Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/xzNe_zvrPvKMqfRKxLdNvxOfJHw.roa
File: xzNe_zvrPvKMqfRKxLdNvxOfJHw.roa (raw, json)
Hash identifier: c0wbvAJx2VIPvT0jXVN+Bn6Ik3KSBvF12azPJgjia8c=
Subject key identifier: C7:33:5E:FF:3B:EB:3E:F2:8C:A9:F4:4A:C4:B7:4D:BF:13:9F:24:7C
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 01934AF5E897B6966243E4864C9720F34701
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/xzNe_zvrPvKMqfRKxLdNvxOfJHw.roa
Signing time: Wed 20 Nov 2024 19:04:10 +0000
ROA not before: Wed 20 Nov 2024 19:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59589
IP address blocks: 195.93.248.0/24 maxlen: 24
2a10:1040::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4a:f5:e8:97:b6:96:62:43:e4:86:4c:97:20:f3:47:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: Nov 20 19:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7335eff3beb3ef28ca9f44ac4b74dbf139f247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:ab:d8:eb:6d:55:ed:09:db:76:2c:25:ff:
2d:8c:74:d4:2b:26:58:b6:8a:73:a1:14:f6:b5:1b:
15:08:fb:24:9d:b3:98:1f:a6:02:6e:40:2b:31:d6:
07:8f:ff:14:df:7f:aa:87:8b:6e:e0:f1:70:a2:4b:
7b:cd:05:9b:d0:81:c2:29:81:16:86:2e:c5:8e:af:
d1:5e:03:6c:95:76:8f:fb:12:f6:e5:10:e6:dc:c3:
17:36:9a:d7:31:91:13:40:6a:6a:f9:83:15:1d:6d:
0c:8f:f1:34:d1:03:8a:a7:ff:43:63:43:57:8c:b4:
61:eb:f1:5f:2b:93:98:b0:d5:83:79:2d:fb:2c:18:
b0:62:5e:50:52:3e:89:da:9a:b6:2a:cf:7b:54:02:
42:e0:fe:01:3e:af:76:9e:c9:95:3c:87:f8:4c:6d:
95:d2:64:3d:a7:e0:7f:2e:8a:7d:dd:0b:31:ec:83:
b3:31:8a:b2:f7:99:85:61:13:31:7b:20:71:e9:17:
f9:d8:f8:94:80:ec:c7:1d:1e:e8:3a:19:65:f6:50:
bc:d7:75:0c:d2:be:48:67:b4:24:4b:27:2c:d4:ab:
5f:98:ec:af:14:c8:b9:c8:36:3b:69:d6:e0:bd:30:
c5:ca:58:4d:0a:e2:79:74:a6:29:0c:e2:c2:ea:11:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:33:5E:FF:3B:EB:3E:F2:8C:A9:F4:4A:C4:B7:4D:BF:13:9F:24:7C
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/xzNe_zvrPvKMqfRKxLdNvxOfJHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.248.0/24
IPv6:
2a10:1040::/32
Signature Algorithm: sha256WithRSAEncryption
1c:0f:64:35:f3:55:c5:41:ae:c5:55:6a:ea:80:11:27:28:56:
f4:6d:77:c2:79:63:9e:55:ae:0a:2d:15:2b:3a:ec:f2:33:9a:
bb:d2:fb:bd:75:a5:43:a9:05:90:c1:80:e9:10:a3:b4:c2:b7:
75:e4:b4:1c:7f:82:38:ee:3b:90:fd:ff:7b:93:b8:c1:42:b7:
e9:15:7a:1c:1f:b0:a3:e6:54:e6:33:05:93:f0:cc:df:85:ad:
a6:9c:dc:cc:04:06:74:3d:73:0d:55:f7:2b:e3:c9:20:86:98:
0b:25:cf:07:c4:a9:28:56:de:ad:b0:27:5b:67:3d:d0:ca:e3:
59:3f:2e:98:9d:a4:48:26:eb:e2:ed:57:e3:ad:63:c5:db:92:
9c:35:7a:3d:dd:1a:70:90:ed:7d:44:21:bc:a6:2c:bd:fe:f8:
52:a4:0c:56:49:ad:c9:ab:af:6a:76:9c:e5:63:b7:e1:f5:9c:
f3:f3:27:c6:4e:75:55:37:8f:e7:19:a0:e4:83:99:f7:57:bd:
64:ef:78:c9:d7:0e:22:22:49:f6:e9:f8:08:5d:5e:f8:ed:23:
ad:6f:0d:41:8f:5a:d0:46:bb:d6:25:45:19:e9:26:82:b3:43:
b1:c8:6e:ea:32:2d:2c:44:27:9b:a1:d0:7c:96:89:c0:69:b5:
75:e0:f3:a1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZNK9eiXtpZiQ+SGTJcg80cBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OTg5MjY0ZTUwZjM5YWU4ODhhZTMyNzYxMDliYmE4MDJl
NDU4MDEwHhcNMjQxMTIwMTkwNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzMzNWVmZjNiZWIzZWYyOGNhOWY0NGFjNGI3NGRiZjEzOWYyNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLGr2OttVe0J23YsJf8tjHTUKyZY
topzoRT2tRsVCPsknbOYH6YCbkArMdYHj/8U33+qh4tu4PFwokt7zQWb0IHCKYEW
hi7Fjq/RXgNslXaP+xL25RDm3MMXNprXMZETQGpq+YMVHW0Mj/E00QOKp/9DY0NX
jLRh6/FfK5OYsNWDeS37LBiwYl5QUj6J2pq2Ks97VAJC4P4BPq92nsmVPIf4TG2V
0mQ9p+B/Lop93Qsx7IOzMYqy95mFYRMxeyBx6Rf52PiUgOzHHR7oOhll9lC813UM
0r5IZ7QkSycs1KtfmOyvFMi5yDY7adbgvTDFylhNCuJ5dKYpDOLC6hFuRwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMczXv876z7yjKn0SsS3Tb8TnyR8MB8GA1UdIwQY
MBaAFIiYkmTlDzmuiIrjJ2EJu6gC5FgBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUppU1pPVVBPYTZJaXVNbllRbTdxQUxrV0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NzEyNDQtOWM5YS00M2FjLTkzMGMt
MzcwYzgwNzY5ODMxLzEveHpOZV96dnJQdktNcWZSS3hMZE52eE9mSkh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81NzEyNDQtOWM5YS00M2FjLTkzMGMtMzcwYzgwNzY5ODMx
LzEvaUppU1pPVVBPYTZJaXVNbllRbTdxQUxrV0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw134MA0E
AgACMAcDBQAqEBBAMA0GCSqGSIb3DQEBCwUAA4IBAQAcD2Q181XFQa7FVWrqgBEn
KFb0bXfCeWOeVa4KLRUrOuzyM5q70vu9daVDqQWQwYDpEKO0wrd15LQcf4I47juQ
/f97k7jBQrfpFXocH7Cj5lTmMwWT8Mzfha2mnNzMBAZ0PXMNVfcr48kghpgLJc8H
xKkoVt6tsCdbZz3QyuNZPy6YnaRIJuvi7VfjrWPF25KcNXo93RpwkO19RCG8piy9
/vhSpAxWSa3Jq69qdpzlY7fh9Zzz8yfGTnVVN4/nGaDkg5n3V71k73jJ1w4iIkn2
6fgIXV747SOtbw1Bj1rQRrvWJUUZ6SaCs0OxyG7qMi0sRCebodB8lonAabV14POh
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:19 2025 by rpki-client