Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/N2Q9IqkjTCp42Pvux3x9r09RknM.roa
File: N2Q9IqkjTCp42Pvux3x9r09RknM.roa (raw, json)
Hash identifier: 8ZE7CgrlY02lZlH/jzIRO5syF0egvKydooIEGKXJvxM=
Subject key identifier: 37:64:3D:22:A9:23:4C:2A:78:D8:FB:EE:C7:7C:7D:AF:4F:51:92:73
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 0192BF77E0623E29A896AD2F343E799DD430
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/N2Q9IqkjTCp42Pvux3x9r09RknM.roa
Signing time: Thu 24 Oct 2024 16:59:17 +0000
ROA not before: Thu 24 Oct 2024 16:59:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200357
IP address blocks: 194.104.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bf:77:e0:62:3e:29:a8:96:ad:2f:34:3e:79:9d:d4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Oct 24 16:59:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37643d22a9234c2a78d8fbeec77c7daf4f519273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:0c:7b:d1:fb:80:99:b0:a7:27:5d:ed:bc:
2c:0a:34:fd:b7:d5:4c:3d:0f:97:91:5b:7a:0e:1a:
e7:a5:75:4d:40:39:2c:f1:8f:2a:5b:d4:7e:58:71:
5b:a8:1b:7e:fd:ee:d4:d6:8c:03:55:cd:5b:8b:fa:
7d:2c:d4:e6:6c:02:f2:d3:0d:9f:92:41:45:08:a1:
8f:8e:6e:41:ba:dd:6c:24:7d:3e:6a:8e:91:78:59:
95:8c:84:c4:5b:4e:6b:a7:1e:4b:2e:a4:b1:74:4d:
ff:ee:7b:b2:4d:2d:f1:07:eb:91:07:94:08:75:c0:
6c:24:22:50:d4:30:03:3b:3e:9c:39:79:04:b0:54:
55:4d:be:40:82:fd:98:53:18:68:45:60:46:d9:e1:
8e:ed:b3:57:9a:28:fb:73:a1:f1:9b:40:ee:7e:60:
59:0b:d7:34:a4:c8:38:5e:c2:ef:85:c7:11:26:ee:
ae:48:44:f7:5c:4e:e7:3e:65:56:04:d6:2d:7e:05:
37:2d:9b:6c:a0:d4:d6:2c:2c:32:d4:ad:ad:b0:56:
be:91:ea:6a:57:72:27:6b:a7:a0:82:d3:ff:d9:48:
02:24:c6:4e:53:ff:85:aa:62:f8:0e:84:2b:83:02:
cd:9e:d0:4e:aa:18:33:26:27:35:58:aa:40:bc:ab:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:3D:22:A9:23:4C:2A:78:D8:FB:EE:C7:7C:7D:AF:4F:51:92:73
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/N2Q9IqkjTCp42Pvux3x9r09RknM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.20.0/22
Signature Algorithm: sha256WithRSAEncryption
01:be:f7:be:68:70:a2:69:89:5c:a3:82:0e:d9:a6:91:16:3b:
52:ab:3d:fc:dc:f0:7a:b3:ca:22:20:d3:fe:e4:be:01:24:2c:
f4:ef:85:42:43:ca:53:0e:9a:55:ef:cf:ce:1a:c6:1e:cf:01:
68:4f:9a:30:57:4f:03:49:9d:8f:3c:99:93:9b:f7:ec:88:a7:
81:7c:d8:cf:5d:ad:0a:91:e8:03:82:f1:cb:0a:b6:95:4d:da:
ed:0c:ff:c2:74:07:af:4d:80:9c:e4:be:36:86:f7:32:dd:86:
0f:7c:2c:67:84:7e:4c:29:4f:64:06:9c:ab:3b:00:50:45:9c:
6d:36:47:83:e0:9c:f6:bd:d1:a0:1c:53:eb:8e:34:1c:7b:94:
dd:4b:3d:4f:2b:7f:ad:ad:93:69:79:2e:bc:de:e8:6d:6c:18:
16:56:59:a7:a6:2b:9a:ef:bc:81:58:25:33:e8:14:28:48:51:
47:dd:8b:61:d1:8c:ce:6b:7d:25:83:8a:c2:a7:a1:d6:92:c1:
92:e7:33:10:32:7d:df:b9:f8:96:d0:2d:a6:ce:78:43:c2:49:
51:14:f9:fb:38:20:f6:a9:79:67:f3:ce:ee:2c:42:63:eb:a8:
e8:e3:87:e5:b5:f3:a2:93:f0:76:09:83:be:57:1a:7e:f7:b6:
8f:53:66:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK/d+BiPimolq0vND55ndQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4
ZWNkY2IwHhcNMjQxMDI0MTY1OTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY0M2QyMmE5MjM0YzJhNzhkOGZiZWVjNzdjN2RhZjRmNTE5MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrgMe9H7gJmwpydd7bwsCjT9t9VM
PQ+XkVt6DhrnpXVNQDks8Y8qW9R+WHFbqBt+/e7U1owDVc1bi/p9LNTmbALy0w2f
kkFFCKGPjm5But1sJH0+ao6ReFmVjITEW05rpx5LLqSxdE3/7nuyTS3xB+uRB5QI
dcBsJCJQ1DADOz6cOXkEsFRVTb5Agv2YUxhoRWBG2eGO7bNXmij7c6Hxm0DufmBZ
C9c0pMg4XsLvhccRJu6uSET3XE7nPmVWBNYtfgU3LZtsoNTWLCwy1K2tsFa+kepq
V3Ina6eggtP/2UgCJMZOU/+FqmL4DoQrgwLNntBOqhgzJic1WKpAvKujXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdkPSKpI0wqeNj77sd8fa9PUZJzMB8GA1UdIwQY
MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt
NDAxYmRhNDQ3N2I1LzEvTjJROUlxa2pUQ3A0MlB2dXgzeDlyMDlSa25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1
LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwmgUMA0G
CSqGSIb3DQEBCwUAA4IBAQABvve+aHCiaYlco4IO2aaRFjtSqz383PB6s8oiINP+
5L4BJCz074VCQ8pTDppV78/OGsYezwFoT5owV08DSZ2PPJmTm/fsiKeBfNjPXa0K
kegDgvHLCraVTdrtDP/CdAevTYCc5L42hvcy3YYPfCxnhH5MKU9kBpyrOwBQRZxt
NkeD4Jz2vdGgHFPrjjQce5TdSz1PK3+trZNpeS683uhtbBgWVlmnpiua77yBWCUz
6BQoSFFH3Yth0YzOa30lg4rCp6HWksGS5zMQMn3fufiW0C2mznhDwklRFPn7OCD2
qXln887uLEJj66jo44fltfOik/B2CYO+Vxp+97aPU2at
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:56 2025 by rpki-client