Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/bXEGo9EY24Bt7NsW4IfhHivU5dM.roa
File: bXEGo9EY24Bt7NsW4IfhHivU5dM.roa (raw, json)
Hash identifier: ibqOaX3BzInk7XxM/EJbzODeP8uTjE3EQ7g10OWU4Fg=
Subject key identifier: 6D:71:06:A3:D1:18:DB:80:6D:EC:DB:16:E0:87:E1:1E:2B:D4:E5:D3
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 018CC94D736A0DA29E1FDFBA1999CD706AE4
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/bXEGo9EY24Bt7NsW4IfhHivU5dM.roa
Signing time: Tue 02 Jan 2024 08:32:25 +0000
ROA not before: Tue 02 Jan 2024 08:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41026
IP address blocks: 195.140.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:73:6a:0d:a2:9e:1f:df:ba:19:99:cd:70:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Jan 2 08:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d7106a3d118db806decdb16e087e11e2bd4e5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:f1:1f:c5:36:17:82:9b:4f:95:83:df:79:
3d:9a:3f:5e:24:86:ba:0b:b8:9f:ea:7e:22:ad:d0:
4e:78:01:2d:3f:a5:c4:31:6e:c7:a7:f3:1b:88:5b:
0d:00:cc:56:6c:22:d7:c2:05:5f:5c:b5:9e:e2:3a:
dd:1d:be:a4:10:6e:d6:06:9d:3d:00:e8:e4:47:47:
fa:29:b3:9d:a6:fe:5c:fd:71:b3:6a:31:b2:7a:31:
64:38:a3:7d:4d:8c:c6:3e:08:da:8a:41:c1:03:db:
30:13:6c:0e:75:a1:a8:d4:63:90:0c:e5:9c:ed:2c:
17:36:21:0c:82:af:d4:d7:d0:03:8a:53:ce:be:b3:
fb:d2:52:25:37:0c:d4:81:82:83:e6:25:fb:4a:39:
74:5e:f6:1d:cf:3e:3d:62:00:92:e8:b0:06:b0:4d:
5b:a1:f5:89:84:19:5b:94:8b:73:af:13:c9:1d:9a:
67:47:e8:4c:43:c4:93:68:86:9b:38:80:35:df:aa:
d1:a2:5f:14:ae:ee:82:5f:23:02:ed:15:04:e9:41:
a5:f9:da:c0:ce:bf:b4:f0:b9:13:28:2a:27:35:76:
f6:7f:10:6d:a4:1a:00:f3:a8:cd:f1:80:bc:86:97:
c3:04:6e:ed:97:54:8c:fd:c9:bd:f1:82:01:b3:50:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:06:A3:D1:18:DB:80:6D:EC:DB:16:E0:87:E1:1E:2B:D4:E5:D3
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/bXEGo9EY24Bt7NsW4IfhHivU5dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.152.0/22
Signature Algorithm: sha256WithRSAEncryption
46:c3:0c:c5:e6:93:bb:84:a9:29:25:54:d2:00:c5:29:c8:4e:
0e:bb:30:0f:0b:ba:b0:42:db:ab:c2:7f:f7:2f:66:4e:4a:fd:
fa:15:0a:07:af:d3:e0:c2:08:f0:77:9d:7c:e2:85:50:df:6f:
b4:74:9b:4a:66:83:63:50:53:64:a1:11:19:41:78:8b:f0:06:
4d:1d:d4:e0:63:6a:a7:8c:32:96:e5:e7:d3:ae:45:0c:b2:ca:
54:ba:80:16:ec:dc:c2:ef:f7:25:1f:e6:b0:8d:23:bc:2f:d7:
a1:2e:d0:09:71:74:cb:92:11:8a:ae:63:5f:e0:71:b5:f4:32:
48:2c:2b:d2:14:b2:2a:2a:23:8e:93:2d:e6:b5:15:ae:bc:91:
f6:2d:f4:df:93:03:54:44:56:e2:d8:11:ce:ae:a6:5f:d8:ba:
39:66:8d:ad:9a:18:ab:e2:28:94:36:57:a3:e8:e8:90:78:6c:
ce:e5:dd:f3:8d:95:1d:90:55:46:a7:6c:9c:2d:c0:57:c9:35:
a3:38:8e:f6:b0:a7:40:f8:14:ba:84:d4:75:da:d1:e5:e0:21:
cd:78:64:3b:01:1b:9c:29:c8:f1:ab:15:8e:f6:a8:98:ca:61:
35:f0:31:d5:ef:ea:21:75:d8:e0:7e:92:2d:a2:42:c1:35:63:
43:c8:10:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTXNqDaKeH9+6GZnNcGrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDMzNmRhMWViNzIxNmUyMGVjMDRhN2YwMzFlYjRhMWI2
MzFiYjMwHhcNMjQwMTAyMDgzMjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDcxMDZhM2QxMThkYjgwNmRlY2RiMTZlMDg3ZTExZTJiZDRlNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvprxH8U2F4KbT5WD33k9mj9eJIa6
C7if6n4irdBOeAEtP6XEMW7Hp/MbiFsNAMxWbCLXwgVfXLWe4jrdHb6kEG7WBp09
AOjkR0f6KbOdpv5c/XGzajGyejFkOKN9TYzGPgjaikHBA9swE2wOdaGo1GOQDOWc
7SwXNiEMgq/U19ADilPOvrP70lIlNwzUgYKD5iX7Sjl0XvYdzz49YgCS6LAGsE1b
ofWJhBlblItzrxPJHZpnR+hMQ8STaIabOIA136rRol8Uru6CXyMC7RUE6UGl+drA
zr+08LkTKConNXb2fxBtpBoA86jN8YC8hpfDBG7tl1SM/cm98YIBs1BOBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1xBqPRGNuAbezbFuCH4R4r1OXTMB8GA1UdIwQY
MBaAFJpDNtoetyFuIOwEp/Ax60obYxuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYt
ZmE4ODA2YTAyNGM0LzEvYlhFR285RVkyNEJ0N05zVzRJZmhIaXZVNWRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYtZmE4ODA2YTAyNGM0
LzEvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4yYMA0G
CSqGSIb3DQEBCwUAA4IBAQBGwwzF5pO7hKkpJVTSAMUpyE4OuzAPC7qwQturwn/3
L2ZOSv36FQoHr9Pgwgjwd5184oVQ32+0dJtKZoNjUFNkoREZQXiL8AZNHdTgY2qn
jDKW5efTrkUMsspUuoAW7NzC7/clH+awjSO8L9ehLtAJcXTLkhGKrmNf4HG19DJI
LCvSFLIqKiOOky3mtRWuvJH2LfTfkwNURFbi2BHOrqZf2Lo5Zo2tmhir4iiUNlej
6OiQeGzO5d3zjZUdkFVGp2ycLcBXyTWjOI72sKdA+BS6hNR12tHl4CHNeGQ7ARuc
KcjxqxWO9qiYymE18DHV7+ohddjgfpItokLBNWNDyBCa
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:52 2025 by rpki-client