Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/1-DT7jq2VDDwOcYRE06ndHbxMh_A.roa
File: 1-DT7jq2VDDwOcYRE06ndHbxMh_A.roa (raw, json)
Hash identifier: IV2P5zMEKks7Y2XltSvak/YmjXnd19zu8tUTrIPxWqc=
Subject key identifier: F8:34:FB:8E:AD:95:0C:3C:0E:71:84:44:D3:A9:DD:1D:BC:4C:87:F0
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 01904A5EA3AF8155F8113775EFC82942D85F
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/1-DT7jq2VDDwOcYRE06ndHbxMh_A.roa
Signing time: Mon 24 Jun 2024 13:10:34 +0000
ROA not before: Mon 24 Jun 2024 13:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215398
IP address blocks: 192.109.176.0/24 maxlen: 24
2001:67c:e1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:5e:a3:af:81:55:f8:11:37:75:ef:c8:29:42:d8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Jun 24 13:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f834fb8ead950c3c0e718444d3a9dd1dbc4c87f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:e7:a4:24:11:b1:4c:1d:73:87:8d:02:2d:
c5:65:3e:73:27:71:a3:86:41:38:25:2b:ef:07:16:
0b:56:92:14:52:83:9a:8d:fc:71:75:4d:8a:29:a3:
03:5e:d3:93:02:74:76:5c:6c:f1:63:83:2b:0a:98:
e6:3b:18:d3:60:5c:63:35:a9:93:ba:06:20:b7:3e:
ee:1e:29:d9:45:d1:28:fb:51:3e:cd:b9:18:f6:00:
f6:fa:82:19:f9:d6:f1:f8:97:19:da:c8:50:89:92:
2a:d1:c8:9d:e8:70:c7:ee:aa:aa:6f:16:17:68:08:
fb:59:86:4f:08:ed:24:c6:87:26:02:a5:c5:f0:2b:
ca:ec:b9:d7:7c:df:06:b1:ce:a7:61:b8:f5:7a:81:
05:54:6a:61:e7:af:69:d6:e3:52:c1:48:34:0a:28:
f5:c7:07:87:be:74:92:77:32:5b:43:1c:5c:ed:2d:
80:aa:0f:a0:56:34:ac:25:0c:6d:f0:91:72:ee:95:
91:1a:d5:17:f6:d0:a8:4b:0b:1b:52:62:4f:b2:0e:
81:82:f4:60:cb:c1:a1:24:92:ff:69:a3:7b:e4:ad:
c9:22:38:a6:f6:37:3b:30:a1:1c:30:7e:66:ee:69:
1f:21:b8:4b:1f:cc:aa:a7:bc:a0:9b:bf:19:27:59:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:34:FB:8E:AD:95:0C:3C:0E:71:84:44:D3:A9:DD:1D:BC:4C:87:F0
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/1-DT7jq2VDDwOcYRE06ndHbxMh_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.176.0/24
IPv6:
2001:67c:e1c::/48
Signature Algorithm: sha256WithRSAEncryption
17:34:00:31:6c:6f:65:fc:92:9b:3d:74:28:99:05:56:e2:68:
b4:d4:6a:4b:00:64:eb:8d:60:48:3e:9d:ff:e8:ed:d9:e7:ed:
91:14:86:06:ef:d2:9b:71:bf:2e:59:d2:ad:06:38:22:75:ca:
6c:e9:47:89:2a:ce:bd:2f:f5:d0:6b:8a:a1:40:1e:d8:10:20:
9e:7a:f3:26:fe:63:b4:a9:96:56:e9:00:8c:d4:92:2c:85:5a:
7a:fa:33:93:0d:fd:97:48:63:51:32:99:32:1a:97:f3:2b:32:
5a:23:c4:f5:dc:45:c1:72:4a:f5:da:71:2b:bd:d6:3d:d1:00:
e5:39:be:64:e4:d1:16:d9:26:66:be:e7:0b:cb:49:45:6b:d1:
06:59:63:c0:4a:af:d8:ed:b0:eb:77:f3:d1:d8:c3:85:07:6b:
72:cd:90:be:45:3c:23:48:39:4b:68:da:f6:ad:ab:81:73:dd:
08:ad:37:f1:ec:83:56:a3:17:be:78:ad:7f:ae:a7:ec:a7:bf:
48:a3:6a:c3:6e:a2:86:b1:68:c9:ff:0c:2a:1f:1c:73:fc:28:
2f:22:68:1b:89:91:7c:15:cb:9a:75:79:02:c3:59:1c:36:67:
bf:cb:c2:f4:80:bc:86:f0:a8:67:33:26:10:e2:2c:30:a3:55:
af:c8:c9:ec
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZBKXqOvgVX4ETd178gpQthfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWM3YzA4ZDc0OTAxYjdiODEwOTM3ZWM2M2U4NTU2M2Qz
Njc4NmEwHhcNMjQwNjI0MTMxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODM0ZmI4ZWFkOTUwYzNjMGU3MTg0NDRkM2E5ZGQxZGJjNGM4N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GHnpCQRsUwdc4eNAi3FZT5zJ3Gj
hkE4JSvvBxYLVpIUUoOajfxxdU2KKaMDXtOTAnR2XGzxY4MrCpjmOxjTYFxjNamT
ugYgtz7uHinZRdEo+1E+zbkY9gD2+oIZ+dbx+JcZ2shQiZIq0cid6HDH7qqqbxYX
aAj7WYZPCO0kxocmAqXF8CvK7LnXfN8Gsc6nYbj1eoEFVGph569p1uNSwUg0Cij1
xweHvnSSdzJbQxxc7S2Aqg+gVjSsJQxt8JFy7pWRGtUX9tCoSwsbUmJPsg6BgvRg
y8GhJJL/aaN75K3JIjim9jc7MKEcMH5m7mkfIbhLH8yqp7ygm78ZJ1knQQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPg0+46tlQw8DnGERNOp3R28TIfwMB8GA1UdIwQY
MBaAFFpcfAjXSQG3uBCTfsY+hVY9NnhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2x4OENOZEpBYmU0RUpOLXhqNkZWajAyZUdvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MzgwNWItOWJmZi00ZDA0LWJkYzQt
MWE1YmEzYmI3MGFiLzEvMS1EVDdqcTJWRER3T2NZUkUwNm5kSGJ4TWhfQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDcvNzM4MDViLTliZmYtNGQwNC1iZGM0LTFhNWJhM2JiNzBh
Yi8xL1dseDhDTmRKQWJlNEVKTi14ajZGVmowMmVHby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMBtsDAP
BAIAAjAJAwcAIAEGfA4cMA0GCSqGSIb3DQEBCwUAA4IBAQAXNAAxbG9l/JKbPXQo
mQVW4mi01GpLAGTrjWBIPp3/6O3Z5+2RFIYG79Kbcb8uWdKtBjgidcps6UeJKs69
L/XQa4qhQB7YECCeevMm/mO0qZZW6QCM1JIshVp6+jOTDf2XSGNRMpkyGpfzKzJa
I8T13EXBckr12nErvdY90QDlOb5k5NEW2SZmvucLy0lFa9EGWWPASq/Y7bDrd/PR
2MOFB2tyzZC+RTwjSDlLaNr2rauBc90IrTfx7INWoxe+eK1/rqfsp79Io2rDbqKG
sWjJ/wwqHxxz/CgvImgbiZF8FcuadXkCw1kcNme/y8L0gLyG8KhnMyYQ4iwwo1Wv
yMns
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:40 2025 by rpki-client