Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/FlwRcTfDeZitg5sl5pWthV2eq-o.roa
File: FlwRcTfDeZitg5sl5pWthV2eq-o.roa (raw, json)
Hash identifier: y9x08JzdH3cZr2f1YQN5hz33C6Fsr8opZyOg1GDdHXE=
Subject key identifier: 16:5C:11:71:37:C3:79:98:AD:83:9B:25:E6:95:AD:85:5D:9E:AB:EA
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 0193D38EABA28B11B1FC53EB8327B178D0C2
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/FlwRcTfDeZitg5sl5pWthV2eq-o.roa
Signing time: Tue 17 Dec 2024 07:39:22 +0000
ROA not before: Tue 17 Dec 2024 07:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209522
IP address blocks: 130.180.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:8e:ab:a2:8b:11:b1:fc:53:eb:83:27:b1:78:d0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Dec 17 07:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=165c117137c37998ad839b25e695ad855d9eabea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:6b:7a:cd:cb:67:14:51:9a:79:f2:23:95:
94:ac:d5:9f:cd:0f:0b:c7:06:48:23:7c:96:c0:41:
98:b5:e8:1b:46:bb:b6:a9:3f:6f:ee:69:6f:4e:fe:
e0:2e:d0:03:ad:57:04:12:05:51:82:43:ac:8b:e1:
04:fe:53:14:70:6d:9f:d6:c8:a2:b7:a1:85:3e:cf:
a2:42:38:61:61:f5:bd:ba:ac:04:f8:4f:fc:6d:39:
4c:19:a1:fa:35:12:34:6a:1c:58:1e:ae:7a:cf:34:
69:9d:d9:20:be:fc:a4:ba:4a:08:91:bc:26:29:d4:
b8:9e:eb:e0:75:0e:68:28:30:74:6c:1c:6b:c8:5e:
0e:ad:7b:8d:a8:0d:6f:c4:c0:1c:d8:e7:29:4a:68:
f4:a2:0c:78:8a:a2:d3:f7:64:79:53:fa:de:57:df:
99:17:87:90:89:1a:ba:2d:db:0d:7f:28:9c:be:b6:
00:c3:9f:f7:58:1b:d1:82:58:85:3b:a3:a6:73:46:
85:04:57:10:af:f6:73:94:c0:89:c7:1c:99:d7:70:
62:ff:d4:bd:bb:57:d7:b8:77:d0:c1:5c:c4:a2:93:
73:f0:99:96:79:ca:be:3b:ad:12:56:c4:73:2f:c6:
7e:3d:78:c7:4e:2b:bb:c1:28:6d:30:3d:a9:53:cd:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:11:71:37:C3:79:98:AD:83:9B:25:E6:95:AD:85:5D:9E:AB:EA
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/FlwRcTfDeZitg5sl5pWthV2eq-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.180.199.0/24
Signature Algorithm: sha256WithRSAEncryption
65:72:99:b7:5d:17:e6:a4:b2:44:7a:b9:f6:19:7c:b3:b6:d0:
34:0e:0a:0b:04:ee:ab:11:f1:97:07:77:e4:83:41:f9:df:e6:
52:f4:3f:dd:3f:25:75:73:df:84:39:8c:cc:19:c2:59:9e:b4:
fa:9a:f3:bf:df:67:7c:82:70:7a:25:49:7f:1b:1a:3a:e6:a3:
26:b5:d6:ed:c1:81:87:4d:41:35:f5:f8:6c:7e:cf:17:dd:70:
ec:c8:fc:8b:86:4e:ab:25:14:f3:b8:67:46:a6:93:d1:98:7b:
b9:b3:e7:df:c6:20:6b:00:c7:84:05:99:3f:e1:87:cd:4a:31:
86:0c:44:9b:2d:49:2d:fd:10:f3:45:c6:15:1b:09:09:65:f6:
d5:1f:9c:5e:48:fa:0b:01:12:c7:ce:6c:98:55:73:37:df:b9:
81:08:06:79:83:26:d8:6b:1d:5a:9b:f6:f7:d1:3e:b3:41:d6:
ba:00:14:69:01:4f:a2:9b:d5:55:7f:d3:d6:2f:13:a6:a7:2e:
e6:aa:37:0f:84:28:44:49:3a:97:fc:87:d8:bf:7f:5c:b1:a9:
a2:73:22:dd:00:ae:fe:7d:9f:ca:4c:a5:ba:31:e5:55:4e:ce:
45:41:b6:6d:2c:37:b6:e6:61:f0:e1:8b:78:38:69:fe:21:0b:
3b:ea:b7:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPTjquiixGx/FPrgyexeNDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjkwMzI4NGExZDE1ZGMxNThhZDcxODJlYTBiY2U3ODZj
ZWIyYWQwHhcNMjQxMjE3MDczOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjVjMTE3MTM3YzM3OTk4YWQ4MzliMjVlNjk1YWQ4NTVkOWVhYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukpres3LZxRRmnnyI5WUrNWfzQ8L
xwZII3yWwEGYtegbRru2qT9v7mlvTv7gLtADrVcEEgVRgkOsi+EE/lMUcG2f1sii
t6GFPs+iQjhhYfW9uqwE+E/8bTlMGaH6NRI0ahxYHq56zzRpndkgvvykukoIkbwm
KdS4nuvgdQ5oKDB0bBxryF4OrXuNqA1vxMAc2OcpSmj0ogx4iqLT92R5U/reV9+Z
F4eQiRq6LdsNfyicvrYAw5/3WBvRgliFO6Omc0aFBFcQr/ZzlMCJxxyZ13Bi/9S9
u1fXuHfQwVzEopNz8JmWecq+O60SVsRzL8Z+PXjHTiu7wShtMD2pU83l3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZcEXE3w3mYrYObJeaVrYVdnqvqMB8GA1UdIwQY
MBaAFD65AyhKHRXcFYrXGC6gvOeGzrKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMt
Yjc3ZGM4ZGMxYzdlLzEvRmx3UmNUZkRlWml0ZzVzbDVwV3RoVjJlcS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMtYjc3ZGM4ZGMxYzdl
LzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgrTHMA0G
CSqGSIb3DQEBCwUAA4IBAQBlcpm3XRfmpLJEern2GXyzttA0DgoLBO6rEfGXB3fk
g0H53+ZS9D/dPyV1c9+EOYzMGcJZnrT6mvO/32d8gnB6JUl/Gxo65qMmtdbtwYGH
TUE19fhsfs8X3XDsyPyLhk6rJRTzuGdGppPRmHu5s+ffxiBrAMeEBZk/4YfNSjGG
DESbLUkt/RDzRcYVGwkJZfbVH5xeSPoLARLHzmyYVXM337mBCAZ5gybYax1am/b3
0T6zQda6ABRpAU+im9VVf9PWLxOmpy7mqjcPhChESTqX/IfYv39csamicyLdAK7+
fZ/KTKW6MeVVTs5FQbZtLDe25mHw4Yt4OGn+IQs76rdw
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:48:02 2025 by rpki-client