Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/V1aAdMTQ-SApwo5HduseKDzrH9Y.roa
File: V1aAdMTQ-SApwo5HduseKDzrH9Y.roa (raw, json)
Hash identifier: +b8q42nBVNpwIeVCkZirAbwNa6bBuKoMbFw9l+V5Gz8=
Subject key identifier: 57:56:80:74:C4:D0:F9:20:29:C2:8E:47:76:EB:1E:28:3C:EB:1F:D6
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 018CC500BA31A1176EBD5CEA60C19335F90A
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/V1aAdMTQ-SApwo5HduseKDzrH9Y.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50753
IP address blocks: 109.236.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ba:31:a1:17:6e:bd:5c:ea:60:c1:93:35:f9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57568074c4d0f92029c28e4776eb1e283ceb1fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:89:b3:5a:c8:73:e8:90:1b:0b:fd:26:62:
9d:4b:a7:d3:59:d3:25:ab:dc:83:20:60:0e:cf:a1:
86:4d:bf:0b:59:57:72:50:2a:26:90:4d:38:9e:01:
25:27:6c:c5:b0:ec:f0:12:da:6a:9e:9d:44:04:b1:
4f:c4:24:28:53:54:df:27:46:c8:2f:57:2c:56:d0:
4e:88:ec:b6:1b:16:c5:c2:5d:f9:ed:53:25:85:c4:
65:74:0b:7b:25:99:2d:6d:bf:56:c9:30:87:35:fb:
ab:0b:72:7f:f6:ea:77:33:e9:1d:c2:22:69:a4:eb:
d0:21:ab:12:44:f0:a4:92:c3:03:10:5c:6d:1b:9c:
d3:3c:24:11:85:55:ba:c1:87:89:47:65:ef:93:3b:
6e:c9:1d:df:82:c3:09:cd:a5:7d:d1:ad:2c:34:2c:
0d:42:6e:0b:fb:4a:fd:33:7a:f3:f3:45:c8:9c:10:
62:8c:4b:ac:1b:8e:55:8a:c5:a9:a8:6f:27:ef:97:
3c:da:90:57:69:31:08:e0:8d:07:e0:c6:2f:d8:fd:
35:c4:05:93:09:1c:8d:b7:a6:a1:8b:29:a8:01:a0:
de:a8:9c:e3:1d:03:da:d4:81:60:33:f3:46:10:69:
9c:96:75:cc:23:1e:24:dc:28:1d:6d:57:d3:6e:96:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:56:80:74:C4:D0:F9:20:29:C2:8E:47:76:EB:1E:28:3C:EB:1F:D6
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/V1aAdMTQ-SApwo5HduseKDzrH9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.252.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:b1:bb:56:f5:8a:a8:f7:ad:76:1f:c2:7e:f6:e1:e3:35:bd:
07:17:68:1a:36:8e:0c:1e:3e:da:38:a5:ae:61:a1:5a:89:e3:
49:67:73:a6:77:da:49:ff:55:ed:3f:d2:66:c1:43:77:ca:a4:
b4:cc:3e:92:97:18:b0:24:e3:c8:51:a6:3b:5c:40:37:7f:1a:
db:bb:b1:c8:25:27:53:c0:f5:e6:66:04:d6:fd:ae:cd:16:8e:
f4:ea:ec:61:50:a4:95:7c:e9:33:2b:9f:bb:57:dc:8f:84:92:
e1:b4:2a:e0:03:be:32:5f:d4:e8:67:00:f6:b2:6b:e2:06:67:
bf:77:93:73:1b:dd:ad:5e:bf:b2:36:60:51:25:53:14:87:2c:
df:67:c1:cf:a9:3e:22:ab:66:10:67:c6:2e:46:04:e1:9b:55:
c4:8e:af:c5:e4:ad:41:d9:ed:74:af:ad:61:1b:6a:a8:7e:58:
73:af:b5:c5:21:ce:d3:78:15:b2:dc:b9:80:62:a7:b5:a0:fa:
22:4d:d4:4c:f0:b9:80:ed:49:e7:9e:64:ef:c5:09:a2:ea:47:
eb:02:e0:de:bb:42:0e:48:f8:ca:0c:b4:46:30:13:40:11:52:
30:11:6a:c5:b2:fa:fb:de:0c:24:a2:32:5d:ba:ad:48:74:f8:
2f:41:69:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFALoxoRduvVzqYMGTNfkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4
NzU3NDgwHhcNMjQwMTAxMTIzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzU2ODA3NGM0ZDBmOTIwMjljMjhlNDc3NmViMWUyODNjZWIxZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9SJs1rIc+iQGwv9JmKdS6fTWdMl
q9yDIGAOz6GGTb8LWVdyUComkE04ngElJ2zFsOzwEtpqnp1EBLFPxCQoU1TfJ0bI
L1csVtBOiOy2GxbFwl357VMlhcRldAt7JZktbb9WyTCHNfurC3J/9up3M+kdwiJp
pOvQIasSRPCkksMDEFxtG5zTPCQRhVW6wYeJR2XvkztuyR3fgsMJzaV90a0sNCwN
Qm4L+0r9M3rz80XInBBijEusG45VisWpqG8n75c82pBXaTEI4I0H4MYv2P01xAWT
CRyNt6ahiymoAaDeqJzjHQPa1IFgM/NGEGmclnXMIx4k3CgdbVfTbpbxZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdWgHTE0PkgKcKOR3brHig86x/WMB8GA1UdIwQY
MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt
N2YyMzMzNjA0OTk3LzEvVjFhQWRNVFEtU0Fwd281SGR1c2VLRHpySDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3
LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez8MA0G
CSqGSIb3DQEBCwUAA4IBAQDQsbtW9Yqo9612H8J+9uHjNb0HF2gaNo4MHj7aOKWu
YaFaieNJZ3Omd9pJ/1XtP9JmwUN3yqS0zD6SlxiwJOPIUaY7XEA3fxrbu7HIJSdT
wPXmZgTW/a7NFo706uxhUKSVfOkzK5+7V9yPhJLhtCrgA74yX9ToZwD2smviBme/
d5NzG92tXr+yNmBRJVMUhyzfZ8HPqT4iq2YQZ8YuRgThm1XEjq/F5K1B2e10r61h
G2qoflhzr7XFIc7TeBWy3LmAYqe1oPoiTdRM8LmA7UnnnmTvxQmi6kfrAuDeu0IO
SPjKDLRGMBNAEVIwEWrFsvr73gwkojJduq1IdPgvQWmU
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:08 2025 by rpki-client