Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6Fc4SV2HHf9mEPybRtU3FCY0zZA.roa
File: 6Fc4SV2HHf9mEPybRtU3FCY0zZA.roa (raw, json)
Hash identifier: SBErEhpOxFEjO5GBNi82Bed4nEkq9LBQzVxc4g/jhIc=
Subject key identifier: E8:57:38:49:5D:87:1D:FF:66:10:FC:9B:46:D5:37:14:26:34:CD:90
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0191E486DB4D134FBA4766033BC68A4AD935
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6Fc4SV2HHf9mEPybRtU3FCY0zZA.roa
Signing time: Thu 12 Sep 2024 04:38:48 +0000
ROA not before: Thu 12 Sep 2024 04:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:86:db:4d:13:4f:ba:47:66:03:3b:c6:8a:4a:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 12 04:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e85738495d871dff6610fc9b46d537142634cd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:4d:72:f6:6d:d1:6c:32:0c:dd:d9:96:17:
48:a7:68:5b:12:db:a3:40:fd:34:cf:1a:6a:f9:1c:
50:17:17:73:f6:e5:03:2a:11:b3:e2:67:68:b1:10:
bf:9f:eb:35:77:df:ea:3e:e0:22:ff:93:fa:8f:c5:
f5:59:be:92:18:8a:c1:eb:7c:ae:c8:fd:f0:ea:ce:
6a:e4:97:15:a4:46:64:da:df:38:2d:32:2e:c8:35:
56:e9:8e:67:4b:b1:0f:28:25:d1:eb:4d:fa:76:9e:
bb:d5:b2:57:de:ac:9d:48:87:e9:0f:92:8a:b6:7a:
1a:bb:db:10:fe:32:a1:53:5e:0e:12:88:00:5b:3c:
30:17:55:45:43:5a:65:c1:1b:8c:47:c6:49:59:60:
66:a3:10:9c:a7:cc:a2:16:27:4d:e3:3c:37:b9:f1:
ab:90:2c:69:c5:94:5e:8d:49:b3:e2:73:d4:af:38:
81:bf:9c:50:8e:68:77:cd:64:5b:0c:5d:7d:4c:4b:
7b:b3:c6:4e:51:fa:a0:4e:8c:e1:9e:22:c0:1a:43:
04:35:7b:3e:5a:ff:5a:a1:dd:57:82:67:7c:5c:3f:
99:db:37:fd:0e:d3:f9:e8:ad:23:ca:98:4b:59:ab:
0f:40:05:15:14:f0:01:d9:19:ae:ea:96:e5:8a:20:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:38:49:5D:87:1D:FF:66:10:FC:9B:46:D5:37:14:26:34:CD:90
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6Fc4SV2HHf9mEPybRtU3FCY0zZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:21:5e:95:03:d7:bc:82:bc:4d:5f:9e:6a:e1:15:9f:94:ea:
85:b0:b2:8b:48:7b:c1:7b:fe:99:ce:c4:9e:6d:12:dc:18:09:
84:bf:0d:24:41:78:12:f7:70:0f:99:d5:c7:74:90:84:33:40:
18:a7:aa:2b:68:bd:33:84:fa:03:8d:db:d9:d4:30:72:9c:43:
6a:82:48:b0:77:35:64:ac:f0:9b:78:ce:63:85:ee:ac:11:36:
f7:56:8f:c4:8b:eb:16:db:fc:40:30:75:34:07:1b:0a:67:59:
19:bd:d8:95:24:11:65:8a:f7:c9:0d:2d:f6:59:16:c4:2d:aa:
7b:3c:9c:7a:e9:4b:85:e1:6c:ca:52:fb:82:3b:87:27:01:18:
17:ef:63:54:11:1c:91:25:24:95:0c:1c:f5:ca:62:2c:0b:e4:
4a:8b:3f:ce:cb:59:36:55:67:01:11:c5:f0:33:d7:d3:5a:5d:
51:3f:6f:6d:de:7c:04:75:c8:cb:b9:f5:76:c4:a3:1c:4e:5a:
ef:45:d9:ea:d1:12:49:0a:79:13:f7:6b:3c:2b:ce:55:58:cd:
5f:29:c9:a3:d7:59:be:78:11:f6:dc:75:6c:18:e7:71:92:f4:
1e:08:66:ee:dc:b6:8c:66:0e:16:c8:51:43:7d:cb:76:d3:ea:
74:7e:54:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHkhttNE0+6R2YDO8aKStk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjQwOTEyMDQzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODU3Mzg0OTVkODcxZGZmNjYxMGZjOWI0NmQ1MzcxNDI2MzRjZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymRNcvZt0WwyDN3ZlhdIp2hbEtuj
QP00zxpq+RxQFxdz9uUDKhGz4mdosRC/n+s1d9/qPuAi/5P6j8X1Wb6SGIrB63yu
yP3w6s5q5JcVpEZk2t84LTIuyDVW6Y5nS7EPKCXR6036dp671bJX3qydSIfpD5KK
tnoau9sQ/jKhU14OEogAWzwwF1VFQ1plwRuMR8ZJWWBmoxCcp8yiFidN4zw3ufGr
kCxpxZRejUmz4nPUrziBv5xQjmh3zWRbDF19TEt7s8ZOUfqgTozhniLAGkMENXs+
Wv9aod1Xgmd8XD+Z2zf9DtP56K0jyphLWasPQAUVFPAB2Rmu6pbliiBAnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhXOEldhx3/ZhD8m0bVNxQmNM2QMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvNkZjNFNWMkhIZjltRVB5YlJ0VTNGQ1kwelpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9DMA0G
CSqGSIb3DQEBCwUAA4IBAQB9IV6VA9e8grxNX55q4RWflOqFsLKLSHvBe/6ZzsSe
bRLcGAmEvw0kQXgS93APmdXHdJCEM0AYp6oraL0zhPoDjdvZ1DBynENqgkiwdzVk
rPCbeM5jhe6sETb3Vo/Ei+sW2/xAMHU0BxsKZ1kZvdiVJBFlivfJDS32WRbELap7
PJx66UuF4WzKUvuCO4cnARgX72NUERyRJSSVDBz1ymIsC+RKiz/Oy1k2VWcBEcXw
M9fTWl1RP29t3nwEdcjLufV2xKMcTlrvRdnq0RJJCnkT92s8K85VWM1fKcmj11m+
eBH23HVsGOdxkvQeCGbu3LaMZg4WyFFDfct20+p0flSy
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:02 2025 by rpki-client