Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/pGQ8ApBl-tiIKaN88dGJ7EPjhvg.roa
File: pGQ8ApBl-tiIKaN88dGJ7EPjhvg.roa (raw, json)
Hash identifier: YHw6708BuncxDL92cYbVusc0o9h0Wdpo2p1fbiWX2Ns=
Subject key identifier: A4:64:3C:02:90:65:FA:D8:88:29:A3:7C:F1:D1:89:EC:43:E3:86:F8
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 019254F0A199315E4044446879B690315197
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/pGQ8ApBl-tiIKaN88dGJ7EPjhvg.roa
Signing time: Fri 04 Oct 2024 00:31:49 +0000
ROA not before: Fri 04 Oct 2024 00:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210619
IP address blocks: 195.54.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:f0:a1:99:31:5e:40:44:44:68:79:b6:90:31:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Oct 4 00:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4643c029065fad88829a37cf1d189ec43e386f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:1e:42:cd:ed:97:71:04:5b:43:a4:4d:ce:
56:5d:9a:41:27:0d:e1:85:d9:98:c3:86:1f:36:30:
52:a9:7d:71:a9:d6:29:78:40:f1:9c:ca:aa:dd:d3:
53:0b:aa:02:ec:e6:9c:2b:53:f0:bd:3c:e4:75:0b:
a5:8b:4c:76:45:d5:a7:92:f1:1f:e3:1f:42:25:f4:
68:55:21:64:17:31:e6:e6:00:c8:75:3b:d6:9e:bc:
d9:7a:06:48:25:ac:d8:8c:4d:5a:1f:2e:45:cf:49:
0c:d8:04:90:57:4e:bd:d7:38:ae:ac:b1:ef:9d:28:
ab:89:60:bd:5b:4d:ef:96:c2:aa:b6:e9:13:8d:aa:
69:41:9b:0d:4b:a5:e7:92:cb:2d:15:8f:78:93:ac:
4f:ad:33:a4:7c:65:cf:17:27:f8:5a:8c:04:74:44:
99:c6:08:a0:39:93:c6:26:0d:13:e6:11:9a:f4:f9:
40:a7:d5:af:ac:b3:0e:10:57:a1:10:7e:5f:5f:34:
5c:2b:11:68:73:7b:84:69:48:d0:ff:21:e8:e2:37:
fb:fb:31:6e:51:49:66:19:ba:50:8e:8c:79:c0:fb:
5f:0a:ce:00:0f:b0:b8:55:6b:4a:9a:b0:1b:b3:1c:
92:09:44:fc:48:49:0b:13:e7:2f:a9:db:b3:83:c9:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:3C:02:90:65:FA:D8:88:29:A3:7C:F1:D1:89:EC:43:E3:86:F8
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/pGQ8ApBl-tiIKaN88dGJ7EPjhvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.59.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e9:51:f9:c7:32:31:3f:cc:97:7e:ce:7c:a3:86:c5:5e:df:
e4:b1:4b:08:f4:03:56:29:35:51:f3:36:5d:ef:ec:8f:6f:e0:
5e:25:b4:14:5e:85:0e:64:68:5e:41:c5:13:89:00:35:9b:43:
5a:30:b3:b2:1b:58:8f:02:a7:60:c7:8c:6d:9c:5f:94:14:36:
07:da:af:c0:89:9b:cb:c1:9b:81:67:70:68:0a:91:ac:82:24:
11:c0:27:23:a6:72:c7:37:e7:66:4a:60:fa:30:df:b3:13:45:
3d:21:0f:41:d7:b0:8f:93:a7:84:72:9e:03:89:a1:0e:da:b1:
8a:87:a2:06:e6:2b:88:3a:9c:e7:d5:e8:96:4f:0b:dd:0f:82:
14:19:65:18:b5:54:dc:1b:11:ac:6e:b5:5c:ee:02:18:a0:62:
32:48:43:12:71:1e:c5:09:25:8e:6e:67:b7:04:0e:aa:e3:b8:
d2:6d:5d:7a:11:c8:8a:03:9c:f0:27:9b:43:8f:58:2c:46:d1:
5d:05:21:d4:85:cd:4b:36:36:82:eb:67:b2:f7:27:02:bd:38:
f6:c3:96:d8:a5:c3:c4:0b:6d:f4:a7:10:63:c4:2b:ab:da:27:
2e:22:cd:e1:ea:b4:17:de:9d:4b:4d:7a:40:d5:af:4f:40:dc:
68:93:5b:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJU8KGZMV5ARERoebaQMVGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk
N2RhMDMwHhcNMjQxMDA0MDAzMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDY0M2MwMjkwNjVmYWQ4ODgyOWEzN2NmMWQxODllYzQzZTM4NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYYeQs3tl3EEW0OkTc5WXZpBJw3h
hdmYw4YfNjBSqX1xqdYpeEDxnMqq3dNTC6oC7OacK1PwvTzkdQuli0x2RdWnkvEf
4x9CJfRoVSFkFzHm5gDIdTvWnrzZegZIJazYjE1aHy5Fz0kM2ASQV0691ziurLHv
nSiriWC9W03vlsKqtukTjappQZsNS6XnksstFY94k6xPrTOkfGXPFyf4WowEdESZ
xgigOZPGJg0T5hGa9PlAp9WvrLMOEFehEH5fXzRcKxFoc3uEaUjQ/yHo4jf7+zFu
UUlmGbpQjox5wPtfCs4AD7C4VWtKmrAbsxySCUT8SEkLE+cvqduzg8nnFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRkPAKQZfrYiCmjfPHRiexD44b4MB8GA1UdIwQY
MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt
ZWZkMjBmNmMyZWMzLzEvcEdROEFwQmwtdGlJS2FOODhkR0o3RVBqaHZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz
LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzY7MA0G
CSqGSIb3DQEBCwUAA4IBAQCB6VH5xzIxP8yXfs58o4bFXt/ksUsI9ANWKTVR8zZd
7+yPb+BeJbQUXoUOZGheQcUTiQA1m0NaMLOyG1iPAqdgx4xtnF+UFDYH2q/AiZvL
wZuBZ3BoCpGsgiQRwCcjpnLHN+dmSmD6MN+zE0U9IQ9B17CPk6eEcp4DiaEO2rGK
h6IG5iuIOpzn1eiWTwvdD4IUGWUYtVTcGxGsbrVc7gIYoGIySEMScR7FCSWObme3
BA6q47jSbV16EciKA5zwJ5tDj1gsRtFdBSHUhc1LNjaC62ey9ycCvTj2w5bYpcPE
C230pxBjxCur2icuIs3h6rQX3p1LTXpA1a9PQNxok1vE
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:26 2025 by rpki-client