Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/0iHx-u-kXIDxMTWOvjeCSBvzguA.roa
File: 0iHx-u-kXIDxMTWOvjeCSBvzguA.roa (raw, json)
Hash identifier: GKUBLPsEA0JN0sNDy6He15Mg71g6fDzQ2E2yvTH6clM=
Subject key identifier: D2:21:F1:FA:EF:A4:5C:80:F1:31:35:8E:BE:37:82:48:1B:F3:82:E0
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 0195042A67281F130E13AEF3EB84FF199015
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/0iHx-u-kXIDxMTWOvjeCSBvzguA.roa
Signing time: Fri 14 Feb 2025 11:14:02 +0000
ROA not before: Fri 14 Feb 2025 11:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 95.128.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Feb 2025 12:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:2a:67:28:1f:13:0e:13:ae:f3:eb:84:ff:19:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Feb 14 11:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d221f1faefa45c80f131358ebe3782481bf382e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8b:37:f1:ca:08:38:cc:d4:e2:31:f4:d2:98:
d0:60:56:5c:78:bf:6e:fd:bb:a5:b4:5c:07:a5:ac:
3b:62:eb:e4:63:c2:23:5c:49:01:2c:cb:9f:00:ee:
a0:c1:9c:2c:df:04:e9:0d:47:1a:74:0d:8a:4f:b5:
ba:2c:b8:30:92:37:b7:1e:9d:26:4d:62:1d:5b:f6:
1c:49:30:e1:68:82:f5:48:72:ac:7a:52:ed:7b:a1:
26:0b:b6:c2:cf:b3:e7:40:c4:e1:57:48:ed:ce:0d:
08:01:e3:b3:d8:9c:ab:c2:5a:c5:5a:29:e8:f4:b6:
73:6c:54:21:ab:4d:d1:98:5e:b0:14:bf:f4:7c:49:
4a:3b:16:e6:69:bf:bb:22:81:b5:5b:61:e7:20:d6:
21:fc:45:b7:90:97:1a:e5:d2:51:33:9a:b6:cb:a8:
de:42:c3:d8:26:0c:05:0a:89:3d:d7:45:13:6e:f2:
94:5d:c1:b6:3f:4b:9d:27:43:db:55:5c:24:d3:b4:
ec:68:97:ff:8a:97:56:41:a9:e6:90:20:0d:dc:01:
f3:7d:b4:11:1a:e2:b6:d9:82:f4:70:f0:94:83:e1:
8f:f1:9d:46:d0:e7:3d:82:d7:95:97:62:b9:c3:18:
79:06:8a:3e:f7:78:33:84:12:1a:45:f9:4e:72:59:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:F1:FA:EF:A4:5C:80:F1:31:35:8E:BE:37:82:48:1B:F3:82:E0
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/0iHx-u-kXIDxMTWOvjeCSBvzguA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
Signature Algorithm: sha256WithRSAEncryption
66:09:5f:0b:c1:17:a7:33:53:ce:ae:56:ae:69:71:ae:94:2f:
70:b5:18:e1:cf:9b:25:b2:c0:a3:40:96:dd:e9:8d:66:7b:a9:
ef:9d:ae:5a:fb:4b:78:91:b1:0d:df:51:d0:43:90:cd:00:2a:
e4:73:e7:13:35:a4:99:62:9e:83:27:be:10:40:06:16:a2:3f:
5f:67:3e:d8:fa:e5:35:27:49:84:d1:16:ea:b9:0a:f8:f5:0a:
a1:eb:39:c2:5c:c7:d2:12:99:d6:19:6f:3d:5c:5d:cc:0c:8f:
af:16:94:c0:d3:dd:a1:47:58:ab:b6:e9:6f:84:48:14:9c:98:
b4:64:44:92:65:71:49:b8:16:df:7a:74:ec:1b:62:ca:46:cf:
f5:0a:c7:e2:07:21:12:bf:1e:ea:e3:2f:8b:ea:1d:a7:12:c0:
90:2f:80:e8:9d:e3:93:35:de:1a:06:77:5f:66:41:ac:a5:2f:
b6:7f:83:2e:b0:73:6c:f0:c6:f6:8a:f8:5a:d5:db:1e:ca:db:
95:7a:99:b4:ca:00:62:90:de:a8:8a:f5:69:5b:90:93:ad:af:
22:bd:4c:18:9a:7c:2c:ee:c4:b1:cb:70:ce:3f:5d:d3:17:e0:
52:02:1b:9f:c9:10:7e:72:ba:56:c5:42:62:0b:61:ea:0d:7a:
fe:1f:09:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUEKmcoHxMOE67z64T/GZAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh
OWU5MjEwHhcNMjUwMjE0MTExNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjIxZjFmYWVmYTQ1YzgwZjEzMTM1OGViZTM3ODI0ODFiZjM4MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ys38coIOMzU4jH00pjQYFZceL9u
/bultFwHpaw7YuvkY8IjXEkBLMufAO6gwZws3wTpDUcadA2KT7W6LLgwkje3Hp0m
TWIdW/YcSTDhaIL1SHKselLte6EmC7bCz7PnQMThV0jtzg0IAeOz2JyrwlrFWino
9LZzbFQhq03RmF6wFL/0fElKOxbmab+7IoG1W2HnINYh/EW3kJca5dJRM5q2y6je
QsPYJgwFCok910UTbvKUXcG2P0udJ0PbVVwk07TsaJf/ipdWQanmkCAN3AHzfbQR
GuK22YL0cPCUg+GP8Z1G0Oc9gteVl2K5wxh5Boo+93gzhBIaRflOcllNnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNIh8frvpFyA8TE1jr43gkgb84LgMB8GA1UdIwQY
MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt
NWViYjYzNzgwMDllLzEvMGlIeC11LWtYSUR4TVRXT3ZqZUNTQnZ6Z3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll
LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DDMA0G
CSqGSIb3DQEBCwUAA4IBAQBmCV8LwRenM1POrlauaXGulC9wtRjhz5slssCjQJbd
6Y1me6nvna5a+0t4kbEN31HQQ5DNACrkc+cTNaSZYp6DJ74QQAYWoj9fZz7Y+uU1
J0mE0RbquQr49Qqh6znCXMfSEpnWGW89XF3MDI+vFpTA092hR1irtulvhEgUnJi0
ZESSZXFJuBbfenTsG2LKRs/1CsfiByESvx7q4y+L6h2nEsCQL4DoneOTNd4aBndf
ZkGspS+2f4MusHNs8Mb2ivha1dseytuVepm0ygBikN6oivVpW5CTra8ivUwYmnws
7sSxy3DOP13TF+BSAhufyRB+crpWxUJiC2HqDXr+Hwmk
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:53:47 2025 by rpki-client