Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/d3i3vKNMdfkD1hlnzoxySXEksA4.roa
File: d3i3vKNMdfkD1hlnzoxySXEksA4.roa (raw, json)
Hash identifier: 9iexUg8Y4ECIoJ8rMuHL0F5GSEfqC6Z6oq67zukf/94=
Subject key identifier: 77:78:B7:BC:A3:4C:75:F9:03:D6:19:67:CE:8C:72:49:71:24:B0:0E
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018CC500D773E8A566D5D585BA96CAEB2790
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/d3i3vKNMdfkD1hlnzoxySXEksA4.roa
Signing time: Mon 01 Jan 2024 12:30:15 +0000
ROA not before: Mon 01 Jan 2024 12:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200200
IP address blocks: 188.72.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 11:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d7:73:e8:a5:66:d5:d5:85:ba:96:ca:eb:27:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 12:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7778b7bca34c75f903d61967ce8c72497124b00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:2e:ac:ea:7a:7c:b9:9a:9b:fa:4a:be:49:
23:5b:86:b5:73:74:94:ba:25:62:22:97:33:9b:bf:
22:bd:2c:47:e5:85:76:88:3a:e7:36:01:88:91:84:
f3:29:cf:77:bb:1f:70:ec:b0:a1:c8:ec:c9:6c:9d:
92:b7:e3:8b:1f:d0:dd:57:e3:d1:73:7a:94:e6:26:
84:4c:7f:6e:7a:ea:0d:bb:2f:33:e1:0c:5d:83:b4:
78:b2:e3:ee:ea:37:d8:8e:d1:fa:ec:15:b4:0f:91:
98:21:b0:a4:e9:88:e4:8f:6f:c6:ed:d6:30:a6:49:
f2:87:f9:04:a2:51:9b:0a:97:e5:58:2a:4c:50:2d:
99:5d:01:e3:cd:cf:33:a2:7a:34:4c:21:a6:96:bd:
d0:14:b4:a2:bd:bd:ff:43:e6:6d:2e:11:52:5c:44:
03:fe:96:98:71:75:ef:bc:da:88:dc:b8:8b:e2:ef:
e0:02:b6:00:da:71:a9:44:96:11:2e:cb:fb:72:74:
f1:bf:55:a0:34:b7:61:62:eb:75:dc:63:40:38:b6:
d9:8f:6d:cf:aa:26:81:50:7e:4a:04:35:91:d1:5a:
1b:2c:59:63:8c:6e:e1:ae:fb:e0:7a:6f:00:15:8b:
0e:12:04:b4:6d:d3:8b:9e:ec:f2:23:cb:ef:6c:8b:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:78:B7:BC:A3:4C:75:F9:03:D6:19:67:CE:8C:72:49:71:24:B0:0E
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/d3i3vKNMdfkD1hlnzoxySXEksA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:58:df:98:f8:74:33:94:de:04:b1:cd:0c:95:68:1f:83:ca:
60:ae:9b:7a:49:40:38:85:15:e6:17:53:af:d2:ad:9e:95:82:
91:a1:51:3c:0c:44:4c:d0:21:29:5a:c8:8b:a4:2a:f1:82:16:
ac:27:98:bb:9d:ee:a3:9a:46:fc:6e:92:67:66:ed:1e:89:9f:
c0:f2:37:cb:52:77:a2:0a:08:28:47:a3:62:66:77:60:86:e6:
0f:ae:aa:ae:e7:ed:b5:90:df:c8:1d:c1:36:1d:7d:da:19:28:
42:d4:c5:b0:8e:a3:7a:b7:c7:49:f2:33:89:5e:84:c9:77:5c:
87:e2:56:f9:b6:a1:e4:ed:70:c0:be:b8:1a:3d:96:bc:29:57:
c1:90:c1:bb:1f:68:d6:15:99:b9:ac:42:6d:4a:c7:c6:dd:39:
a8:04:26:3f:00:c0:56:24:bc:53:d2:5b:21:e1:f4:bc:ff:af:
16:0d:0c:9d:74:88:02:b0:8d:53:be:d8:cd:f9:99:55:f2:4a:
13:4c:8e:a7:27:ec:88:a8:9d:03:96:19:c7:c3:8f:67:f4:04:
6a:c2:11:de:4f:4f:0e:2a:a5:49:1b:33:b0:6a:95:47:3f:ae:
17:3b:27:57:68:34:72:dd:d5:3e:f5:fa:63:51:41:14:08:db:
18:38:0d:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFANdz6KVm1dWFupbK6yeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjQwMTAxMTIzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzc4YjdiY2EzNGM3NWY5MDNkNjE5NjdjZThjNzI0OTcxMjRiMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIwurOp6fLmam/pKvkkjW4a1c3SU
uiViIpczm78ivSxH5YV2iDrnNgGIkYTzKc93ux9w7LChyOzJbJ2St+OLH9DdV+PR
c3qU5iaETH9ueuoNuy8z4Qxdg7R4suPu6jfYjtH67BW0D5GYIbCk6Yjkj2/G7dYw
pknyh/kEolGbCpflWCpMUC2ZXQHjzc8zono0TCGmlr3QFLSivb3/Q+ZtLhFSXEQD
/paYcXXvvNqI3LiL4u/gArYA2nGpRJYRLsv7cnTxv1WgNLdhYut13GNAOLbZj23P
qiaBUH5KBDWR0VobLFljjG7hrvvgem8AFYsOEgS0bdOLnuzyI8vvbIv7twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHd4t7yjTHX5A9YZZ86McklxJLAOMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvZDNpM3ZLTk1kZmtEMWhsbnpveHlTWEVrc0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgpMA0G
CSqGSIb3DQEBCwUAA4IBAQABWN+Y+HQzlN4Esc0MlWgfg8pgrpt6SUA4hRXmF1Ov
0q2elYKRoVE8DERM0CEpWsiLpCrxghasJ5i7ne6jmkb8bpJnZu0eiZ/A8jfLUnei
CggoR6NiZndghuYPrqqu5+21kN/IHcE2HX3aGShC1MWwjqN6t8dJ8jOJXoTJd1yH
4lb5tqHk7XDAvrgaPZa8KVfBkMG7H2jWFZm5rEJtSsfG3TmoBCY/AMBWJLxT0lsh
4fS8/68WDQyddIgCsI1TvtjN+ZlV8koTTI6nJ+yIqJ0DlhnHw49n9ARqwhHeT08O
KqVJGzOwapVHP64XOydXaDRy3dU+9fpjUUEUCNsYOA34
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:06 2025 by rpki-client