Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Q7ylfuCC8FIAA0S7lneAelCvwiE.roa
File: Q7ylfuCC8FIAA0S7lneAelCvwiE.roa (raw, json)
Hash identifier: IgBth00dtUmBF0nZpBo0VG8Ndo3/qKj9XZ2f/WUzp8U=
Subject key identifier: 43:BC:A5:7E:E0:82:F0:52:00:03:44:BB:96:77:80:7A:50:AF:C2:21
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194274891D893EFC2D5BCEC8692AD6D7D77
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Q7ylfuCC8FIAA0S7lneAelCvwiE.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 11:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:91:d8:93:ef:c2:d5:bc:ec:86:92:ad:6d:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43bca57ee082f052000344bb9677807a50afc221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:0a:b2:f1:7c:ca:ba:57:c9:9a:bf:68:d1:
1a:af:3f:f8:8d:57:89:cd:67:11:e4:9a:52:23:65:
b2:d0:6d:de:2b:e5:3d:a4:84:d9:ca:58:4a:91:a1:
24:ef:48:5e:72:35:98:b7:a8:cd:2b:e1:c2:c2:18:
8d:27:d8:2e:3c:4b:8b:8c:dc:84:d2:df:ec:ea:07:
a0:a5:1f:d5:27:2e:8b:f6:60:bc:a4:ca:96:c9:e1:
ce:86:f5:c8:06:f5:bf:c4:41:83:22:67:19:19:3d:
70:4e:59:91:c5:52:b6:83:f1:8d:02:64:76:81:93:
ac:6c:14:d2:b3:ec:c5:c9:13:20:b9:72:68:2e:d5:
c0:b9:1e:04:34:7a:49:ec:58:49:f8:45:ee:70:6c:
33:d5:86:b4:62:77:a1:0e:9d:da:c5:8b:48:1a:0d:
d8:ab:dc:8a:5a:98:d7:07:4f:80:ea:5a:2e:10:80:
f7:1f:07:79:45:3f:c0:09:b8:ff:36:3b:75:b7:90:
92:8f:e9:e7:8f:e7:a1:b6:b7:57:9e:b1:74:a9:06:
4c:b4:f0:dc:1a:dd:ce:03:56:5c:26:28:40:d0:07:
e3:39:c1:f4:a6:14:50:a8:d1:be:18:b2:aa:73:7e:
8a:69:03:76:a8:4a:60:e9:60:77:dd:d2:bb:39:73:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:A5:7E:E0:82:F0:52:00:03:44:BB:96:77:80:7A:50:AF:C2:21
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Q7ylfuCC8FIAA0S7lneAelCvwiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e5:f4:70:73:86:fb:52:4b:b0:93:2c:8b:cd:d7:84:41:85:
16:a9:b8:7e:fa:19:de:18:0f:0f:63:b2:11:aa:90:2f:13:1c:
1d:64:e3:d0:e6:10:a1:f4:54:fb:54:d5:ad:60:83:6d:c5:fa:
47:ff:18:68:ec:c2:fa:6a:fa:7f:50:6e:a2:0e:da:e8:ee:76:
53:6f:e1:95:fe:61:a1:3b:ab:30:36:37:58:e5:06:ea:ab:1a:
68:41:60:c7:44:69:c7:8b:86:97:07:17:5d:32:c5:58:b3:cd:
1c:ba:7e:4e:59:b3:5a:cf:05:f1:88:28:73:8c:36:51:96:6a:
ba:b1:80:f3:57:1f:0b:fb:10:6d:ad:e2:5c:68:2f:a8:d2:57:
2f:ce:d8:6d:55:dc:f6:67:7f:2c:d0:d5:46:3b:ea:7b:a2:b7:
f9:c3:b8:ae:3c:cf:fd:16:0e:b3:ee:15:d3:d5:6e:38:ce:fe:
22:fe:e6:b0:67:38:1e:c8:fb:58:b8:2d:49:8e:c6:31:14:43:
00:7f:ca:83:62:42:2b:fd:b5:e3:e8:51:79:55:c7:0a:80:b8:
38:aa:d2:4c:6c:17:87:6b:00:62:fb:d8:fd:52:6c:95:e4:d7:
a8:53:bc:b1:15:58:77:43:e6:79:54:ee:c4:e4:c4:22:1b:b9:
f1:39:6d:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSJHYk+/C1bzshpKtbX13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjUwMTAyMTM1MDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2JjYTU3ZWUwODJmMDUyMDAwMzQ0YmI5Njc3ODA3YTUwYWZjMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RgKsvF8yrpXyZq/aNEarz/4jVeJ
zWcR5JpSI2Wy0G3eK+U9pITZylhKkaEk70hecjWYt6jNK+HCwhiNJ9guPEuLjNyE
0t/s6gegpR/VJy6L9mC8pMqWyeHOhvXIBvW/xEGDImcZGT1wTlmRxVK2g/GNAmR2
gZOsbBTSs+zFyRMguXJoLtXAuR4ENHpJ7FhJ+EXucGwz1Ya0YnehDp3axYtIGg3Y
q9yKWpjXB0+A6louEID3Hwd5RT/ACbj/Njt1t5CSj+nnj+ehtrdXnrF0qQZMtPDc
Gt3OA1ZcJihA0AfjOcH0phRQqNG+GLKqc36KaQN2qEpg6WB33dK7OXMj/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEO8pX7ggvBSAANEu5Z3gHpQr8IhMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvUTd5bGZ1Q0M4RklBQTBTN2xuZUFlbEN2d2lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUF3AAwQA
UF3OMA0GCSqGSIb3DQEBCwUAA4IBAQAQ5fRwc4b7UkuwkyyLzdeEQYUWqbh++hne
GA8PY7IRqpAvExwdZOPQ5hCh9FT7VNWtYINtxfpH/xho7ML6avp/UG6iDtro7nZT
b+GV/mGhO6swNjdY5QbqqxpoQWDHRGnHi4aXBxddMsVYs80cun5OWbNazwXxiChz
jDZRlmq6sYDzVx8L+xBtreJcaC+o0lcvzthtVdz2Z38s0NVGO+p7orf5w7iuPM/9
Fg6z7hXT1W44zv4i/uawZzgeyPtYuC1JjsYxFEMAf8qDYkIr/bXj6FF5VccKgLg4
qtJMbBeHawBi+9j9UmyV5NeoU7yxFVh3Q+Z5VO7E5MQiG7nxOW3r
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:07:11 2025 by rpki-client