Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/m6s3fK6HRsGhi8AwNGQ1fJXGxMo.roa
File: m6s3fK6HRsGhi8AwNGQ1fJXGxMo.roa (raw, json)
Hash identifier: M8EEc1NOG1qSoJd8bsoThnUyMipZ8D8l3xw8MpTKH+s=
Subject key identifier: 9B:AB:37:7C:AE:87:46:C1:A1:8B:C0:30:34:64:35:7C:95:C6:C4:CA
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 01941CC4C6DC79243AAAA9669173AF407392
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/m6s3fK6HRsGhi8AwNGQ1fJXGxMo.roa
Signing time: Tue 31 Dec 2024 12:50:45 +0000
ROA not before: Tue 31 Dec 2024 12:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58074
IP address blocks: 193.169.142.0/24 maxlen: 24
194.6.201.0/24 maxlen: 24
195.78.124.0/23 maxlen: 24
195.88.38.0/23 maxlen: 24
195.245.82.0/24 maxlen: 24
195.245.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:c4:c6:dc:79:24:3a:aa:a9:66:91:73:af:40:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Dec 31 12:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bab377cae8746c1a18bc0303464357c95c6c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:93:26:df:09:9c:c5:d9:a1:ab:0c:2f:84:
01:0b:2c:03:ad:58:a4:0f:9d:79:98:36:26:1c:22:
e7:3a:22:33:7f:cf:7e:06:35:82:06:50:74:dc:43:
94:04:e2:e6:a6:66:1c:56:87:98:a9:c1:5c:f0:22:
8a:7e:45:2e:fd:33:32:a1:4b:9d:bd:dc:bf:cc:78:
b7:93:90:ec:8f:26:5f:7d:6d:76:72:c4:94:8e:41:
ff:37:bd:c7:b5:e0:ee:21:9a:49:53:2b:c7:61:d3:
4e:16:0f:5e:ad:61:a6:3b:f4:ca:c1:02:cb:c5:c5:
0b:18:c9:eb:37:82:2a:33:98:d6:d1:85:3b:d2:27:
34:3a:dd:c2:c9:e5:68:07:8f:42:84:88:32:0a:8a:
6d:69:9d:6c:cd:52:d5:a7:4d:f6:f5:bf:af:f0:4a:
d3:f5:21:28:95:a0:88:a5:0f:de:b3:03:9d:a7:de:
1e:be:90:29:14:bf:75:bb:e9:dd:92:79:70:5f:38:
1d:cb:9c:79:9e:24:6f:b8:21:05:fb:0a:76:2e:fc:
86:eb:20:db:fb:6a:94:71:d1:d2:dd:d2:3a:5d:cf:
ee:b1:13:17:8e:5e:c9:f4:20:07:26:ee:1a:f4:14:
16:30:b7:c9:75:f1:00:2a:14:21:80:44:10:45:1b:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:37:7C:AE:87:46:C1:A1:8B:C0:30:34:64:35:7C:95:C6:C4:CA
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/m6s3fK6HRsGhi8AwNGQ1fJXGxMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.142.0/24
194.6.201.0/24
195.78.124.0/23
195.88.38.0/23
195.245.82.0/23
Signature Algorithm: sha256WithRSAEncryption
54:04:68:ed:be:7f:99:6c:65:84:bf:ef:35:d4:01:a4:23:87:
ed:37:28:06:e4:d0:db:ce:b0:71:5f:fb:e5:db:c1:af:c1:40:
57:1b:fe:d4:cd:26:f0:2b:e9:64:82:9e:17:a3:f2:a3:8d:26:
c9:d0:74:91:5b:d5:b8:77:32:1c:1a:f0:72:71:ab:44:a8:9b:
2c:74:63:0f:6d:21:05:3a:8a:d7:80:5e:14:51:9d:1a:bb:c5:
55:ab:3c:92:0f:4f:ef:09:d2:da:79:f3:de:72:63:e3:8a:47:
8f:03:b5:71:31:51:a7:22:6b:98:f0:6f:5e:b3:6f:bd:6f:fa:
5d:00:46:1f:e7:4d:ac:55:2a:ac:1b:7a:63:1d:32:e0:f0:14:
a5:89:e3:07:a2:78:7e:c9:b7:71:e0:86:a7:e7:cf:40:cd:7f:
e2:5f:c5:87:c1:33:db:7b:4f:8d:bf:f1:4b:0e:8d:5f:fd:83:
c4:a5:e5:2b:8d:78:c6:3b:20:21:be:67:53:98:4c:11:00:02:
7a:06:71:13:31:26:3c:e7:c3:6c:de:be:07:25:8e:80:16:69:
d2:6b:db:2a:09:2c:2a:08:d6:3d:2f:cb:3e:4b:f0:c9:b1:55:
ca:b0:91:bc:c4:3f:49:82:fa:27:77:c9:5e:02:f1:50:f0:fe:
75:5b:03:1d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQcxMbceSQ6qqlmkXOvQHOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjQxMjMxMTI1MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmFiMzc3Y2FlODc0NmMxYTE4YmMwMzAzNDY0MzU3Yzk1YzZjNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5WTJt8JnMXZoasML4QBCywDrVik
D515mDYmHCLnOiIzf89+BjWCBlB03EOUBOLmpmYcVoeYqcFc8CKKfkUu/TMyoUud
vdy/zHi3k5DsjyZffW12csSUjkH/N73HteDuIZpJUyvHYdNOFg9erWGmO/TKwQLL
xcULGMnrN4IqM5jW0YU70ic0Ot3CyeVoB49ChIgyCoptaZ1szVLVp0329b+v8ErT
9SEolaCIpQ/eswOdp94evpApFL91u+ndknlwXzgdy5x5niRvuCEF+wp2LvyG6yDb
+2qUcdHS3dI6Xc/usRMXjl7J9CAHJu4a9BQWMLfJdfEAKhQhgEQQRRtjqQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJurN3yuh0bBoYvAMDRkNXyVxsTKMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvbTZzM2ZLNkhSc0doaThBd05HUTFmSlhHeE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi
LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwamOAwQA
wgbJAwQBw058AwQBw1gmAwQBw/VSMA0GCSqGSIb3DQEBCwUAA4IBAQBUBGjtvn+Z
bGWEv+811AGkI4ftNygG5NDbzrBxX/vl28GvwUBXG/7UzSbwK+lkgp4Xo/KjjSbJ
0HSRW9W4dzIcGvBycatEqJssdGMPbSEFOorXgF4UUZ0au8VVqzySD0/vCdLaefPe
cmPjikePA7VxMVGnImuY8G9es2+9b/pdAEYf502sVSqsG3pjHTLg8BSlieMHonh+
ybdx4Ian589AzX/iX8WHwTPbe0+Nv/FLDo1f/YPEpeUrjXjGOyAhvmdTmEwRAAJ6
BnETMSY858Ns3r4HJY6AFmnSa9sqCSwqCNY9L8s+S/DJsVXKsJG8xD9Jgvond8le
AvFQ8P51WwMd
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:00:02 2025 by rpki-client