Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/AtANFjGFYYWzBAQ4FpzrlJSyGe8.roa
File: AtANFjGFYYWzBAQ4FpzrlJSyGe8.roa (raw, json)
Hash identifier: 01KJcgBMtwzCvOX+gM/qZxbV4VCrwrLEkD8trfjBGhE=
Subject key identifier: 02:D0:0D:16:31:85:61:85:B3:04:04:38:16:9C:EB:94:94:B2:19:EF
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0194D74E16CF7E77BD0579B85EB805CD01B5
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/AtANFjGFYYWzBAQ4FpzrlJSyGe8.roa
Signing time: Wed 05 Feb 2025 18:10:06 +0000
ROA not before: Wed 05 Feb 2025 18:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8311
IP address blocks: 194.143.210.0/23 maxlen: 23
194.143.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 13:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:4e:16:cf:7e:77:bd:05:79:b8:5e:b8:05:cd:01:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 5 18:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02d00d1631856185b3040438169ceb9494b219ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:5e:0c:97:6f:76:e0:b9:8e:d3:a3:5d:73:
cf:20:e3:bf:c1:2f:13:67:37:34:10:7d:3f:81:7e:
cc:82:9d:97:e5:2c:e7:5b:f8:fa:05:4b:12:96:99:
72:70:b8:49:e0:04:09:04:41:f4:eb:a2:77:5d:5c:
4e:e3:53:5e:0b:53:ee:cb:d1:a7:98:7e:d7:96:3a:
15:52:02:28:f8:ab:db:3a:ae:e0:51:9e:cb:97:cb:
23:75:db:56:50:93:20:67:9c:e4:18:3d:ee:4c:20:
26:6a:3e:c4:b3:5f:3e:25:8f:c4:fb:da:86:a7:57:
99:cb:bb:d0:8b:71:f8:e4:97:d7:2c:6a:3e:d6:ba:
be:61:a6:f9:8b:54:1d:6e:df:de:5a:71:2f:ad:a4:
c0:ea:e0:26:60:78:62:d5:65:22:db:9a:fc:b4:1b:
89:b4:a4:a3:92:6e:92:b3:3f:63:70:7a:83:b2:71:
27:7a:43:82:cd:8e:b8:a3:13:ee:5c:e8:61:6a:10:
8d:46:86:17:8e:51:d6:6f:0f:14:8f:fe:b5:d5:3b:
9e:70:bf:ea:57:41:af:4b:2a:17:99:d5:2b:11:15:
c0:4f:cc:6e:cd:4f:a0:18:94:a3:be:af:80:c3:1a:
4e:56:7b:7e:f2:53:de:86:9f:ea:cb:6a:e0:79:ce:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D0:0D:16:31:85:61:85:B3:04:04:38:16:9C:EB:94:94:B2:19:EF
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/AtANFjGFYYWzBAQ4FpzrlJSyGe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.210.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:99:8d:ca:e2:c7:81:a5:9e:6b:02:56:cc:69:34:a6:55:10:
fd:9e:d0:dc:20:ce:06:62:86:40:d3:57:72:96:a9:76:38:49:
47:c4:8f:cd:28:88:33:b2:4b:a4:34:4f:48:f9:c6:44:8a:2c:
cb:05:e6:70:9c:54:20:bf:8f:59:e0:80:b0:44:4d:1a:de:be:
f6:dc:88:0b:d1:17:e8:d1:99:04:8d:61:fc:d9:06:dd:a3:0c:
c5:7a:39:8a:3b:09:e2:5c:23:95:21:3c:ea:bc:ce:31:b5:2c:
a9:04:e4:56:ed:5e:56:19:a0:b4:9a:38:3b:33:e4:a1:d1:31:
aa:fb:e9:2c:a8:59:8f:fa:6a:f8:8c:3e:fe:d1:ff:93:28:9d:
3f:3e:d7:a9:29:51:63:cf:6a:94:d5:08:ff:7f:55:c2:75:14:
9c:44:ad:90:52:0c:b3:a5:52:cd:42:11:6f:c6:cb:65:b7:9e:
e4:f1:d6:48:13:b9:2a:57:9c:a4:80:19:cb:bd:9a:cc:57:34:
b1:1c:d8:13:ca:3f:3a:c8:0a:91:0e:17:d3:53:c2:49:23:83:
d8:d8:cb:b7:fe:d4:a7:82:37:81:f2:3b:4c:2f:13:31:d2:6b:
52:4f:f4:96:e0:8b:58:dc:97:de:d0:98:28:44:fb:c8:60:89:
eb:3c:6a:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTXThbPfne9BXm4XrgFzQG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMjA1MTgxMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmQwMGQxNjMxODU2MTg1YjMwNDA0MzgxNjljZWI5NDk0YjIxOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXxeDJdvduC5jtOjXXPPIOO/wS8T
Zzc0EH0/gX7Mgp2X5SznW/j6BUsSlplycLhJ4AQJBEH066J3XVxO41NeC1Puy9Gn
mH7XljoVUgIo+KvbOq7gUZ7Ll8sjddtWUJMgZ5zkGD3uTCAmaj7Es18+JY/E+9qG
p1eZy7vQi3H45JfXLGo+1rq+Yab5i1Qdbt/eWnEvraTA6uAmYHhi1WUi25r8tBuJ
tKSjkm6Ssz9jcHqDsnEnekOCzY64oxPuXOhhahCNRoYXjlHWbw8Uj/611TuecL/q
V0GvSyoXmdUrERXAT8xuzU+gGJSjvq+AwxpOVnt+8lPehp/qy2rgec6ZuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALQDRYxhWGFswQEOBac65SUshnvMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvQXRBTkZqR0ZZWVd6QkFRNEZwenJsSlN5R2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwo/SMA0G
CSqGSIb3DQEBCwUAA4IBAQBumY3K4seBpZ5rAlbMaTSmVRD9ntDcIM4GYoZA01dy
lql2OElHxI/NKIgzskukNE9I+cZEiizLBeZwnFQgv49Z4ICwRE0a3r723IgL0Rfo
0ZkEjWH82QbdowzFejmKOwniXCOVITzqvM4xtSypBORW7V5WGaC0mjg7M+Sh0TGq
++ksqFmP+mr4jD7+0f+TKJ0/PtepKVFjz2qU1Qj/f1XCdRScRK2QUgyzpVLNQhFv
xstlt57k8dZIE7kqV5ykgBnLvZrMVzSxHNgTyj86yAqRDhfTU8JJI4PY2Mu3/tSn
gjeB8jtMLxMx0mtST/SW4ItY3Jfe0JgoRPvIYInrPGrY
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:57:24 2025 by rpki-client