Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-yYkekEPHBY9talMe07yeOxRW9U.roa
File: 1-yYkekEPHBY9talMe07yeOxRW9U.roa (raw, json)
Hash identifier: 1GmYk18moiQtpJXyMbhEyOkEGBsjcsmvJgq8TvtyAMs=
Subject key identifier: FB:26:24:7A:41:0F:1C:16:3D:B5:A9:4C:7B:4E:F2:78:EC:51:5B:D5
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456B5F2CD0D36C5EA7B00C4FC6663D
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-yYkekEPHBY9talMe07yeOxRW9U.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208635
IP address blocks: 195.53.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 05:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6b:5f:2c:d0:d3:6c:5e:a7:b0:0c:4f:c6:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb26247a410f1c163db5a94c7b4ef278ec515bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:ad:bd:2c:bd:fb:d4:d8:ad:19:35:00:fb:
de:fe:0c:df:4f:60:ff:95:c2:b3:28:20:62:74:0d:
4d:7a:9f:14:ce:cf:ad:f1:ab:c4:3a:c9:b3:94:f7:
33:e4:a7:1c:82:30:dd:e0:3c:8b:5d:61:14:fc:2b:
05:a5:43:9e:f7:36:a3:72:b8:92:c9:5b:c7:99:e1:
30:49:8d:3d:f6:12:d5:bd:cf:35:6c:41:1e:9d:a1:
ab:d0:fc:ce:89:e0:81:47:6f:4c:fe:90:46:86:3c:
a9:ef:c8:6e:a5:f6:b4:f9:4c:bf:d1:8a:79:8f:bf:
f2:af:f3:70:4c:ca:c1:23:3a:7f:58:3e:5b:5d:a7:
2a:a0:ee:ca:76:d0:d9:13:7a:bb:e8:43:62:46:e1:
6e:7f:7c:1b:12:22:37:3c:9e:2f:40:76:75:01:c9:
91:f4:bd:fb:98:0f:6c:3c:7a:16:1d:30:81:d6:c2:
a8:b6:38:13:31:a6:9d:6d:4a:fd:ac:1c:8c:40:70:
74:18:3e:41:5a:d3:a2:89:30:b1:96:49:6c:11:de:
b9:a7:2d:86:42:7c:a7:31:02:3c:47:18:33:6d:0f:
be:7b:ed:15:72:2d:97:f9:d6:c8:8d:bf:12:a5:96:
0b:16:89:23:01:2b:1b:14:e1:47:4e:ec:26:32:fa:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:24:7A:41:0F:1C:16:3D:B5:A9:4C:7B:4E:F2:78:EC:51:5B:D5
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/1-yYkekEPHBY9talMe07yeOxRW9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:0b:f7:b0:f4:7f:8c:8a:66:ec:3d:27:8d:b1:c1:5e:b8:6b:
ce:d9:94:7d:93:7d:c0:33:22:80:b2:fa:ac:2b:da:88:42:c3:
e5:95:4e:52:4b:40:e5:57:a9:2f:41:b6:b0:75:34:bb:f8:0d:
16:03:81:8d:2e:52:51:7b:6d:3a:c0:6a:50:54:4a:72:00:de:
74:8a:3e:00:a9:96:f1:51:d5:00:1d:10:ed:19:4a:0e:e3:73:
29:8d:fa:33:d4:a9:21:25:33:1f:10:c3:cf:a2:b5:60:a7:fe:
2b:37:8b:3b:e2:10:28:99:f4:81:09:fb:83:80:80:ff:dc:26:
72:11:2d:da:04:6c:cc:1c:5f:88:d7:37:ce:fb:cb:8c:29:91:
eb:f0:c2:26:c0:e2:d7:c5:92:39:8c:36:ba:a0:7c:de:e6:b7:
e6:dd:75:d8:12:39:cd:10:da:de:88:9b:d4:fc:8d:80:68:86:
7a:b1:ea:b4:e6:ee:21:88:cd:5f:03:07:7f:d9:e4:75:40:be:
dc:60:3b:74:47:44:1d:33:4c:ae:32:70:fa:c8:00:3b:d8:44:
55:bb:97:5e:ce:dc:ec:4c:a5:34:42:5f:c3:d8:25:06:6e:41:
4f:1d:09:20:10:b9:fa:d5:51:4e:20:b1:be:ab:2d:76:d5:a8:
ae:f0:ee:5a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRWtfLNDTbF6nsAxPxmY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjUwMTAxMjM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjI2MjQ3YTQxMGYxYzE2M2RiNWE5NGM3YjRlZjI3OGVjNTE1YmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqStvSy9+9TYrRk1APve/gzfT2D/
lcKzKCBidA1Nep8Uzs+t8avEOsmzlPcz5KccgjDd4DyLXWEU/CsFpUOe9zajcriS
yVvHmeEwSY099hLVvc81bEEenaGr0PzOieCBR29M/pBGhjyp78hupfa0+Uy/0Yp5
j7/yr/NwTMrBIzp/WD5bXacqoO7KdtDZE3q76ENiRuFuf3wbEiI3PJ4vQHZ1AcmR
9L37mA9sPHoWHTCB1sKotjgTMaadbUr9rByMQHB0GD5BWtOiiTCxlklsEd65py2G
QnynMQI8RxgzbQ++e+0Vci2X+dbIjb8SpZYLFokjASsbFOFHTuwmMvpevwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsmJHpBDxwWPbWpTHtO8njsUVvVMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvMS15WWtla0VQSEJZOXRhbE1lMDd5ZU94Ulc5VS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjcvZGNmZDQ4LWM1NGEtNGM3OC1hNGVkLTRiYTJmOGYxZjgz
Yi8xL01IOWY0blFLSzIza3czQ2RLV1FSV3p5V2ZhRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMM1RTAN
BgkqhkiG9w0BAQsFAAOCAQEAyQv3sPR/jIpm7D0njbHBXrhrztmUfZN9wDMigLL6
rCvaiELD5ZVOUktA5VepL0G2sHU0u/gNFgOBjS5SUXttOsBqUFRKcgDedIo+AKmW
8VHVAB0Q7RlKDuNzKY36M9SpISUzHxDDz6K1YKf+KzeLO+IQKJn0gQn7g4CA/9wm
chEt2gRszBxfiNc3zvvLjCmR6/DCJsDi18WSOYw2uqB83ua35t112BI5zRDa3oib
1PyNgGiGerHqtObuIYjNXwMHf9nkdUC+3GA7dEdEHTNMrjJw+sgAO9hEVbuXXs7c
7EylNEJfw9glBm5BTx0JIBC5+tVRTiCxvqstdtWorvDuWg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:33:59 2025 by rpki-client