:44:
50:54:0d:c8:98:93:04:20:d3:b1:f4:70:75:09:4b:
2d:a1:ff:46:a3:f6:8c:89:fd:e2:f7:6d:64:d9:cf:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:A4:21:29:72:A8:4E:A9:E5:16:6D:7F:E5:80:E4:24:C9:D8:7B
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/m06kISlyqE6p5RZtf-WA5CTJ2Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
37:26:65:12:8a:c7:a7:b7:46:9b:c1:3e:a9:92:54:cf:d2:d9:
bb:36:d8:c2:29:6c:48:9f:b0:e2:9d:c2:c6:29:c1:90:af:ce:
73:60:f5:91:1c:04:b2:93:d4:92:35:ec:40:65:51:4b:c6:f4:
05:e4:0f:e4:89:5a:3f:d4:0a:d2:bc:53:6f:aa:81:74:6b:db:
98:f8:db:dc:69:b5:5e:3c:bb:20:5f:de:f8:ca:6c:0a:bc:5a:
9b:25:28:b3:be:84:bb:a1:c2:4e:85:90:db:a2:46:52:d0:cc:
9b:dd:64:9c:a6:00:f0:6d:b7:eb:38:fa:6b:34:b8:d9:0d:5c:
f1:e2:76:b1:ea:57:e0:9e:05:3b:54:19:f1:de:97:49:5d:17:
e7:6c:f3:a7:fa:ce:63:7f:d6:84:84:18:df:e1:54:54:79:da:
5e:3e:f9:b3:47:11:5c:53:b5:c7:89:ae:f0:14:0e:98:37:40:
b1:71:10:bd:26:64:ec:bd:8f:f3:2d:02:7c:d3:52:a5:69:fd:
6d:3b:db:7f:73:46:48:7d:8e:5f:f0:65:e1:70:39:4f:9e:10:
f1:4f:06:15:0f:e3:c8:60:b1:fb:f9:f3:96:f2:a7:c5:f4:e6:
73:28:3f:fd:e7:09:0a:86:ea:c8:03:25:a9:1c:5c:2d:03:b7:
55:0d:22:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKLPSBXcKpdid5My6NFq5p/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0
YTZjMzAwHhcNMjQxMDE0MTMzNDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRlYTQyMTI5NzJhODRlYTllNTE2NmQ3ZmU1ODBlNDI0YzlkODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF1rA9sTglypVVjE6Qt3lCN6o3xi
5Sp5d1iytJgU6OBqNZD9Q2NClbN4/gPws1+A+EObsP/x5shQnKAfVNFK83bThqqJ
1PtQRcIWZQ0uY2ATEWdklPaSDTlmFWNao8Vx0D3YrMAEcoPowbCiR1BotDMPLHQI
C19dDW9ZJkjlVGYIRj42ijUNZM3OqNvE824ek81xALicqGYylwrjrxI1jkvuEu20
r37NCYvisvyyQcNatu5sK3rwvVjzZCVu/2JSxs7+f8yRJGMvUod3GYcs+jQzYA9k
7UqNlDaKO/whlURQVA3ImJMEINOx9HB1CUstof9Go/aMif3i921k2c9MUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtOpCEpcqhOqeUWbX/lgOQkydh7MB8GA1UdIwQY
MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt
NTcxN2I0NTQ0MjM3LzEvbTA2a0lTbHlxRTZwNVJadGYtV0E1Q1RKMkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3
LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiKMA0G
CSqGSIb3DQEBCwUAA4IBAQA3JmUSisent0abwT6pklTP0tm7NtjCKWxIn7DincLG
KcGQr85zYPWRHASyk9SSNexAZVFLxvQF5A/kiVo/1ArSvFNvqoF0a9uY+NvcabVe
PLsgX974ymwKvFqbJSizvoS7ocJOhZDbokZS0Myb3WScpgDwbbfrOPprNLjZDVzx
4nax6lfgngU7VBnx3pdJXRfnbPOn+s5jf9aEhBjf4VRUedpePvmzRxFcU7XHia7w
FA6YN0CxcRC9JmTsvY/zLQJ801Klaf1tO9t/c0ZIfY5f8GXhcDlPnhDxTwYVD+PI
YLH7+fOW8qfF9OZzKD/95wkKhurIAyWpHFwtA7dVDSI7
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:17:51 2025 by rpki-client