Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/G7gVwVXii22RXwJKcVnc_SMZKWY.roa
File: G7gVwVXii22RXwJKcVnc_SMZKWY.roa (raw, json)
Hash identifier: VlYK/wnqQ1qd2Izg3dNb1XL9QZCbLJGOYARwKM5vHTY=
Subject key identifier: 1B:B8:15:C1:55:E2:8B:6D:91:5F:02:4A:71:59:DC:FD:23:19:29:66
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 018CC64AE76A5017B3FA5664E6FA45A6C702
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/G7gVwVXii22RXwJKcVnc_SMZKWY.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216287
IP address blocks: 95.130.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e7:6a:50:17:b3:fa:56:64:e6:fa:45:a6:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bb815c155e28b6d915f024a7159dcfd23192966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:44:29:77:75:73:83:f8:a7:23:a5:15:c6:
b7:0a:74:8a:7c:b4:2d:a2:10:07:53:3e:a1:dd:8c:
8b:ea:ba:83:92:1f:ee:25:b0:32:9e:4d:5d:33:62:
51:16:82:11:18:67:5e:0b:2a:bf:c2:12:79:9b:36:
f0:f0:11:32:f6:f2:21:10:e9:16:59:8d:78:57:68:
ae:99:1f:23:69:c2:3b:9e:9e:5c:cd:d4:ec:60:6f:
eb:c1:e7:44:fc:60:0a:dd:47:ca:ca:65:16:cb:41:
c4:19:86:ec:d7:01:86:39:e7:17:77:21:cf:74:3c:
ef:38:9c:4a:9c:b6:a0:60:e7:4f:fc:92:dd:52:4f:
98:90:7a:4b:c4:ff:f8:63:5d:bc:bb:5c:aa:87:89:
06:f6:4c:ad:8e:94:e4:00:c5:69:f9:d5:c0:05:91:
3b:ab:28:59:44:0e:45:a6:97:1d:fd:37:49:d7:65:
2f:cd:cb:7a:3d:d6:3f:89:23:80:ed:bf:8b:c3:90:
fb:fc:e4:2a:6a:da:e2:e9:f7:7d:45:fc:3b:6f:0c:
ec:6d:bd:6a:8c:86:e3:58:08:df:39:2d:b2:ae:71:
7f:6c:25:c8:f1:36:88:19:40:97:0c:2a:9a:4d:f6:
80:95:ca:35:b0:29:85:a2:4c:59:bc:81:a0:a3:56:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:15:C1:55:E2:8B:6D:91:5F:02:4A:71:59:DC:FD:23:19:29:66
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/G7gVwVXii22RXwJKcVnc_SMZKWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.231.0/24
Signature Algorithm: sha256WithRSAEncryption
08:26:54:83:8f:cc:cc:d0:8e:9a:7a:82:83:93:7c:52:10:39:
08:fa:a2:17:00:9d:61:66:3e:28:58:6b:05:a8:a1:3b:7b:0d:
8d:b5:31:a6:c4:ec:32:00:e9:8b:8a:b4:ee:bc:6c:ff:1e:94:
6b:4f:b2:c5:81:03:f0:12:3d:e1:15:1d:e2:53:f1:41:6a:cb:
17:c1:8e:19:12:c5:0e:d1:c5:f1:11:42:f7:5d:81:d4:26:a3:
df:dd:68:04:ea:76:1d:07:33:41:06:b6:dc:4e:e6:32:be:14:
15:b0:b3:81:b3:6b:2b:dc:e5:e7:d9:e0:05:51:9c:00:f7:a6:
c2:45:85:c6:eb:54:ce:2f:6f:c1:e0:59:bc:73:c8:30:58:13:
f6:23:15:bc:f6:bd:ec:61:b3:4f:ec:94:03:18:45:b7:bc:ad:
25:59:9d:c7:c2:e3:32:dc:e4:cc:fa:b9:38:41:4d:70:9a:f7:
55:25:79:e4:23:9e:3a:db:f0:dc:ed:41:3f:64:60:3c:8a:bf:
cf:2d:32:28:3a:7c:1d:fd:c8:4c:4f:40:23:21:c1:24:7a:e0:
a0:9b:02:f4:7d:64:eb:35:31:ca:25:5c:07:56:1b:5b:96:f4:
d4:3c:c3:5b:59:b4:b5:01:28:d5:ce:c7:fa:ab:69:f6:b3:74:
a3:0d:df:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSudqUBez+lZk5vpFpscCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDE3MTcxYWVhODU3NmM0MzFjNjM3NDE4NjkxYzljMWY1
NTc1MTYwHhcNMjQwMTAxMTgzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmI4MTVjMTU1ZTI4YjZkOTE1ZjAyNGE3MTU5ZGNmZDIzMTkyOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuhEKXd1c4P4pyOlFca3CnSKfLQt
ohAHUz6h3YyL6rqDkh/uJbAynk1dM2JRFoIRGGdeCyq/whJ5mzbw8BEy9vIhEOkW
WY14V2iumR8jacI7np5czdTsYG/rwedE/GAK3UfKymUWy0HEGYbs1wGGOecXdyHP
dDzvOJxKnLagYOdP/JLdUk+YkHpLxP/4Y128u1yqh4kG9kytjpTkAMVp+dXABZE7
qyhZRA5Fppcd/TdJ12Uvzct6PdY/iSOA7b+Lw5D7/OQqatri6fd9Rfw7bwzsbb1q
jIbjWAjfOS2yrnF/bCXI8TaIGUCXDCqaTfaAlco1sCmFokxZvIGgo1bd1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBu4FcFV4ottkV8CSnFZ3P0jGSlmMB8GA1UdIwQY
MBaAFErRcXGuqFdsQxxjdBhpHJwfVXUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQt
NDgyOGQ2NTEwNGUxLzEvRzdnVndWWGlpMjJSWHdKS2NWbmNfU01aS1dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQtNDgyOGQ2NTEwNGUx
LzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4LnMA0G
CSqGSIb3DQEBCwUAA4IBAQAIJlSDj8zM0I6aeoKDk3xSEDkI+qIXAJ1hZj4oWGsF
qKE7ew2NtTGmxOwyAOmLirTuvGz/HpRrT7LFgQPwEj3hFR3iU/FBassXwY4ZEsUO
0cXxEUL3XYHUJqPf3WgE6nYdBzNBBrbcTuYyvhQVsLOBs2sr3OXn2eAFUZwA96bC
RYXG61TOL2/B4Fm8c8gwWBP2IxW89r3sYbNP7JQDGEW3vK0lWZ3HwuMy3OTM+rk4
QU1wmvdVJXnkI5462/Dc7UE/ZGA8ir/PLTIoOnwd/chMT0AjIcEkeuCgmwL0fWTr
NTHKJVwHVhtblvTUPMNbWbS1ASjVzsf6q2n2s3SjDd9j
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:13 2025 by rpki-client