Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vowctRz9bnXSl-n4kpufrZJ793A.roa
File: vowctRz9bnXSl-n4kpufrZJ793A.roa (raw, json)
Hash identifier: Z3qgbZY/beiCqFdCRH4fr+ZqgQLQEb6MBH/esjH69zA=
Subject key identifier: BE:8C:1C:B5:1C:FD:6E:75:D2:97:E9:F8:92:9B:9F:AD:92:7B:F7:70
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6CC6E5CA2E4093C24C8837CADEE18
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vowctRz9bnXSl-n4kpufrZJ793A.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 93.114.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 06:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cc:6e:5c:a2:e4:09:3c:24:c8:83:7c:ad:ee:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be8c1cb51cfd6e75d297e9f8929b9fad927bf770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:eb:48:19:8f:f4:60:41:59:c3:2f:31:b7:62:
c2:ff:68:97:81:cf:c1:d7:39:6e:17:97:43:4e:b8:
33:90:d0:ba:cf:21:22:b1:9e:a7:90:fd:c3:10:0c:
a4:9e:98:5a:95:fa:0b:69:11:30:6b:49:2b:36:06:
2c:9f:f8:17:51:27:c3:7b:9d:87:57:35:cc:84:ea:
6c:55:47:45:ef:ad:b6:07:1f:f5:df:88:b8:6e:48:
39:14:8c:cb:62:a5:4c:69:be:60:7a:48:27:31:f4:
11:1d:f2:d7:bb:3d:43:db:1a:88:3a:0d:5d:15:72:
85:d7:7e:dd:3a:44:7c:73:2f:0c:b0:46:f8:36:62:
27:1c:70:ca:fb:6b:a5:55:76:f9:b9:3d:a4:86:6d:
de:39:a1:7b:22:6c:42:a0:31:90:f8:54:31:c8:de:
8a:e6:f9:2a:65:5e:31:0f:5c:16:82:c8:7b:a2:56:
fe:da:85:20:02:a3:b4:b6:f9:4a:29:a4:16:c6:7e:
dc:a3:f4:06:6e:9f:4c:be:06:5a:ea:af:17:e7:8e:
34:e5:e5:78:c3:04:87:8c:3c:c6:91:a0:91:8c:c6:
aa:06:a6:c5:79:03:44:cb:05:da:95:1d:5d:77:33:
a0:44:81:72:39:8e:40:5d:51:d3:2b:e4:68:fb:c3:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:1C:B5:1C:FD:6E:75:D2:97:E9:F8:92:9B:9F:AD:92:7B:F7:70
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vowctRz9bnXSl-n4kpufrZJ793A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1b:80:0c:23:c7:a7:ee:35:84:37:e7:d4:89:7d:c5:b2:ee:
56:f2:5f:cd:fc:86:0e:b4:d2:72:f1:16:ff:af:7b:8b:35:4d:
56:2c:dd:a6:7a:9c:75:eb:d4:6d:41:3d:4b:cc:1a:8b:ae:6a:
00:7c:af:e2:33:44:b7:a2:ca:7b:13:d3:60:bb:3a:87:db:9e:
3c:48:43:cd:6f:a9:f8:44:fe:65:80:1d:01:f2:d9:06:d6:84:
d5:6a:93:6c:b3:a6:09:5e:f8:51:0c:b2:0d:3f:bc:95:00:fc:
08:9f:6d:bc:16:b8:fe:cc:27:c1:38:cb:57:89:7e:dc:a8:78:
56:40:7e:5a:99:ec:21:e1:44:f7:60:26:c8:61:18:3a:04:a7:
4c:44:df:61:7a:cd:42:ef:cc:98:08:df:ee:ca:b8:d8:51:1e:
5a:e5:6d:88:7c:41:2a:31:35:bd:60:27:0f:01:b4:39:92:61:
75:65:44:79:c7:b5:d7:bc:61:5f:c7:c1:02:dc:ab:6d:2a:ef:
ec:b5:6d:29:a5:f6:ea:f5:71:66:84:26:bb:93:d4:b4:d9:c9:
c1:67:d4:26:b2:2b:e8:e6:50:c4:00:4f:8d:f3:db:70:f3:0c:
73:f3:0d:d8:6b:de:dd:88:ff:53:26:61:4c:c8:1a:d3:8b:cf:
93:05:4f:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1sxuXKLkCTwkyIN8re4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZThjMWNiNTFjZmQ2ZTc1ZDI5N2U5Zjg5MjliOWZhZDkyN2JmNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+etIGY/0YEFZwy8xt2LC/2iXgc/B
1zluF5dDTrgzkNC6zyEisZ6nkP3DEAyknphalfoLaREwa0krNgYsn/gXUSfDe52H
VzXMhOpsVUdF7622Bx/134i4bkg5FIzLYqVMab5gekgnMfQRHfLXuz1D2xqIOg1d
FXKF137dOkR8cy8MsEb4NmInHHDK+2ulVXb5uT2khm3eOaF7ImxCoDGQ+FQxyN6K
5vkqZV4xD1wWgsh7olb+2oUgAqO0tvlKKaQWxn7co/QGbp9MvgZa6q8X54405eV4
wwSHjDzGkaCRjMaqBqbFeQNEywXalR1ddzOgRIFyOY5AXVHTK+Ro+8PobQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6MHLUc/W510pfp+JKbn62Se/dwMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvdm93Y3RSejliblhTbC1uNGtwdWZyWko3OTNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXJIMA0G
CSqGSIb3DQEBCwUAA4IBAQBdG4AMI8en7jWEN+fUiX3Fsu5W8l/N/IYOtNJy8Rb/
r3uLNU1WLN2mepx169RtQT1LzBqLrmoAfK/iM0S3osp7E9NguzqH2548SEPNb6n4
RP5lgB0B8tkG1oTVapNss6YJXvhRDLINP7yVAPwIn228Frj+zCfBOMtXiX7cqHhW
QH5amewh4UT3YCbIYRg6BKdMRN9hes1C78yYCN/uyrjYUR5a5W2IfEEqMTW9YCcP
AbQ5kmF1ZUR5x7XXvGFfx8EC3KttKu/stW0ppfbq9XFmhCa7k9S02cnBZ9Qmsivo
5lDEAE+N89tw8wxz8w3Ya97diP9TJmFMyBrTi8+TBU/X
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:31 2025 by rpki-client