Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/yG6MIPzs0PeJsbbkC7P9p5Gflwg.roa
File: yG6MIPzs0PeJsbbkC7P9p5Gflwg.roa (raw, json)
Hash identifier: 19vtmc09m518wfuQdr9K2I3AegFjRyZ7HpyHzfVWcUo=
Subject key identifier: C8:6E:8C:20:FC:EC:D0:F7:89:B1:B6:E4:0B:B3:FD:A7:91:9F:97:08
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0194206836A16203FDD6E30A9506008E6D39
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/yG6MIPzs0PeJsbbkC7P9p5Gflwg.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214000
IP address blocks: 195.8.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 20:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:36:a1:62:03:fd:d6:e3:0a:95:06:00:8e:6d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c86e8c20fcecd0f789b1b6e40bb3fda7919f9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:10:a4:45:78:1d:99:b7:0e:0f:23:25:2e:
03:0a:ad:8f:a5:ea:37:5e:25:d7:a5:22:07:e8:ec:
9a:6d:9e:95:69:23:20:7c:72:49:a5:c6:0e:97:80:
27:7b:2b:34:93:0f:4f:f3:20:d5:4b:71:4a:ac:4a:
e6:cc:b7:a6:b9:bc:ec:04:e3:f9:2b:44:f3:41:58:
83:25:5c:c1:f0:2a:d3:fc:b1:b2:ec:a3:72:57:72:
9f:80:ce:05:32:f3:99:95:e7:89:06:b5:e3:05:2f:
16:67:61:18:e4:31:ab:e6:f0:e4:36:83:dd:ad:8a:
0e:df:3e:67:27:ac:3a:5e:d8:56:53:1e:63:87:af:
c5:bc:c6:76:b1:f5:7f:a1:4b:ce:df:8a:06:13:50:
73:3d:6b:c1:f7:bd:c8:f3:03:e6:58:7a:8c:08:67:
26:fb:8b:81:50:2b:c4:58:ef:48:35:7e:46:4e:ad:
b9:a9:8f:3c:5a:c5:d5:af:16:13:09:9b:15:94:5f:
40:b9:0d:d2:84:2d:91:aa:1c:f6:82:a0:bc:13:5b:
65:26:f1:ed:13:16:21:5c:10:0a:4a:b6:54:d1:e9:
c3:8c:54:6b:3f:0c:43:d6:77:b3:af:3f:8f:89:44:
c8:82:8f:d7:5b:64:6d:0d:68:77:c7:ea:a3:74:4c:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6E:8C:20:FC:EC:D0:F7:89:B1:B6:E4:0B:B3:FD:A7:91:9F:97:08
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/yG6MIPzs0PeJsbbkC7P9p5Gflwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:53:2b:6b:8f:2a:c7:51:80:a1:31:f1:8d:28:72:86:e9:c9:
55:cb:81:7e:fb:93:8a:36:d6:b5:b5:8c:ac:d7:b1:25:8b:12:
59:bb:72:23:05:b1:af:06:12:28:b1:80:d7:a0:77:28:20:93:
e7:03:83:48:9a:20:72:f4:19:1d:82:8f:9b:69:2a:0b:07:d5:
c6:8c:5b:2c:42:12:e3:b9:40:d1:74:77:f9:b5:46:e4:d2:4f:
67:ce:64:6f:3e:35:e8:20:d0:b8:82:cf:e6:2a:a1:e8:52:c2:
a9:cf:f2:e4:a2:cf:a1:da:0c:a8:ca:88:33:53:37:69:02:cd:
bd:fa:3a:82:6d:e9:f7:ff:d6:bd:c1:ca:a0:06:03:9b:66:48:
0f:26:ad:8e:1c:ad:ab:12:37:1e:0e:10:b8:52:56:9b:c4:aa:
c3:cc:86:7e:7d:da:78:d0:99:a6:c3:25:fa:c5:43:49:45:36:
66:fd:6c:fe:46:1d:d0:80:10:6a:e4:6c:df:6e:d9:43:c2:91:
93:14:cd:6d:e6:1a:b0:9f:b5:a7:fd:42:45:3a:ad:43:ea:77:
d6:ca:47:98:7a:6b:5a:ae:ea:56:b1:d7:a1:dd:72:a3:e7:78:
46:51:da:6f:25:c3:2f:a9:6c:96:49:d4:79:0f:57:75:cf:bf:
d8:4c:06:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDahYgP91uMKlQYAjm05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjUwMTAxMDU0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODZlOGMyMGZjZWNkMGY3ODliMWI2ZTQwYmIzZmRhNzkxOWY5NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1sQpEV4HZm3Dg8jJS4DCq2Ppeo3
XiXXpSIH6OyabZ6VaSMgfHJJpcYOl4Aneys0kw9P8yDVS3FKrErmzLemubzsBOP5
K0TzQViDJVzB8CrT/LGy7KNyV3KfgM4FMvOZleeJBrXjBS8WZ2EY5DGr5vDkNoPd
rYoO3z5nJ6w6XthWUx5jh6/FvMZ2sfV/oUvO34oGE1BzPWvB973I8wPmWHqMCGcm
+4uBUCvEWO9INX5GTq25qY88WsXVrxYTCZsVlF9AuQ3ShC2Rqhz2gqC8E1tlJvHt
ExYhXBAKSrZU0enDjFRrPwxD1nezrz+PiUTIgo/XW2RtDWh3x+qjdEwigwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhujCD87ND3ibG25Auz/aeRn5cIMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEveUc2TUlQenMwUGVKc2Jia0M3UDlwNUdmbHdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjIMA0G
CSqGSIb3DQEBCwUAA4IBAQCfUytrjyrHUYChMfGNKHKG6clVy4F++5OKNta1tYys
17ElixJZu3IjBbGvBhIosYDXoHcoIJPnA4NImiBy9Bkdgo+baSoLB9XGjFssQhLj
uUDRdHf5tUbk0k9nzmRvPjXoINC4gs/mKqHoUsKpz/Lkos+h2gyoyogzUzdpAs29
+jqCben3/9a9wcqgBgObZkgPJq2OHK2rEjceDhC4UlabxKrDzIZ+fdp40JmmwyX6
xUNJRTZm/Wz+Rh3QgBBq5GzfbtlDwpGTFM1t5hqwn7Wn/UJFOq1D6nfWykeYemta
rupWsdeh3XKj53hGUdpvJcMvqWyWSdR5D1d1z7/YTAYU
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:10 2025 by rpki-client