Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/oaT7zQ5EsfeAlAAgsvHEF_-7ONA.roa
File: oaT7zQ5EsfeAlAAgsvHEF_-7ONA.roa (raw, json)
Hash identifier: T2GDzstDGAZ1TlZ8F+6oaNWMZ2ccIqHJe9J2bY0fWjw=
Subject key identifier: A1:A4:FB:CD:0E:44:B1:F7:80:94:00:20:B2:F1:C4:17:FF:BB:38:D0
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 01929B3D943CA772ED4B436FCB99EEF152B0
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/oaT7zQ5EsfeAlAAgsvHEF_-7ONA.roa
Signing time: Thu 17 Oct 2024 16:09:17 +0000
ROA not before: Thu 17 Oct 2024 16:09:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50837
IP address blocks: 185.196.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:3d:94:3c:a7:72:ed:4b:43:6f:cb:99:ee:f1:52:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Oct 17 16:09:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a4fbcd0e44b1f780940020b2f1c417ffbb38d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:d9:0e:f8:8d:76:35:21:d0:4a:d8:96:2e:
82:bf:6b:f0:76:c9:86:5c:67:d1:4c:66:4a:4a:67:
28:d3:5f:7d:13:98:ac:c2:ad:0e:3f:3d:73:bf:a0:
b0:c0:08:0e:6b:9d:88:0d:e3:99:05:4b:72:b1:08:
b3:cc:33:eb:6e:74:64:d1:f1:c1:45:de:86:49:a9:
ea:77:41:d8:02:aa:63:96:b3:9e:53:02:5d:92:c8:
f7:c9:bb:97:9b:f4:d9:10:1c:e8:c2:1d:c7:80:57:
8e:b1:f7:3c:dd:bc:6b:1d:44:55:0d:60:fd:35:08:
9c:4e:0f:5b:92:db:2a:53:17:65:89:4e:ca:8d:90:
c3:dc:1a:1a:b9:87:9f:5f:88:6d:fe:ea:09:28:8c:
12:26:74:e9:44:64:a5:9b:05:00:14:f9:c0:6c:7c:
0b:6e:b9:de:a5:ea:5d:e0:0e:8e:b7:49:ea:f8:03:
85:3d:f6:2a:82:f6:3e:dd:f6:b9:78:8f:c3:81:09:
e3:8e:c5:71:b8:d4:c8:46:fc:9d:e5:3c:e8:92:cd:
bb:5c:f6:9a:9e:a5:be:fd:c3:7f:19:61:c2:ac:a3:
90:6c:0e:6a:2e:ab:c8:1c:55:92:6b:dc:d9:8f:5a:
3d:12:f4:88:a8:b4:d0:73:d9:a6:79:20:28:22:a2:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:FB:CD:0E:44:B1:F7:80:94:00:20:B2:F1:C4:17:FF:BB:38:D0
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/oaT7zQ5EsfeAlAAgsvHEF_-7ONA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:0f:ae:43:ff:96:36:ad:ab:b9:f3:77:5f:23:61:42:00:8e:
b5:d4:3b:71:3c:9e:5f:1f:ee:b6:81:78:4b:f8:a2:fa:48:c5:
47:6b:9a:33:65:37:f1:e7:a8:2d:73:c7:f7:f4:e2:62:ff:7c:
d1:1b:8f:93:c8:c5:4b:e3:4f:6d:c8:84:c1:25:94:92:e9:2e:
bf:2f:7e:de:01:b9:cc:a3:ad:68:0b:0b:10:c7:85:8f:cf:50:
9c:cd:de:5b:86:e8:b3:ee:8f:15:32:0d:23:2e:cd:7e:98:6c:
5c:4d:e5:ac:ec:dd:09:e0:af:a4:58:0c:4a:53:10:2d:1f:28:
7c:2a:53:f8:fd:46:a3:30:43:de:18:a9:c9:c9:5a:f8:f6:b1:
14:8f:47:a8:a0:ac:c5:ab:cf:e2:f1:62:a5:46:d3:71:a3:ff:
92:45:ff:fc:ca:f4:b0:e2:8b:bf:58:18:5e:98:63:b9:64:1f:
1b:2c:1c:83:ec:39:5e:a6:6a:01:12:17:77:c3:1e:51:07:11:
71:bd:c5:6a:77:06:b5:d8:8f:e7:cc:ad:39:91:19:06:ac:88:
15:f3:13:1f:4a:98:74:c5:7a:91:3c:21:f3:e4:3b:28:cd:31:
41:a0:67:c3:b4:f0:31:34:98:5a:b4:23:0c:37:0d:69:71:47:
d1:93:c8:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKbPZQ8p3LtS0Nvy5nu8VKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy
ZDBmM2IwHhcNMjQxMDE3MTYwOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWE0ZmJjZDBlNDRiMWY3ODA5NDAwMjBiMmYxYzQxN2ZmYmIzOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVnZDviNdjUh0ErYli6Cv2vwdsmG
XGfRTGZKSmco0199E5iswq0OPz1zv6CwwAgOa52IDeOZBUtysQizzDPrbnRk0fHB
Rd6GSanqd0HYAqpjlrOeUwJdksj3ybuXm/TZEBzowh3HgFeOsfc83bxrHURVDWD9
NQicTg9bktsqUxdliU7KjZDD3BoauYefX4ht/uoJKIwSJnTpRGSlmwUAFPnAbHwL
brnepepd4A6Ot0nq+AOFPfYqgvY+3fa5eI/DgQnjjsVxuNTIRvyd5Tzoks27XPaa
nqW+/cN/GWHCrKOQbA5qLqvIHFWSa9zZj1o9EvSIqLTQc9mmeSAoIqKQ1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGk+80ORLH3gJQAILLxxBf/uzjQMB8GA1UdIwQY
MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt
ODBjYzg2ZTUxODIyLzEvb2FUN3pRNUVzZmVBbEFBZ3N2SEVGXy03T05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy
LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucRLMA0G
CSqGSIb3DQEBCwUAA4IBAQDBD65D/5Y2rau583dfI2FCAI611DtxPJ5fH+62gXhL
+KL6SMVHa5ozZTfx56gtc8f39OJi/3zRG4+TyMVL409tyITBJZSS6S6/L37eAbnM
o61oCwsQx4WPz1Cczd5bhuiz7o8VMg0jLs1+mGxcTeWs7N0J4K+kWAxKUxAtHyh8
KlP4/UajMEPeGKnJyVr49rEUj0eooKzFq8/i8WKlRtNxo/+SRf/8yvSw4ou/WBhe
mGO5ZB8bLByD7DlepmoBEhd3wx5RBxFxvcVqdwa12I/nzK05kRkGrIgV8xMfSph0
xXqRPCHz5DsozTFBoGfDtPAxNJhatCMMNw1pcUfRk8iH
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:54 2025 by rpki-client