Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gajeby0kJpDgEDIgZDmAt91hGtw.roa
File: gajeby0kJpDgEDIgZDmAt91hGtw.roa (raw, json)
Hash identifier: 0ls1j6xPkTIBakdQtw237z02Q7KcPPcdFVvebxrVEQ8=
Subject key identifier: 81:A8:DE:6F:2D:24:26:90:E0:10:32:20:64:39:80:B7:DD:61:1A:DC
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018CC50090108E9CD471155FF3851F11D55C
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gajeby0kJpDgEDIgZDmAt91hGtw.roa
Signing time: Mon 01 Jan 2024 12:29:57 +0000
ROA not before: Mon 01 Jan 2024 12:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198441
IP address blocks: 83.139.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:90:10:8e:9c:d4:71:15:5f:f3:85:1f:11:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 12:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81a8de6f2d242690e0103220643980b7dd611adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:0d:26:e1:da:21:60:86:e7:6b:57:b5:63:
20:51:67:c7:35:07:5d:1c:b7:15:9c:ac:bb:88:3d:
9e:74:f9:08:71:fb:29:8e:92:52:17:a1:54:a5:67:
c2:7c:4e:40:68:d5:63:1e:f3:c8:80:65:3d:6e:72:
45:29:2a:52:03:c8:40:00:5f:eb:28:1f:5a:1c:60:
79:d6:9d:08:a9:52:b7:42:1d:9e:61:26:4e:c5:7e:
32:a3:bf:51:69:49:b3:97:b9:10:16:bb:d8:2e:f6:
47:78:bc:3c:15:c9:ea:9c:24:30:12:68:74:12:41:
af:ab:91:17:d1:3d:3a:35:82:81:5e:17:8a:c2:e9:
2c:83:16:19:2a:13:e3:7a:16:a7:c1:53:ee:71:9c:
be:0e:fb:5b:41:8d:49:47:bd:09:23:fb:5a:9f:92:
95:b7:09:ee:34:3f:88:aa:2e:bf:ef:04:25:0e:e0:
2b:52:8a:c6:6c:1a:9c:b4:10:a1:1b:6d:7c:eb:42:
82:bf:1c:43:f1:26:d4:7b:ff:8a:34:ba:d3:c1:3e:
c5:58:ef:4f:c3:cf:f8:b3:2e:29:16:92:88:8f:16:
c5:0f:8e:d7:72:7b:ce:d8:e5:26:26:97:fa:a2:5a:
a7:b6:41:19:0c:cd:25:b8:9a:7c:fb:f0:86:ba:58:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A8:DE:6F:2D:24:26:90:E0:10:32:20:64:39:80:B7:DD:61:1A:DC
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/gajeby0kJpDgEDIgZDmAt91hGtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.23.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b5:de:c5:e4:df:fb:9c:7f:09:5d:18:ac:d5:ae:db:79:bb:
77:f5:3a:ea:9e:48:cc:7c:c8:fb:01:2c:36:f6:46:c6:ba:b2:
3d:0f:ce:eb:40:34:3c:f2:08:64:33:80:d5:2c:df:b3:4d:f5:
38:95:47:a8:37:d1:b7:e4:22:31:22:85:71:8c:65:b2:8c:a8:
44:43:31:82:78:f9:0d:1d:a1:3d:9d:96:c5:70:cb:4b:c0:25:
69:91:f1:55:9a:dd:9d:35:11:7e:c6:ac:a5:d8:22:92:f4:26:
4e:d2:10:0e:72:40:e2:ba:76:e2:86:40:50:18:69:46:c8:9e:
67:8c:d8:e2:b4:c5:e1:20:32:da:36:96:b2:f2:a1:46:0f:b5:
5f:8b:e1:f2:04:e9:b9:e3:c9:0b:d2:ae:5c:e4:a1:84:e3:38:
51:a9:1d:c7:1e:32:4a:7a:b0:53:f8:0b:54:d8:3d:06:39:00:
44:df:58:32:ea:1c:e3:b4:67:10:37:aa:65:0a:01:92:a2:5f:
21:9d:86:97:9f:ed:f6:4e:a0:ea:70:b3:e3:c2:d5:d2:f7:5c:
a5:36:98:c4:7a:14:35:63:73:61:e7:b4:77:d9:a7:e7:9e:52:
e1:37:30:74:43:98:94:74:96:4e:68:be:fa:e5:9f:47:eb:5a:
16:76:48:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAJAQjpzUcRVf84UfEdVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh
ZTMyOGUwHhcNMjQwMTAxMTIyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWE4ZGU2ZjJkMjQyNjkwZTAxMDMyMjA2NDM5ODBiN2RkNjExYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzgNJuHaIWCG52tXtWMgUWfHNQdd
HLcVnKy7iD2edPkIcfspjpJSF6FUpWfCfE5AaNVjHvPIgGU9bnJFKSpSA8hAAF/r
KB9aHGB51p0IqVK3Qh2eYSZOxX4yo79RaUmzl7kQFrvYLvZHeLw8FcnqnCQwEmh0
EkGvq5EX0T06NYKBXheKwuksgxYZKhPjehanwVPucZy+DvtbQY1JR70JI/tan5KV
twnuND+Iqi6/7wQlDuArUorGbBqctBChG21860KCvxxD8SbUe/+KNLrTwT7FWO9P
w8/4sy4pFpKIjxbFD47XcnvO2OUmJpf6olqntkEZDM0luJp8+/CGulgVZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIGo3m8tJCaQ4BAyIGQ5gLfdYRrcMB8GA1UdIwQY
MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt
MzViYTI2N2RlZDNiLzEvZ2FqZWJ5MGtKcERnRURJZ1pEbUF0OTFoR3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi
LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4sXMA0G
CSqGSIb3DQEBCwUAA4IBAQBntd7F5N/7nH8JXRis1a7bebt39TrqnkjMfMj7ASw2
9kbGurI9D87rQDQ88ghkM4DVLN+zTfU4lUeoN9G35CIxIoVxjGWyjKhEQzGCePkN
HaE9nZbFcMtLwCVpkfFVmt2dNRF+xqyl2CKS9CZO0hAOckDiunbihkBQGGlGyJ5n
jNjitMXhIDLaNpay8qFGD7Vfi+HyBOm548kL0q5c5KGE4zhRqR3HHjJKerBT+AtU
2D0GOQBE31gy6hzjtGcQN6plCgGSol8hnYaXn+32TqDqcLPjwtXS91ylNpjEehQ1
Y3Nh57R32afnnlLhNzB0Q5iUdJZOaL765Z9H61oWdki9
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:45 2025 by rpki-client