Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/R7Plgpw3ckDW_tJQL4n9FRzdpI4.roa
File: R7Plgpw3ckDW_tJQL4n9FRzdpI4.roa (raw, json)
Hash identifier: 68li8xf4KlCVtY/8aG5b+vP+f515nErEP2bzwjg1eVQ=
Subject key identifier: 47:B3:E5:82:9C:37:72:40:D6:FE:D2:50:2F:89:FD:15:1C:DD:A4:8E
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018D0D4D85E96A518C67A0CF35EA525EAB39
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/R7Plgpw3ckDW_tJQL4n9FRzdpI4.roa
Signing time: Mon 15 Jan 2024 13:26:40 +0000
ROA not before: Mon 15 Jan 2024 13:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215977
IP address blocks: 193.140.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:4d:85:e9:6a:51:8c:67:a0:cf:35:ea:52:5e:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 15 13:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47b3e5829c377240d6fed2502f89fd151cdda48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:f7:7f:57:ca:d9:cc:05:01:56:ed:a9:7a:
6c:b9:5b:69:42:fa:02:84:4d:8e:99:45:e8:9f:6e:
22:a7:94:be:24:2f:5a:03:c0:b0:5a:07:2d:d8:ef:
4b:29:e8:60:0b:53:c0:e6:5b:e4:ab:c2:b5:58:6c:
e1:ff:6c:a8:62:d7:ba:8a:18:55:ce:26:f1:22:31:
49:70:20:c1:cb:c8:94:b7:7d:7c:f2:09:b5:78:d9:
86:00:eb:98:13:97:17:86:78:0e:d3:59:32:87:bb:
98:a8:bc:dd:d1:1f:32:0b:5f:57:80:e6:28:21:b8:
b4:2a:d6:60:89:50:f8:82:af:ed:a5:b5:65:0d:77:
64:46:44:ff:b5:0a:ce:eb:dd:96:71:aa:80:91:91:
ef:c8:5c:da:40:90:fa:0d:da:65:e0:00:14:49:eb:
38:13:15:ad:72:8a:f9:a1:e6:2a:fb:b2:65:1b:9f:
0f:c5:25:f5:6d:50:c8:66:b9:23:16:fb:50:3b:4f:
bd:d1:c0:f0:b4:d3:a2:16:fb:c6:be:aa:f6:b0:9f:
05:f8:c7:1c:77:14:88:a3:25:19:87:5c:06:a5:d4:
b8:b7:e7:29:c0:ad:cb:25:65:2b:b5:09:1a:6a:6a:
ad:5f:91:87:84:b1:f2:6e:a2:a4:32:44:ea:4c:81:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:E5:82:9C:37:72:40:D6:FE:D2:50:2F:89:FD:15:1C:DD:A4:8E
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/R7Plgpw3ckDW_tJQL4n9FRzdpI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:81:9c:b5:54:d8:42:be:70:4c:47:14:ff:8a:79:e1:60:86:
99:fa:4e:31:8e:a7:8e:3c:02:05:a8:bb:26:fc:db:55:78:61:
f5:46:a3:e7:eb:4d:8f:de:a1:cb:30:2d:94:36:2e:6d:9f:3c:
a0:6e:66:0c:91:19:5a:f2:be:31:fd:f5:ed:fe:da:f7:35:a1:
66:e9:fe:f2:82:8c:3c:5c:26:fb:99:7c:4a:da:65:38:7d:96:
83:63:bb:0b:bc:1f:67:be:31:cb:b6:6c:02:70:b6:29:55:3b:
44:e5:cf:6f:c5:b2:22:88:78:ac:ec:9c:28:18:7c:51:6e:e3:
ff:30:4f:5a:6f:99:44:5d:e4:24:3b:e8:4e:05:b9:2d:e3:95:
4f:9e:69:ec:43:0c:d9:00:52:60:c8:ee:dc:20:e9:bf:2b:66:
bc:73:3a:6d:f1:de:ce:75:03:88:1c:55:33:37:7b:9b:06:47:
63:7c:93:1c:4e:e9:31:1f:7b:5b:4c:68:b8:cd:8b:92:23:1d:
f1:aa:1c:d8:0e:95:6b:ac:50:73:be:e2:cf:d2:cc:f2:4f:fb:
94:92:49:e9:36:a7:7f:12:bd:d1:c7:c1:ec:98:8f:70:3e:6f:
a1:9f:4a:80:fb:76:53:51:56:1d:a3:41:cc:68:5d:5d:3c:9d:
c4:e5:d0:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0NTYXpalGMZ6DPNepSXqs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjQwMTE1MTMyNjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2IzZTU4MjljMzc3MjQwZDZmZWQyNTAyZjg5ZmQxNTFjZGRhNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD33f1fK2cwFAVbtqXpsuVtpQvoC
hE2OmUXon24ip5S+JC9aA8CwWgct2O9LKehgC1PA5lvkq8K1WGzh/2yoYte6ihhV
zibxIjFJcCDBy8iUt3188gm1eNmGAOuYE5cXhngO01kyh7uYqLzd0R8yC19XgOYo
Ibi0KtZgiVD4gq/tpbVlDXdkRkT/tQrO692WcaqAkZHvyFzaQJD6Ddpl4AAUSes4
ExWtcor5oeYq+7JlG58PxSX1bVDIZrkjFvtQO0+90cDwtNOiFvvGvqr2sJ8F+Mcc
dxSIoyUZh1wGpdS4t+cpwK3LJWUrtQkaamqtX5GHhLHybqKkMkTqTIHhzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEez5YKcN3JA1v7SUC+J/RUc3aSOMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvUjdQbGdwdzNja0RXX3RKUUw0bjlGUnpkcEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwYxMMA0G
CSqGSIb3DQEBCwUAA4IBAQBfgZy1VNhCvnBMRxT/innhYIaZ+k4xjqeOPAIFqLsm
/NtVeGH1RqPn602P3qHLMC2UNi5tnzygbmYMkRla8r4x/fXt/tr3NaFm6f7ygow8
XCb7mXxK2mU4fZaDY7sLvB9nvjHLtmwCcLYpVTtE5c9vxbIiiHis7JwoGHxRbuP/
ME9ab5lEXeQkO+hOBbkt45VPnmnsQwzZAFJgyO7cIOm/K2a8czpt8d7OdQOIHFUz
N3ubBkdjfJMcTukxH3tbTGi4zYuSIx3xqhzYDpVrrFBzvuLP0szyT/uUkknpNqd/
Er3Rx8HsmI9wPm+hn0qA+3ZTUVYdo0HMaF1dPJ3E5dBK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:28 2025 by rpki-client