Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qIaufJnid17I_n-5vQlFmlxULD4.roa
File: qIaufJnid17I_n-5vQlFmlxULD4.roa (raw, json)
Hash identifier: +11F47AbjmlZ8KtuABaX0VUtFhtBwhNlBQ7+OmSOgkU=
Subject key identifier: A8:86:AE:7C:99:E2:77:5E:C8:FE:7F:B9:BD:09:45:9A:5C:54:2C:3E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB95629AFE110F7094FB89C3CD66ED
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qIaufJnid17I_n-5vQlFmlxULD4.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 77.242.150.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 19:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:95:62:9a:fe:11:0f:70:94:fb:89:c3:cd:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a886ae7c99e2775ec8fe7fb9bd09459a5c542c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:74:0c:6c:18:7e:32:01:ba:b8:8e:e6:e6:
c5:9b:b2:d3:5b:a8:ea:80:52:55:a1:9f:e6:fe:fd:
09:7f:46:5c:9b:ff:73:92:12:89:21:d5:3c:a1:1e:
a6:01:64:94:d9:97:0c:50:2f:2b:7b:61:f4:1c:6b:
39:28:c0:eb:60:f2:86:53:30:cb:91:0a:2b:fb:89:
5a:46:9b:44:d7:ff:4d:6b:09:d5:2b:96:d5:84:ae:
36:b7:7e:af:a6:1c:26:b1:64:a4:a7:13:98:73:8e:
f2:eb:f7:29:05:ca:ca:a5:20:50:b9:0e:7f:6f:15:
58:bb:53:b9:ae:f8:eb:f1:35:87:33:8d:8b:a2:a4:
a7:96:7d:4a:50:9c:77:63:12:d7:b6:b3:39:8d:22:
c5:95:08:c7:c0:55:47:8b:b9:12:90:6a:02:3a:06:
a7:a5:6d:3f:33:af:16:76:ff:50:d6:c3:36:64:84:
f0:e9:01:46:5c:3a:c2:e0:82:f9:cf:da:ed:b5:2c:
37:65:bc:f2:bb:60:19:a6:8f:92:f3:cb:0e:43:87:
c2:fd:3d:16:01:ef:f5:cb:c1:78:e6:2a:8a:07:de:
0a:83:b4:1a:92:d1:74:a8:45:d4:cf:62:e2:26:c3:
5b:3a:f9:54:74:21:1a:0a:a2:fa:03:0e:ca:fe:75:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:AE:7C:99:E2:77:5E:C8:FE:7F:B9:BD:09:45:9A:5C:54:2C:3E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qIaufJnid17I_n-5vQlFmlxULD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.150.0/24
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f8:89:15:2f:b6:64:77:49:07:0a:a6:d6:03:e1:5c:33:0b:
99:12:ec:b5:fd:6c:05:9e:ee:75:c4:be:a6:ef:c0:4d:07:61:
ae:6b:40:ed:58:e9:ca:10:91:f7:2f:f3:e4:03:90:0a:8a:19:
dc:98:60:6c:b5:8e:13:a0:4f:52:74:6a:0f:af:77:b0:08:07:
0d:71:d2:72:04:3d:2c:59:6c:ee:95:b5:a1:a6:4e:c9:76:c9:
21:36:84:a3:12:9c:eb:d2:83:3e:1d:af:1d:e9:11:01:2a:a7:
f7:2a:4e:0b:d1:b2:0d:8b:87:a2:bd:39:16:3a:5a:ae:4e:8c:
87:db:7a:7c:4f:4b:5c:31:72:9a:76:c0:a2:3b:0f:02:01:5a:
ae:7b:2e:c4:27:d9:60:75:b9:c3:c9:10:39:dc:c0:7d:fb:14:
49:9c:79:2a:4d:ce:6f:eb:7e:21:b5:3d:e8:45:a0:da:df:5a:
71:12:ad:35:97:a4:bc:92:22:f7:84:5d:a6:d9:30:13:3a:58:
61:ed:93:45:2e:b0:c9:96:b4:e6:dd:3b:e8:df:3c:5b:1f:61:
13:48:4c:f3:a4:21:35:c9:bf:73:00:5f:d5:2f:c8:61:4b:7e:
f5:58:3d:8a:1e:7c:23:d1:9f:e1:76:0f:c7:24:7c:cd:40:f9:
c8:d6:95:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQi+5Vimv4RD3CU+4nDzWbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMTAxMTc0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODg2YWU3Yzk5ZTI3NzVlYzhmZTdmYjliZDA5NDU5YTVjNTQyYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPd0DGwYfjIBuriO5ubFm7LTW6jq
gFJVoZ/m/v0Jf0Zcm/9zkhKJIdU8oR6mAWSU2ZcMUC8re2H0HGs5KMDrYPKGUzDL
kQor+4laRptE1/9NawnVK5bVhK42t36vphwmsWSkpxOYc47y6/cpBcrKpSBQuQ5/
bxVYu1O5rvjr8TWHM42LoqSnln1KUJx3YxLXtrM5jSLFlQjHwFVHi7kSkGoCOgan
pW0/M68Wdv9Q1sM2ZITw6QFGXDrC4IL5z9rttSw3Zbzyu2AZpo+S88sOQ4fC/T0W
Ae/1y8F45iqKB94Kg7QaktF0qEXUz2LiJsNbOvlUdCEaCqL6Aw7K/nU8SQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKiGrnyZ4ndeyP5/ub0JRZpcVCw+MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvcUlhdWZKbmlkMTdJX24tNXZRbEZtbHhVTEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfKWAwQA
WNHYMA0GCSqGSIb3DQEBCwUAA4IBAQA4+IkVL7Zkd0kHCqbWA+FcMwuZEuy1/WwF
nu51xL6m78BNB2Gua0DtWOnKEJH3L/PkA5AKihncmGBstY4ToE9SdGoPr3ewCAcN
cdJyBD0sWWzulbWhpk7JdskhNoSjEpzr0oM+Ha8d6REBKqf3Kk4L0bINi4eivTkW
OlquToyH23p8T0tcMXKadsCiOw8CAVquey7EJ9lgdbnDyRA53MB9+xRJnHkqTc5v
634htT3oRaDa31pxEq01l6S8kiL3hF2m2TATOlhh7ZNFLrDJlrTm3Tvo3zxbH2ET
SEzzpCE1yb9zAF/VL8hhS371WD2KHnwj0Z/hdg/HJHzNQPnI1pXR
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:22 2025 by rpki-client