Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9c_jT3VURmksJUbttgfHPn5n3Uo.roa
File: 9c_jT3VURmksJUbttgfHPn5n3Uo.roa (raw, json)
Hash identifier: ZWgTq70iQ7a3YCnvTzsnPrkVIW0Y9zvp2UOLNCsDd90=
Subject key identifier: F5:CF:E3:4F:75:54:46:69:2C:25:46:ED:B6:07:C7:3E:7E:67:DD:4A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0193B1A7769FD87ACA70E126CB68CA729E56
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9c_jT3VURmksJUbttgfHPn5n3Uo.roa
Signing time: Tue 10 Dec 2024 17:39:22 +0000
ROA not before: Tue 10 Dec 2024 17:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 94.229.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:a7:76:9f:d8:7a:ca:70:e1:26:cb:68:ca:72:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 10 17:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5cfe34f755446692c2546edb607c73e7e67dd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:4e:f1:8d:bf:c1:9f:7b:3a:1b:01:23:11:
a7:81:b9:d9:3d:cf:9f:dc:9e:1e:a7:ec:fb:39:df:
14:f7:f7:12:5e:82:26:fb:e8:70:cf:f9:da:d9:57:
d6:0c:97:48:5e:f5:5c:5a:60:1c:18:69:22:56:33:
9a:db:af:ce:38:91:bb:45:8e:75:e6:30:da:b1:2a:
1e:94:86:59:d1:ea:ba:a4:7d:b7:c7:c3:71:a6:f6:
c3:dd:38:ca:f9:49:cf:ff:58:20:a1:64:2c:b0:29:
f4:95:69:eb:42:c2:4c:97:47:ee:67:9a:9b:67:3f:
81:f7:64:09:b9:0a:1d:fe:de:b8:90:24:7e:23:f1:
db:01:6e:af:d7:39:9c:a3:10:09:f3:24:e1:49:39:
b8:e3:59:a6:dc:b0:f4:97:9e:e5:fa:f6:c9:88:3b:
ce:ac:4c:6c:12:ba:be:df:70:f6:42:63:77:66:e3:
47:0c:c2:93:0e:5d:ae:65:69:fe:ee:7f:26:c1:2b:
00:65:ee:13:70:c5:41:e9:50:4f:04:4c:ea:a6:fa:
cf:d1:f6:4a:49:ec:e9:66:47:40:ae:17:c0:40:01:
7f:f5:06:1a:5f:bc:24:87:8a:b8:15:0d:1c:20:17:
07:eb:b3:f7:d8:2a:c4:d6:b2:74:b7:93:f6:9a:a3:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:E3:4F:75:54:46:69:2C:25:46:ED:B6:07:C7:3E:7E:67:DD:4A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9c_jT3VURmksJUbttgfHPn5n3Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:eb:ed:47:cc:40:b3:04:8e:f6:67:07:5f:af:50:7d:0a:76:
04:97:0a:0b:6b:c7:49:25:9c:8a:6c:a3:d8:b5:15:79:4e:12:
8c:92:0b:6a:37:68:94:55:da:82:f3:2b:07:15:e3:dc:03:58:
d8:ad:b5:7e:1b:6f:69:ea:98:73:99:43:56:3a:c4:be:20:7e:
3d:f1:4e:01:b6:29:62:7c:36:c4:5e:51:7d:72:a7:d4:82:7f:
a0:ae:20:38:40:13:11:2b:22:7a:85:90:98:c4:ba:42:3e:75:
fa:66:85:64:aa:58:5b:1d:55:95:72:f5:fa:3e:c5:98:51:ea:
4a:b3:a5:52:57:cd:ed:4e:f6:98:af:55:8a:1e:49:95:d3:2d:
de:42:f9:55:b7:e1:45:ed:bf:d6:39:a0:8b:08:ed:2b:54:a2:
59:59:1c:62:11:0a:91:a5:ab:76:7a:79:9d:df:95:62:2a:4d:
15:38:c6:70:3b:64:2e:46:92:b9:67:a3:40:67:2c:ea:22:4f:
5e:dd:3b:e8:16:2a:b6:e9:0b:f2:8f:09:5b:55:2a:7d:58:e4:
cc:20:fb:a5:8c:2e:3a:0d:01:17:ed:78:0c:a1:7e:fe:8f:02:
e4:fd:fb:0a:55:4a:76:01:b3:e5:2f:75:6b:ba:6e:a4:cb:33:
17:75:af:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOxp3af2HrKcOEmy2jKcp5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQxMjEwMTczOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWNmZTM0Zjc1NTQ0NjY5MmMyNTQ2ZWRiNjA3YzczZTdlNjdkZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6tO8Y2/wZ97OhsBIxGngbnZPc+f
3J4ep+z7Od8U9/cSXoIm++hwz/na2VfWDJdIXvVcWmAcGGkiVjOa26/OOJG7RY51
5jDasSoelIZZ0eq6pH23x8NxpvbD3TjK+UnP/1ggoWQssCn0lWnrQsJMl0fuZ5qb
Zz+B92QJuQod/t64kCR+I/HbAW6v1zmcoxAJ8yThSTm441mm3LD0l57l+vbJiDvO
rExsErq+33D2QmN3ZuNHDMKTDl2uZWn+7n8mwSsAZe4TcMVB6VBPBEzqpvrP0fZK
SezpZkdArhfAQAF/9QYaX7wkh4q4FQ0cIBcH67P32CrE1rJ0t5P2mqPhRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXP4091VEZpLCVG7bYHxz5+Z91KMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvOWNfalQzVlVSbWtzSlVidHRnZkhQbjVuM1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuXSMA0G
CSqGSIb3DQEBCwUAA4IBAQC46+1HzECzBI72Zwdfr1B9CnYElwoLa8dJJZyKbKPY
tRV5ThKMkgtqN2iUVdqC8ysHFePcA1jYrbV+G29p6phzmUNWOsS+IH498U4Btili
fDbEXlF9cqfUgn+griA4QBMRKyJ6hZCYxLpCPnX6ZoVkqlhbHVWVcvX6PsWYUepK
s6VSV83tTvaYr1WKHkmV0y3eQvlVt+FF7b/WOaCLCO0rVKJZWRxiEQqRpat2enmd
35ViKk0VOMZwO2QuRpK5Z6NAZyzqIk9e3TvoFiq26QvyjwlbVSp9WOTMIPuljC46
DQEX7XgMoX7+jwLk/fsKVUp2AbPlL3Vrum6kyzMXda8o
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:27 2025 by rpki-client