Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/3QjnnSj1hQKsP-1ylInbcvLdMk0.roa
File: 3QjnnSj1hQKsP-1ylInbcvLdMk0.roa (raw, json)
Hash identifier: zz3CyqKYwm0d17bXCrPvu/U3EBbv/3gWWRjOkuZzlt4=
Subject key identifier: DD:08:E7:9D:28:F5:85:02:AC:3F:ED:72:94:89:DB:72:F2:DD:32:4D
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBA82C5BDF3B70A5A35E3D781AA7D
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/3QjnnSj1hQKsP-1ylInbcvLdMk0.roa
Signing time: Tue 02 Jan 2024 10:33:58 +0000
ROA not before: Tue 02 Jan 2024 10:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43697
IP address blocks: 195.57.128.0/24 maxlen: 24
195.235.199.0/24 maxlen: 24
195.57.169.0/24 maxlen: 24
194.179.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ba:82:c5:bd:f3:b7:0a:5a:35:e3:d7:81:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd08e79d28f58502ac3fed729489db72f2dd324d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:cc:c7:d9:26:4a:66:65:6a:1b:b7:40:d2:
bc:84:a0:a1:f0:9b:a8:22:56:48:d4:93:90:0c:94:
a9:67:8d:14:33:e7:9a:be:5a:46:9b:fd:00:68:af:
87:e9:fb:53:66:31:8e:d8:ed:91:e5:74:de:83:98:
28:b2:15:b6:3e:0f:f4:66:eb:62:68:a2:2a:7c:dd:
58:65:d1:82:29:d4:8f:19:95:b8:34:50:07:6e:38:
d3:dd:f9:14:16:0d:14:2b:ec:83:21:2e:c3:b1:e2:
48:ad:50:90:b1:6b:c9:5c:1c:77:e7:a4:13:f8:7c:
7f:4a:37:dd:53:af:be:c7:ca:9e:7c:41:be:11:da:
54:fb:4d:19:31:5d:36:85:bb:d8:58:e5:fa:cd:bb:
11:09:86:e5:64:0e:3d:fd:a1:6a:b9:83:6a:09:88:
5a:39:cd:b4:ae:2b:1c:91:6c:94:f0:bd:3b:0f:5c:
f9:ad:fc:0a:2e:d1:56:6f:fd:c5:8e:3c:d0:b9:fb:
bd:c5:81:a8:b1:0a:58:b4:b1:00:e0:09:7e:00:55:
88:e1:74:35:6f:8b:1b:dd:b5:2b:03:b7:6b:3b:49:
1a:52:68:f4:26:45:b6:13:1c:64:c5:3c:6a:b1:21:
51:7b:cc:6e:c1:02:6d:4e:31:92:db:f8:d8:38:45:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:E7:9D:28:F5:85:02:AC:3F:ED:72:94:89:DB:72:F2:DD:32:4D
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/3QjnnSj1hQKsP-1ylInbcvLdMk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.36.0/24
195.57.128.0/24
195.57.169.0/24
195.235.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0a:bf:89:6c:5d:93:51:ae:8b:5c:c1:6b:18:c9:36:c0:c7:
be:4c:43:3c:66:c5:e1:fc:e3:8f:ff:e6:62:c7:af:77:bd:04:
ce:9f:77:94:a9:c0:38:9b:89:df:9f:fa:2b:ed:23:88:93:ce:
af:61:42:91:a6:e2:0f:e7:43:06:46:b2:8e:56:d6:65:8c:25:
82:34:1a:b1:91:1b:b7:91:6c:01:67:16:59:e3:66:f9:df:1a:
55:1a:d3:b3:f7:67:5e:9e:e9:20:dd:6a:88:3c:94:02:cf:67:
6e:5d:85:34:73:ee:ed:3e:49:e1:9c:a3:01:cc:9d:73:4c:c1:
66:9c:b2:ed:20:70:c1:81:95:14:a6:c0:f3:7d:68:6c:c1:dd:
62:30:65:0e:62:03:e5:0a:00:79:de:9f:01:11:4a:b6:d8:c8:
b3:b7:1d:11:98:bd:55:80:f3:f6:71:79:63:e4:5f:25:0d:95:
b0:c4:e0:e0:82:ba:87:21:c9:83:83:1f:3c:ad:fc:8d:b5:64:
16:38:41:58:2e:d8:da:0d:68:9b:ef:ef:08:12:d1:17:7d:99:
05:af:b9:19:da:c4:cc:05:b3:02:f9:55:af:b0:7e:77:bb:66:
3e:11:4d:6c:2f:a4:8d:94:a5:2a:a9:4b:63:9d:03:d9:64:4a:
12:33:a3:91
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzJvLqCxb3ztwpaNePXgap9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMTAyMTAzMzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDA4ZTc5ZDI4ZjU4NTAyYWMzZmVkNzI5NDg5ZGI3MmYyZGQzMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDTMx9kmSmZlahu3QNK8hKCh8Juo
IlZI1JOQDJSpZ40UM+eavlpGm/0AaK+H6ftTZjGO2O2R5XTeg5goshW2Pg/0Zuti
aKIqfN1YZdGCKdSPGZW4NFAHbjjT3fkUFg0UK+yDIS7DseJIrVCQsWvJXBx356QT
+Hx/SjfdU6++x8qefEG+EdpU+00ZMV02hbvYWOX6zbsRCYblZA49/aFquYNqCYha
Oc20risckWyU8L07D1z5rfwKLtFWb/3FjjzQufu9xYGosQpYtLEA4Al+AFWI4XQ1
b4sb3bUrA7drO0kaUmj0JkW2ExxkxTxqsSFRe8xuwQJtTjGS2/jYOEW/BQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFN0I550o9YUCrD/tcpSJ23Ly3TJNMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvM1Fqbm5TajFoUUtzUC0xeWxJbmJjdkxkTWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwrMkAwQA
wzmAAwQAwzmpAwQAw+vHMA0GCSqGSIb3DQEBCwUAA4IBAQAaCr+JbF2TUa6LXMFr
GMk2wMe+TEM8ZsXh/OOP/+Zix693vQTOn3eUqcA4m4nfn/or7SOIk86vYUKRpuIP
50MGRrKOVtZljCWCNBqxkRu3kWwBZxZZ42b53xpVGtOz92denukg3WqIPJQCz2du
XYU0c+7tPknhnKMBzJ1zTMFmnLLtIHDBgZUUpsDzfWhswd1iMGUOYgPlCgB53p8B
EUq22Miztx0RmL1VgPP2cXlj5F8lDZWwxODggrqHIcmDgx88rfyNtWQWOEFYLtja
DWib7+8IEtEXfZkFr7kZ2sTMBbMC+VWvsH53u2Y+EU1sL6SNlKUqqUtjnQPZZEoS
M6OR
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:11 2025 by rpki-client