Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7Ymst1OvT2s2uq8JKPBUqzDMqYk.roa
File: 7Ymst1OvT2s2uq8JKPBUqzDMqYk.roa (raw, json)
Hash identifier: reopoMb9Qdcvs61mqQtn4/80WCyHQFa/PbPDLYD/CTI=
Subject key identifier: ED:89:AC:B7:53:AF:4F:6B:36:BA:AF:09:28:F0:54:AB:30:CC:A9:89
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242926D0EC03186124D7C9BE7FE934
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7Ymst1OvT2s2uq8JKPBUqzDMqYk.roa
Signing time: Thu 02 Jan 2025 17:50:45 +0000
ROA not before: Thu 02 Jan 2025 17:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202325
IP address blocks: 83.222.190.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:29:26:d0:ec:03:18:61:24:d7:c9:be:7f:e9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed89acb753af4f6b36baaf0928f054ab30cca989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:48:62:85:e3:db:f1:cb:51:78:28:c8:22:
f7:25:59:b6:10:de:f5:c2:30:95:9d:15:4e:b1:ba:
7b:49:15:39:e9:7f:2a:48:54:8c:a1:37:ed:95:61:
b9:d9:4b:c6:c7:6f:f0:86:82:47:dd:1d:6d:3a:39:
37:78:ad:bb:44:a5:12:36:a5:45:08:3e:2c:c4:79:
48:85:59:6f:b8:f3:be:3d:84:e3:b5:36:c7:b3:9f:
b5:52:7c:fa:44:fc:1a:2c:ba:80:de:aa:52:4a:79:
aa:17:27:12:b7:87:89:1e:3d:c3:37:50:1a:6a:38:
46:aa:1a:db:4e:83:b8:ba:3a:eb:49:4a:c9:dd:0c:
45:c1:a8:7e:32:23:5e:f2:70:54:5c:eb:a5:e8:ec:
a8:d1:78:65:7c:c5:6e:a3:ac:87:ec:d9:40:8b:f7:
b2:1a:66:59:e4:f3:d7:6a:ec:8f:83:b3:29:78:d9:
b8:37:44:af:43:db:be:1f:01:4e:c5:10:dc:2e:88:
86:07:ff:b5:55:1f:53:c2:f7:63:f8:28:2a:52:e5:
7b:a2:73:da:62:b8:79:54:aa:06:1c:3a:a8:85:b2:
b8:6f:8e:4f:99:7d:fd:bb:f2:e9:7a:4e:98:50:1a:
67:20:55:f8:03:34:2a:c8:d2:8c:3c:13:5e:6a:91:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:AC:B7:53:AF:4F:6B:36:BA:AF:09:28:F0:54:AB:30:CC:A9:89
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7Ymst1OvT2s2uq8JKPBUqzDMqYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:7c:83:73:b3:70:55:57:d1:40:ef:7f:67:77:c2:74:e4:a8:
16:33:40:36:0c:9f:24:02:47:24:44:cf:68:9b:29:8f:d0:8f:
e9:54:56:39:ac:68:1f:42:36:cc:43:a1:fb:5b:d6:c9:e0:1b:
43:08:22:e9:d9:d4:af:21:30:bc:69:7f:26:84:89:58:77:83:
4d:a7:05:ce:fe:2e:3e:08:05:63:d5:fb:64:33:16:a1:98:2e:
bb:15:b2:ba:24:24:86:b9:5a:c5:c4:a6:47:f7:2f:2d:fb:b7:
08:9d:e0:7f:5d:35:37:35:76:16:86:cb:b2:e1:1d:29:6a:7d:
9d:1b:3d:49:76:22:e7:db:9b:7b:af:bb:58:a4:4a:c4:46:92:
9b:82:20:5f:ce:e8:f2:e5:49:19:63:e5:18:53:d7:87:d9:08:
be:76:ff:5c:fa:c7:4c:cd:40:59:22:1a:52:e3:cc:eb:d8:a3:
3f:b0:1f:43:f1:0c:ac:7d:db:e5:d0:0f:aa:0a:94:42:8b:4a:
c1:4c:2a:f0:b9:48:b4:51:eb:16:db:c6:31:af:39:6f:cb:a6:
ad:e2:f1:37:ef:5a:ed:d5:b5:f7:b7:29:d9:f1:9f:f6:c0:00:
3b:e0:82:ce:ca:45:b5:51:bd:ad:20:6e:63:2a:6d:44:cf:19:
4a:1e:4d:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJCkm0OwDGGEk18m+f+k0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTAyMTc1MDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg5YWNiNzUzYWY0ZjZiMzZiYWFmMDkyOGYwNTRhYjMwY2NhOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimZIYoXj2/HLUXgoyCL3JVm2EN71
wjCVnRVOsbp7SRU56X8qSFSMoTftlWG52UvGx2/whoJH3R1tOjk3eK27RKUSNqVF
CD4sxHlIhVlvuPO+PYTjtTbHs5+1Unz6RPwaLLqA3qpSSnmqFycSt4eJHj3DN1Aa
ajhGqhrbToO4ujrrSUrJ3QxFwah+MiNe8nBUXOul6Oyo0XhlfMVuo6yH7NlAi/ey
GmZZ5PPXauyPg7MpeNm4N0SvQ9u+HwFOxRDcLoiGB/+1VR9Twvdj+CgqUuV7onPa
Yrh5VKoGHDqohbK4b45PmX39u/Lpek6YUBpnIFX4AzQqyNKMPBNeapG+XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2JrLdTr09rNrqvCSjwVKswzKmJMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvN1ltc3QxT3ZUMnMydXE4SktQQlVxekRNcVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU96+MA0G
CSqGSIb3DQEBCwUAA4IBAQAdfINzs3BVV9FA739nd8J05KgWM0A2DJ8kAkckRM9o
mymP0I/pVFY5rGgfQjbMQ6H7W9bJ4BtDCCLp2dSvITC8aX8mhIlYd4NNpwXO/i4+
CAVj1ftkMxahmC67FbK6JCSGuVrFxKZH9y8t+7cIneB/XTU3NXYWhsuy4R0pan2d
Gz1JdiLn25t7r7tYpErERpKbgiBfzujy5UkZY+UYU9eH2Qi+dv9c+sdMzUBZIhpS
48zr2KM/sB9D8Qysfdvl0A+qCpRCi0rBTCrwuUi0UesW28Yxrzlvy6at4vE371rt
1bX3tynZ8Z/2wAA74ILOykW1Ub2tIG5jKm1EzxlKHk0N
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:35 2025 by rpki-client