Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V1wSqudOH2XwqdqhzTxhpJGQT0s.roa
File: V1wSqudOH2XwqdqhzTxhpJGQT0s.roa (raw, json)
Hash identifier: Gunrv+BfPoNtcDy67Ec2IFz0e31lhce1aiPeevkt/A8=
Subject key identifier: 57:5C:12:AA:E7:4E:1F:65:F0:A9:DA:A1:CD:3C:61:A4:91:90:4F:4B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2E736967C7547FF2947B005C84C3
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V1wSqudOH2XwqdqhzTxhpJGQT0s.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210718
IP address blocks: 93.115.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2e:73:69:67:c7:54:7f:f2:94:7b:00:5c:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=575c12aae74e1f65f0a9daa1cd3c61a491904f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:e1:b6:e5:b4:56:b6:a7:10:27:33:17:14:
eb:6b:e7:0d:bd:54:4b:48:d8:37:e3:ca:83:95:31:
11:dc:2d:d5:ce:d0:fb:76:a5:ac:4e:02:43:4c:73:
2b:4f:03:ad:1f:c8:06:4f:67:f8:87:a2:8d:a2:65:
8c:46:8b:1e:74:15:ef:eb:e1:8b:c7:d3:6f:a4:bb:
4e:b6:51:6b:04:9e:d6:89:2e:73:38:36:e7:90:a2:
8b:31:99:58:e4:0c:32:6b:1b:eb:cb:16:82:58:20:
e1:a4:14:ef:10:f4:d4:ab:18:38:a9:42:0d:3c:40:
2c:1d:4e:08:bd:a3:31:cf:9b:c8:fd:6e:90:c7:d8:
59:38:18:d7:09:5a:10:62:53:67:d0:44:53:4e:32:
91:3e:9a:c5:94:5a:e7:44:53:a4:ff:77:7c:c9:d3:
c5:90:e2:7e:64:37:ae:a0:ca:ff:2b:58:7a:ab:db:
4c:f5:57:75:7b:f3:3c:17:ad:25:00:bc:81:25:e7:
bb:7f:3a:c6:09:ca:9b:0e:83:07:a2:80:df:6f:8f:
15:fb:0d:e2:6b:50:81:5e:88:78:af:b5:c0:ae:91:
a9:a6:74:86:08:6b:fa:ff:a4:83:f5:57:36:e9:72:
a5:c9:04:25:a6:e3:4c:35:99:b0:7d:0c:1f:be:34:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:12:AA:E7:4E:1F:65:F0:A9:DA:A1:CD:3C:61:A4:91:90:4F:4B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V1wSqudOH2XwqdqhzTxhpJGQT0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.101.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a3:ed:19:0c:30:d4:7c:b7:42:17:d2:e3:5f:13:9f:f2:a1:
d9:8a:d9:65:e0:e0:3b:ff:d1:fb:e9:9b:fd:e9:c1:d0:f3:82:
87:d1:0c:be:48:82:84:bc:d2:a8:3f:c2:db:d2:72:28:9c:92:
b2:d5:e9:7d:3d:85:78:e1:0c:f6:e2:fa:03:d1:f3:09:db:58:
d7:95:1d:31:50:f3:19:d8:a5:76:f9:bb:6d:19:9e:00:6b:3c:
5f:64:7a:0e:5b:fb:8c:12:1c:9d:fa:0c:83:a1:5c:77:70:76:
33:c6:42:20:ec:75:30:7e:de:b8:cb:b7:07:8f:4e:f3:cb:0a:
db:ad:ae:09:ed:74:bb:12:cf:c8:f1:6a:19:c0:59:2b:24:58:
ce:e7:49:9a:51:bf:5d:20:20:3a:7b:57:5e:60:2f:af:95:71:
39:e7:e2:0f:7e:c7:78:92:f5:49:16:ac:ef:cc:0c:50:f1:42:
4e:8a:58:a0:90:3d:65:58:25:90:64:4a:9a:d7:60:4a:e5:51:
44:5a:4a:fc:d5:dd:1e:41:4d:5d:f2:1a:49:99:d0:2f:a2:83:
f5:24:1f:ab:e4:d3:dd:38:01:ce:1d:c6:04:b0:1b:8a:70:a3:
ea:dd:b0:27:ed:f7:4a:36:9c:01:38:16:77:65:9d:83:d4:e5:
c6:c8:23:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbS5zaWfHVH/ylHsAXITDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzVjMTJhYWU3NGUxZjY1ZjBhOWRhYTFjZDNjNjFhNDkxOTA0ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTPhtuW0VranECczFxTra+cNvVRL
SNg348qDlTER3C3VztD7dqWsTgJDTHMrTwOtH8gGT2f4h6KNomWMRosedBXv6+GL
x9NvpLtOtlFrBJ7WiS5zODbnkKKLMZlY5AwyaxvryxaCWCDhpBTvEPTUqxg4qUIN
PEAsHU4IvaMxz5vI/W6Qx9hZOBjXCVoQYlNn0ERTTjKRPprFlFrnRFOk/3d8ydPF
kOJ+ZDeuoMr/K1h6q9tM9Vd1e/M8F60lALyBJee7fzrGCcqbDoMHooDfb48V+w3i
a1CBXoh4r7XArpGppnSGCGv6/6SD9Vc26XKlyQQlpuNMNZmwfQwfvjTC9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdcEqrnTh9l8Knaoc08YaSRkE9LMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVjF3U3F1ZE9IMlh3cWRxaHpUeGhwSkdRVDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXNlMA0G
CSqGSIb3DQEBCwUAA4IBAQBoo+0ZDDDUfLdCF9LjXxOf8qHZitll4OA7/9H76Zv9
6cHQ84KH0Qy+SIKEvNKoP8Lb0nIonJKy1el9PYV44Qz24voD0fMJ21jXlR0xUPMZ
2KV2+bttGZ4AazxfZHoOW/uMEhyd+gyDoVx3cHYzxkIg7HUwft64y7cHj07zywrb
ra4J7XS7Es/I8WoZwFkrJFjO50maUb9dICA6e1deYC+vlXE55+IPfsd4kvVJFqzv
zAxQ8UJOiligkD1lWCWQZEqa12BK5VFEWkr81d0eQU1d8hpJmdAvooP1JB+r5NPd
OAHOHcYEsBuKcKPq3bAn7fdKNpwBOBZ3ZZ2D1OXGyCPn
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:32 2025 by rpki-client