Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/r9gTK08CeUYfeUkUGbuxW7qnaHg.roa
File: r9gTK08CeUYfeUkUGbuxW7qnaHg.roa (raw, json)
Hash identifier: eEhvQ/cgRVRi9lhagckamleEhe1pvZfe1XmLQEZQ5ck=
Subject key identifier: AF:D8:13:2B:4F:02:79:46:1F:79:49:14:19:BB:B1:5B:BA:A7:68:78
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 0191746C55F4A8B8DE3E04814BBCFF368B17
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/r9gTK08CeUYfeUkUGbuxW7qnaHg.roa
Signing time: Wed 21 Aug 2024 10:12:22 +0000
ROA not before: Wed 21 Aug 2024 10:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212077
IP address blocks: 195.234.80.0/24 maxlen: 24
2a13:7b40:1::/48 maxlen: 48
2a13:7b40:a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Oct 2024 07:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:6c:55:f4:a8:b8:de:3e:04:81:4b:bc:ff:36:8b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Aug 21 10:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd8132b4f0279461f79491419bbb15bbaa76878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:34:a7:7d:49:71:ae:63:17:27:1c:d9:10:
06:2b:34:b2:f7:11:6e:35:37:4d:f8:8d:e7:47:7d:
bf:1c:18:9e:ab:5b:94:2e:69:33:67:46:34:2b:1e:
60:ad:27:85:cd:6a:af:e9:ed:ea:55:cf:5c:76:4a:
c9:27:e6:fa:63:3b:57:a0:ae:55:0d:f2:d4:5c:d2:
48:48:42:7d:03:72:e2:b1:1f:34:b7:29:29:4a:4a:
e7:82:bd:d1:94:69:f3:06:b1:33:d5:fc:1a:9e:dd:
6d:cf:89:d8:ba:61:e6:f3:2a:f1:bd:da:51:c1:59:
f5:cf:0b:7d:18:24:f2:c4:75:ff:d2:70:55:60:9f:
62:2a:fd:de:73:87:63:da:9a:90:c5:be:5e:f6:6d:
2c:5e:13:f2:c7:78:cb:73:3d:d3:30:fa:ff:1d:28:
87:df:30:47:b6:ac:e7:f6:73:34:5d:8d:3a:23:84:
df:09:f2:26:d1:b1:26:4f:9b:50:fc:b8:1d:dc:cb:
0a:de:0b:59:8c:9a:56:3d:f4:4f:43:19:7d:e7:72:
e0:da:46:e2:8d:f7:fe:50:b0:7d:e8:a4:33:4a:1b:
1a:19:ca:9f:70:f8:78:b0:5a:15:3e:4f:6d:47:f3:
ca:f0:17:b9:36:70:cf:00:c3:5e:a5:be:02:91:49:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D8:13:2B:4F:02:79:46:1F:79:49:14:19:BB:B1:5B:BA:A7:68:78
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/r9gTK08CeUYfeUkUGbuxW7qnaHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.80.0/24
IPv6:
2a13:7b40:1::/48
2a13:7b40:a1::/48
Signature Algorithm: sha256WithRSAEncryption
4a:f9:49:4d:1e:0d:59:69:80:cc:a3:4a:82:a7:ab:c0:51:d8:
95:a1:3a:c6:cd:ed:2c:09:92:c8:1d:89:89:5b:26:49:20:12:
49:87:e4:7f:c8:08:45:64:e6:f3:cc:98:a0:a0:a7:a0:ba:85:
7d:e6:d4:12:14:ff:f1:57:b8:c4:51:52:07:cd:c6:a4:a6:f2:
f1:2f:bc:79:67:ec:d9:81:99:ad:b2:49:1f:bf:81:97:c1:ff:
cd:68:12:ac:dc:df:90:c8:d5:c7:69:b6:4d:6a:cb:c7:f4:7e:
73:2b:28:fc:ec:47:2f:5a:de:c4:1e:08:bd:25:b8:29:7c:cd:
0b:b4:b0:61:da:47:19:88:11:7f:6a:70:92:96:bd:39:4c:14:
ce:79:d6:ee:9b:02:66:af:5a:57:31:f6:09:a0:22:30:28:3e:
a8:98:ac:24:c0:3d:b4:f5:c2:a1:f6:13:9f:73:ca:71:74:33:
b1:c3:62:75:d2:27:f7:06:67:d3:c0:25:25:66:68:e2:16:28:
c1:a1:c2:d5:22:9f:fa:0c:2b:f5:bd:89:5a:ae:6d:9c:39:41:
bc:b3:77:e1:27:56:a3:bd:68:27:dc:7f:48:df:49:fc:a5:4a:
d7:20:4a:61:f6:5d:20:1c:b5:cd:37:20:d6:43:cf:15:5b:a5:
b0:86:7b:ba
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZF0bFX0qLjePgSBS7z/NosXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiNDIxNzVkNjIxNGEzMWE1NDA3ZGI4YjZjOTVmMWVj
NjBkNGUwHhcNMjQwODIxMTAxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmQ4MTMyYjRmMDI3OTQ2MWY3OTQ5MTQxOWJiYjE1YmJhYTc2ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64A0p31Jca5jFycc2RAGKzSy9xFu
NTdN+I3nR32/HBieq1uULmkzZ0Y0Kx5grSeFzWqv6e3qVc9cdkrJJ+b6YztXoK5V
DfLUXNJISEJ9A3LisR80tykpSkrngr3RlGnzBrEz1fwant1tz4nYumHm8yrxvdpR
wVn1zwt9GCTyxHX/0nBVYJ9iKv3ec4dj2pqQxb5e9m0sXhPyx3jLcz3TMPr/HSiH
3zBHtqzn9nM0XY06I4TfCfIm0bEmT5tQ/Lgd3MsK3gtZjJpWPfRPQxl953Lg2kbi
jff+ULB96KQzShsaGcqfcPh4sFoVPk9tR/PK8Be5NnDPAMNepb4CkUkHswIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFK/YEytPAnlGH3lJFBm7sVu6p2h4MB8GA1UdIwQY
MBaAFFaItCF11iFKMaVAfbi2yV8exg1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQt
OWY5NDJiYzEyYTdlLzEvcjlnVEswOENlVVlmZVVrVUdidXhXN3FuYUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQtOWY5NDJiYzEyYTdl
LzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAw+pQMBgE
AgACMBIDBwAqE3tAAAEDBwAqE3tAAKEwDQYJKoZIhvcNAQELBQADggEBAEr5SU0e
DVlpgMyjSoKnq8BR2JWhOsbN7SwJksgdiYlbJkkgEkmH5H/ICEVk5vPMmKCgp6C6
hX3m1BIU//FXuMRRUgfNxqSm8vEvvHln7NmBma2ySR+/gZfB/81oEqzc35DI1cdp
tk1qy8f0fnMrKPzsRy9a3sQeCL0luCl8zQu0sGHaRxmIEX9qcJKWvTlMFM551u6b
AmavWlcx9gmgIjAoPqiYrCTAPbT1wqH2E59zynF0M7HDYnXSJ/cGZ9PAJSVmaOIW
KMGhwtUin/oMK/W9iVqubZw5Qbyzd+EnVqO9aCfcf0jfSfylStcgSmH2XSActc03
INZDzxVbpbCGe7o=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:53 2025 by rpki-client