Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Asho6Lt9UFNkMNTZHrtDar00MrI.roa
File: Asho6Lt9UFNkMNTZHrtDar00MrI.roa (raw, json)
Hash identifier: AbFTamjmE6I3tFRcII5LYb549HZWVDdBi+RZkFFJbZQ=
Subject key identifier: 02:C8:68:E8:BB:7D:50:53:64:30:D4:D9:1E:BB:43:6A:BD:34:32:B2
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCB8BD2C1A8D16D456ED0DC02DD8AF
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Asho6Lt9UFNkMNTZHrtDar00MrI.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25508
IP address blocks: 194.179.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b8:bd:2c:1a:8d:16:d4:56:ed:0d:c0:2d:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02c868e8bb7d50536430d4d91ebb436abd3432b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:b8:78:44:71:51:2d:90:9c:a6:8d:fe:70:
86:88:59:46:2f:d0:5e:5f:4e:ec:7d:91:93:7c:d0:
1a:ec:b8:cb:17:9c:5f:76:30:e7:cc:b2:dd:85:57:
25:ff:4b:37:44:de:a3:96:54:65:8c:fe:83:f1:fc:
b1:24:52:b9:a2:8c:a4:da:2c:e0:92:db:c8:b0:30:
5d:57:e6:33:d5:d0:82:15:35:8f:6e:a3:2b:6e:7e:
b6:53:1a:f0:a0:58:6a:04:d3:55:8d:c9:57:dc:e1:
29:54:d6:d0:05:40:52:b1:b2:6a:5c:2b:cc:6e:ee:
f3:8c:2c:e8:8f:d0:2a:69:d2:8e:ff:93:22:97:79:
14:ae:0b:4a:29:26:6a:42:52:9a:ce:b1:85:6d:9f:
eb:fd:ee:12:81:56:0e:33:25:3d:7e:24:90:a6:4c:
f5:69:81:08:8f:a8:e9:2e:d4:17:ac:31:95:0e:99:
f6:5f:9e:ea:d6:61:63:73:14:aa:4e:2d:86:9a:a2:
98:20:1f:df:7c:a6:d5:0b:bf:aa:cc:e2:22:46:e1:
1b:73:d9:c9:59:50:10:46:54:47:6b:9c:8d:ed:0a:
8a:6d:df:13:7d:49:77:6a:f7:6c:25:b6:d1:0c:48:
f3:13:fe:73:eb:f1:4d:2e:e7:b2:89:19:98:a5:b8:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C8:68:E8:BB:7D:50:53:64:30:D4:D9:1E:BB:43:6A:BD:34:32:B2
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Asho6Lt9UFNkMNTZHrtDar00MrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.41.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7c:1a:67:c3:e3:4c:e6:6a:71:87:df:f1:e1:c2:82:21:b4:
79:08:1f:0e:fb:d3:7a:59:a2:d0:dd:d2:21:88:43:f1:d2:12:
6c:bf:11:ee:a2:7c:1a:10:0c:86:40:1f:73:cc:88:dd:42:fc:
5c:d7:d9:95:c0:8a:a9:da:72:36:dc:c8:38:3d:a5:2a:44:cd:
9e:d4:6a:66:a3:57:84:10:80:6c:95:01:ca:9e:b1:c8:3e:4a:
1f:9e:8d:b5:0c:0a:0d:ab:f4:a0:86:5f:83:42:4f:8b:09:1b:
e4:f0:72:cf:0b:4c:d4:13:f4:57:5f:17:2a:6f:e4:32:e0:7a:
81:a9:25:06:37:6a:ab:7f:a8:8d:7b:13:ee:c3:83:ce:70:4e:
74:ad:06:e2:90:50:16:ed:ea:93:6f:01:65:14:9b:63:f8:71:
b9:9c:2b:80:dd:07:42:23:2c:9e:c3:88:f5:13:4e:01:cd:84:
66:29:cf:d4:a6:5f:7c:80:6e:80:23:08:a6:01:75:ce:21:9f:
b4:56:5e:2c:27:48:f2:06:9d:0a:af:07:f8:c7:a8:3f:ac:56:
75:c1:03:9b:58:27:41:03:ae:e6:51:80:25:6e:88:59:1f:95:
a7:c9:07:53:9d:70:90:32:8f:4f:46:41:43:33:91:26:c3:6e:
19:f6:41:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvLi9LBqNFtRW7Q3ALdivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMTAyMTAzMzU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmM4NjhlOGJiN2Q1MDUzNjQzMGQ0ZDkxZWJiNDM2YWJkMzQzMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloa4eERxUS2QnKaN/nCGiFlGL9Be
X07sfZGTfNAa7LjLF5xfdjDnzLLdhVcl/0s3RN6jllRljP6D8fyxJFK5ooyk2izg
ktvIsDBdV+Yz1dCCFTWPbqMrbn62UxrwoFhqBNNVjclX3OEpVNbQBUBSsbJqXCvM
bu7zjCzoj9AqadKO/5Mil3kUrgtKKSZqQlKazrGFbZ/r/e4SgVYOMyU9fiSQpkz1
aYEIj6jpLtQXrDGVDpn2X57q1mFjcxSqTi2GmqKYIB/ffKbVC7+qzOIiRuEbc9nJ
WVAQRlRHa5yN7QqKbd8TfUl3avdsJbbRDEjzE/5z6/FNLueyiRmYpbhl4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALIaOi7fVBTZDDU2R67Q2q9NDKyMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvQXNobzZMdDlVRk5rTU5UWkhydERhcjAwTXJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrMpMA0G
CSqGSIb3DQEBCwUAA4IBAQA0fBpnw+NM5mpxh9/x4cKCIbR5CB8O+9N6WaLQ3dIh
iEPx0hJsvxHuonwaEAyGQB9zzIjdQvxc19mVwIqp2nI23Mg4PaUqRM2e1Gpmo1eE
EIBslQHKnrHIPkofno21DAoNq/Sghl+DQk+LCRvk8HLPC0zUE/RXXxcqb+Qy4HqB
qSUGN2qrf6iNexPuw4POcE50rQbikFAW7eqTbwFlFJtj+HG5nCuA3QdCIyyew4j1
E04BzYRmKc/Upl98gG6AIwimAXXOIZ+0Vl4sJ0jyBp0Krwf4x6g/rFZ1wQObWCdB
A67mUYAlbohZH5WnyQdTnXCQMo9PRkFDM5Emw24Z9kE7
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:57:53 2025 by rpki-client