Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/9mBX0BYn4WezxpZ1fuxSDc3yQ_w.roa
File: 9mBX0BYn4WezxpZ1fuxSDc3yQ_w.roa (raw, json)
Hash identifier: O3/Err6eAuipvsKWZzNXCizBsJtPWiU8hlThkLOsZOY=
Subject key identifier: F6:60:57:D0:16:27:E1:67:B3:C6:96:75:7E:EC:52:0D:CD:F2:43:FC
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019198A038CCCF15558B2D04A384EB2DB72D
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/9mBX0BYn4WezxpZ1fuxSDc3yQ_w.roa
Signing time: Wed 28 Aug 2024 10:55:22 +0000
ROA not before: Wed 28 Aug 2024 10:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.105.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 10:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:a0:38:cc:cf:15:55:8b:2d:04:a3:84:eb:2d:b7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Aug 28 10:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f66057d01627e167b3c696757eec520dcdf243fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:42:74:25:f5:76:9e:18:31:3e:09:c5:be:
a8:92:0e:37:34:4e:28:91:04:88:70:77:52:b4:da:
7d:4d:99:c3:e7:96:73:14:57:ca:72:03:e8:8f:07:
7a:61:c6:7e:9d:c8:25:80:af:2f:ef:0a:3c:dc:b3:
0a:2c:de:52:36:1d:ac:83:bf:2d:c0:b3:03:bd:93:
4e:c9:96:6b:88:cd:e3:d6:86:8f:23:d4:ce:63:3f:
91:cd:a1:06:b5:bf:12:6d:12:f3:c5:74:5c:b0:73:
9e:16:fd:27:74:28:c2:01:1e:bf:74:51:eb:80:2c:
fd:e8:67:bb:3e:d1:f4:7f:88:32:f1:e2:fe:43:1f:
e3:b7:fc:e4:47:60:5f:43:ec:43:d4:ad:4a:6b:34:
d6:5c:2f:bb:42:e1:87:e8:75:c2:26:2d:f2:43:34:
2c:be:80:60:0b:59:0d:b6:5e:5f:cf:94:7e:8d:6c:
f2:da:66:1e:b4:a1:5c:4d:79:ba:32:c0:4f:3f:5b:
a9:13:5e:fc:f0:86:36:51:70:98:f7:8b:b6:b0:76:
ad:63:06:ba:40:11:64:2b:4c:83:bd:5e:da:a6:f8:
ea:6b:0e:78:6f:6a:63:4a:45:af:3b:c0:37:95:52:
c1:bf:19:84:07:fc:ba:01:a9:c1:d9:37:f3:fd:d7:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:57:D0:16:27:E1:67:B3:C6:96:75:7E:EC:52:0D:CD:F2:43:FC
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/9mBX0BYn4WezxpZ1fuxSDc3yQ_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.47.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:30:19:b4:d2:31:fd:f1:50:18:18:82:a2:8b:ec:86:0f:c4:
eb:10:c6:43:4b:b7:8f:70:09:b6:7f:d5:91:08:a9:a1:17:9a:
2f:53:50:42:df:f0:b1:8b:e8:b7:fb:b2:75:2a:d6:88:53:9d:
24:23:24:54:30:17:4a:38:ba:20:18:cd:04:03:58:f3:e8:95:
3d:43:b3:fb:7d:84:f4:3f:87:d7:b7:16:4d:45:bd:71:3f:94:
04:92:6c:a7:b4:bb:8b:35:80:48:6d:0c:2e:64:3c:28:4e:c3:
6a:90:29:c8:cf:b8:fa:dc:5b:c7:e0:9a:d3:83:af:1c:9e:36:
e6:cb:f4:ab:8b:15:58:75:52:10:0d:86:be:71:20:29:b1:74:
35:a2:3d:11:93:b6:d2:2f:e2:b0:a9:2d:98:e6:bc:b0:a2:75:
71:75:08:ab:ed:3a:b7:41:4a:1f:51:07:0d:cf:b1:87:9c:79:
7a:c0:8f:97:08:82:e9:c9:00:92:60:08:34:68:19:05:99:53:
cc:52:71:2a:58:17:b3:81:11:d6:ad:e9:ec:c3:96:30:39:f7:
60:f0:2f:ea:be:84:dc:e7:38:c1:e1:da:53:d3:00:56:62:57:
30:68:3c:de:59:1f:f7:d1:d2:7d:00:63:1f:e9:ee:58:32:be:
9d:69:a4:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGYoDjMzxVViy0Eo4TrLbctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy
ZWZhNDMwHhcNMjQwODI4MTA1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjYwNTdkMDE2MjdlMTY3YjNjNjk2NzU3ZWVjNTIwZGNkZjI0M2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTZCdCX1dp4YMT4Jxb6okg43NE4o
kQSIcHdStNp9TZnD55ZzFFfKcgPojwd6YcZ+ncglgK8v7wo83LMKLN5SNh2sg78t
wLMDvZNOyZZriM3j1oaPI9TOYz+RzaEGtb8SbRLzxXRcsHOeFv0ndCjCAR6/dFHr
gCz96Ge7PtH0f4gy8eL+Qx/jt/zkR2BfQ+xD1K1KazTWXC+7QuGH6HXCJi3yQzQs
voBgC1kNtl5fz5R+jWzy2mYetKFcTXm6MsBPP1upE1788IY2UXCY94u2sHatYwa6
QBFkK0yDvV7apvjqaw54b2pjSkWvO8A3lVLBvxmEB/y6AanB2Tfz/dfxmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZgV9AWJ+Fns8aWdX7sUg3N8kP8MB8GA1UdIwQY
MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt
MDQ0MjdhOTlmMWM1LzEvOW1CWDBCWW40V2V6eHBaMWZ1eFNEYzN5UV93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1
LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkvMA0G
CSqGSIb3DQEBCwUAA4IBAQDUMBm00jH98VAYGIKii+yGD8TrEMZDS7ePcAm2f9WR
CKmhF5ovU1BC3/Cxi+i3+7J1KtaIU50kIyRUMBdKOLogGM0EA1jz6JU9Q7P7fYT0
P4fXtxZNRb1xP5QEkmyntLuLNYBIbQwuZDwoTsNqkCnIz7j63FvH4JrTg68cnjbm
y/SrixVYdVIQDYa+cSApsXQ1oj0Rk7bSL+KwqS2Y5rywonVxdQir7Tq3QUofUQcN
z7GHnHl6wI+XCILpyQCSYAg0aBkFmVPMUnEqWBezgRHWrensw5YwOfdg8C/qvoTc
5zjB4dpT0wBWYlcwaDzeWR/30dJ9AGMf6e5YMr6daaSy
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:27 2025 by rpki-client