Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/Du4l9ps-EMCCopYCYEKnT97OLZY.roa
File: Du4l9ps-EMCCopYCYEKnT97OLZY.roa (raw, json)
Hash identifier: WNXMpvO/X3kCJr7D0BJ8e2UV6rtmVp4srG1QHQ5J40U=
Subject key identifier: 0E:EE:25:F6:9B:3E:10:C0:82:A2:96:02:60:42:A7:4F:DE:CE:2D:96
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 018CC5DC83DE3D7FFFC91C12E1F64443B27E
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/Du4l9ps-EMCCopYCYEKnT97OLZY.roa
Signing time: Mon 01 Jan 2024 16:30:12 +0000
ROA not before: Mon 01 Jan 2024 16:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201099
IP address blocks: 193.111.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:83:de:3d:7f:ff:c9:1c:12:e1:f6:44:43:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eee25f69b3e10c082a296026042a74fdece2d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:66:56:f6:e7:db:a2:16:24:27:72:fa:ed:
8e:33:4d:c9:44:63:ad:72:aa:fc:73:34:ad:00:16:
3d:a3:d7:41:08:80:6d:a1:48:65:1b:9c:7b:08:e5:
0b:92:9d:39:b3:96:29:5e:ab:9e:33:03:7e:cc:d5:
2b:2d:b4:75:a9:da:93:a5:9d:45:f6:23:22:3c:fb:
54:25:8f:40:f7:7d:bc:ef:b0:16:6d:07:aa:60:6c:
d1:fb:f1:13:bf:b6:8d:5c:f7:57:65:6b:0b:e2:fb:
55:ff:9e:29:b0:e8:95:d2:8d:91:a8:ed:94:2c:21:
8f:7e:7a:6c:7c:1f:fb:75:c1:98:d4:43:cc:37:aa:
89:cd:66:56:23:7f:22:9c:58:95:9b:4f:70:7b:3c:
54:07:d9:8d:50:4a:3b:8a:35:0a:a5:bd:d8:c0:63:
31:73:eb:93:a7:06:50:10:c7:d4:c2:fb:1c:7b:6b:
ed:73:fb:d6:a2:34:07:53:09:d2:60:59:70:bb:7d:
bc:50:9a:4a:59:6a:8f:4c:c8:59:97:5e:51:cf:1c:
b3:c6:9e:92:7c:0e:d7:22:bf:d8:27:62:8e:87:2e:
af:37:dd:ff:fa:d9:5b:62:29:35:fb:cd:2e:2f:38:
b5:f8:ad:d6:05:0f:f7:3c:3a:67:9d:bc:26:6f:d9:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:25:F6:9B:3E:10:C0:82:A2:96:02:60:42:A7:4F:DE:CE:2D:96
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/Du4l9ps-EMCCopYCYEKnT97OLZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.66.0/23
Signature Algorithm: sha256WithRSAEncryption
84:f7:1a:9e:c0:c5:bc:8f:dd:e8:c3:e2:58:ae:a5:9e:89:a2:
60:5d:6e:02:89:3a:2a:12:49:f7:6a:92:bb:6b:7a:72:d4:e2:
5f:84:f6:51:35:31:02:55:1e:e1:9b:9c:d0:28:60:9e:fd:e9:
16:f8:3d:0a:51:86:91:c4:9d:f3:74:8e:78:08:15:0f:e3:1c:
54:50:b8:a7:e9:ec:ab:0e:11:77:fd:9f:b3:af:26:7d:21:04:
2f:a9:4a:50:9f:e1:c6:62:c4:a2:6e:d4:64:ac:83:c4:c4:dc:
0e:41:fe:c6:43:55:73:dc:83:75:e9:17:03:d3:e3:02:5f:9a:
c5:f5:a5:80:b0:b0:f3:ec:bc:8b:4c:43:5e:41:a3:cc:96:8d:
53:4e:0e:fa:8c:ec:66:07:26:48:55:15:2c:5c:70:24:16:6d:
61:18:25:db:78:68:e4:26:3d:c6:84:c0:a5:9b:37:01:47:ce:
f7:17:9b:1f:04:d7:e6:7f:77:e3:aa:42:de:b0:7e:75:5a:af:
84:89:60:42:d3:29:b2:04:47:0c:ac:c9:f8:8e:fc:45:eb:ff:
5c:10:00:85:e2:a4:b7:dc:af:52:f4:64:34:ab:04:d5:0a:50:
f3:18:c4:46:e3:ab:f5:9a:63:17:46:23:ce:65:39:a8:79:11:
20:46:74:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3IPePX//yRwS4fZEQ7J+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjQwMTAxMTYzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWVlMjVmNjliM2UxMGMwODJhMjk2MDI2MDQyYTc0ZmRlY2UyZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgFmVvbn26IWJCdy+u2OM03JRGOt
cqr8czStABY9o9dBCIBtoUhlG5x7COULkp05s5YpXqueMwN+zNUrLbR1qdqTpZ1F
9iMiPPtUJY9A932877AWbQeqYGzR+/ETv7aNXPdXZWsL4vtV/54psOiV0o2RqO2U
LCGPfnpsfB/7dcGY1EPMN6qJzWZWI38inFiVm09wezxUB9mNUEo7ijUKpb3YwGMx
c+uTpwZQEMfUwvsce2vtc/vWojQHUwnSYFlwu328UJpKWWqPTMhZl15Rzxyzxp6S
fA7XIr/YJ2KOhy6vN93/+tlbYik1+80uLzi1+K3WBQ/3PDpnnbwmb9l9eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7uJfabPhDAgqKWAmBCp0/ezi2WMB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvRHU0bDlwcy1FTUNDb3BZQ1lFS25UOTdPTFpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW9CMA0G
CSqGSIb3DQEBCwUAA4IBAQCE9xqewMW8j93ow+JYrqWeiaJgXW4CiToqEkn3apK7
a3py1OJfhPZRNTECVR7hm5zQKGCe/ekW+D0KUYaRxJ3zdI54CBUP4xxUULin6eyr
DhF3/Z+zryZ9IQQvqUpQn+HGYsSibtRkrIPExNwOQf7GQ1Vz3IN16RcD0+MCX5rF
9aWAsLDz7LyLTENeQaPMlo1TTg76jOxmByZIVRUsXHAkFm1hGCXbeGjkJj3GhMCl
mzcBR873F5sfBNfmf3fjqkLesH51Wq+EiWBC0ymyBEcMrMn4jvxF6/9cEACF4qS3
3K9S9GQ0qwTVClDzGMRG46v1mmMXRiPOZTmoeREgRnSr
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:49 2025 by rpki-client