Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/7AcwvGVxXvG9r_Ssv62uX3IWOfQ.roa
File: 7AcwvGVxXvG9r_Ssv62uX3IWOfQ.roa (raw, json)
Hash identifier: LC05pd6Fxn6CbtwycAOW2jpqE5EMyAQGmmM9x/CY+xQ=
Subject key identifier: EC:07:30:BC:65:71:5E:F1:BD:AF:F4:AC:BF:AD:AE:5F:72:16:39:F4
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D6572E7B6DEFA20F81A182C45C6FBD
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/7AcwvGVxXvG9r_Ssv62uX3IWOfQ.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 188.241.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 17:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:2e:7b:6d:ef:a2:0f:81:a1:82:c4:5c:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec0730bc65715ef1bdaff4acbfadae5f721639f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:f4:aa:44:f4:4d:7b:98:4f:96:3c:be:f6:
9b:d5:11:1b:be:25:aa:2d:45:dc:2b:c2:5f:7a:23:
fd:e0:fe:05:23:a2:1c:a6:ca:05:b4:fe:2b:c3:f4:
8f:be:14:19:99:e2:f0:3c:85:c0:33:ad:47:da:87:
66:13:bf:8b:6b:8c:63:59:45:f9:4a:0b:4d:e1:61:
9f:84:7a:6f:d1:34:98:47:c5:4b:e5:05:e4:d2:40:
20:87:2d:f9:93:4f:5e:98:c2:84:34:0a:40:f1:43:
a1:54:1e:ee:75:55:b2:c2:a1:0e:4b:4a:fc:dc:95:
e8:e9:af:da:28:a2:86:9f:e1:98:f2:23:58:61:c5:
1f:55:d9:54:e4:71:67:66:f5:a8:e7:7a:07:fe:f4:
3c:1e:a8:8a:07:6c:2b:b7:0d:2d:33:e1:2d:0e:bb:
e8:e6:e9:c3:63:b4:c3:8f:7c:9a:09:71:80:73:5d:
56:35:dd:e1:ff:06:14:ff:c1:dd:99:a4:1d:38:86:
49:4e:5c:ec:3b:6c:8b:78:ec:82:5c:1e:98:99:c1:
4d:65:a5:73:dd:19:3b:1e:3f:84:65:79:db:6d:8d:
90:d7:92:cc:fd:b3:e4:94:76:42:50:49:08:82:e8:
28:90:58:8e:75:67:1b:16:78:5d:9e:ad:14:b5:ce:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:30:BC:65:71:5E:F1:BD:AF:F4:AC:BF:AD:AE:5F:72:16:39:F4
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/7AcwvGVxXvG9r_Ssv62uX3IWOfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b5:3b:cb:7b:a9:e1:0b:13:c2:84:f6:1d:99:82:be:01:47:
8f:91:08:f2:f6:f8:8a:0b:69:1b:60:96:f9:88:c1:35:8d:3d:
c3:ac:93:86:34:f7:61:4f:12:90:4b:57:ac:8a:6f:ff:de:60:
c2:5e:b9:c9:5e:9d:4f:f6:65:72:aa:cd:8c:67:4e:31:b5:55:
71:f2:b3:67:67:16:1a:03:48:2c:2d:65:93:5c:ab:81:1d:3f:
24:35:cc:57:87:9d:16:68:63:00:45:58:e6:4f:4c:b7:1b:36:
27:65:b4:af:d0:61:6b:02:bc:70:19:e7:ce:c8:33:8c:77:2e:
4f:41:d2:11:52:57:93:b9:84:91:68:e6:5a:6b:e4:e9:1b:00:
5a:45:d7:de:f6:0d:e0:ee:a7:ad:6b:7d:3c:f6:49:66:7a:75:
ae:62:8b:b4:44:28:58:2d:79:87:80:00:9f:2c:02:5e:3d:36:
41:e1:fe:a1:dc:af:a7:82:3e:bc:b2:9f:16:50:e0:76:15:02:
a2:13:90:2f:f6:06:4d:a7:d1:e6:24:79:f2:fe:20:22:3f:cb:
27:9f:ca:fc:28:76:2e:26:59:e4:eb:23:7c:91:09:54:19:07:
47:83:d5:71:7e:d9:a4:2e:f6:40:2b:da:75:40:d1:d1:96:77:
30:b1:97:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lcue23vog+BoYLEXG+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUwMTAxMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzA3MzBiYzY1NzE1ZWYxYmRhZmY0YWNiZmFkYWU1ZjcyMTYzOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLn0qkT0TXuYT5Y8vvab1REbviWq
LUXcK8JfeiP94P4FI6IcpsoFtP4rw/SPvhQZmeLwPIXAM61H2odmE7+La4xjWUX5
SgtN4WGfhHpv0TSYR8VL5QXk0kAghy35k09emMKENApA8UOhVB7udVWywqEOS0r8
3JXo6a/aKKKGn+GY8iNYYcUfVdlU5HFnZvWo53oH/vQ8HqiKB2wrtw0tM+EtDrvo
5unDY7TDj3yaCXGAc11WNd3h/wYU/8HdmaQdOIZJTlzsO2yLeOyCXB6YmcFNZaVz
3Rk7Hj+EZXnbbY2Q15LM/bPklHZCUEkIgugokFiOdWcbFnhdnq0Utc5eNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwHMLxlcV7xva/0rL+trl9yFjn0MB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvN0Fjd3ZHVnhYdkc5cl9Tc3Y2MnVYM0lXT2ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPHAMA0G
CSqGSIb3DQEBCwUAA4IBAQAftTvLe6nhCxPChPYdmYK+AUePkQjy9viKC2kbYJb5
iME1jT3DrJOGNPdhTxKQS1esim//3mDCXrnJXp1P9mVyqs2MZ04xtVVx8rNnZxYa
A0gsLWWTXKuBHT8kNcxXh50WaGMARVjmT0y3GzYnZbSv0GFrArxwGefOyDOMdy5P
QdIRUleTuYSRaOZaa+TpGwBaRdfe9g3g7qeta3089klmenWuYou0RChYLXmHgACf
LAJePTZB4f6h3K+ngj68sp8WUOB2FQKiE5Av9gZNp9HmJHny/iAiP8snn8r8KHYu
Jlnk6yN8kQlUGQdHg9VxftmkLvZAK9p1QNHRlncwsZd4
-----END CERTIFICATE-----
Generated at Wed Feb 5 11:50:59 2025 by rpki-client