Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/XsUJz6q2mgu5GYYvhy46s3JTAYc.roa
File: XsUJz6q2mgu5GYYvhy46s3JTAYc.roa (raw, json)
Hash identifier: fEco5yjs3CTshdCds24mI3Ob6CKrcbl+s71pYpVAbPA=
Subject key identifier: 5E:C5:09:CF:AA:B6:9A:0B:B9:19:86:2F:87:2E:3A:B3:72:53:01:87
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 018CC3B74186639A77D16E3984DA1277D801
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/XsUJz6q2mgu5GYYvhy46s3JTAYc.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50204
IP address blocks: 193.106.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:41:86:63:9a:77:d1:6e:39:84:da:12:77:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ec509cfaab69a0bb919862f872e3ab372530187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:07:03:fe:18:94:52:be:a8:00:bd:b6:0f:
2e:e0:c1:22:02:a9:6a:93:d9:8b:85:19:12:0b:eb:
16:19:74:64:2f:b1:84:78:d0:5d:b2:a3:04:3f:d8:
67:50:5c:93:d1:27:a0:fe:58:e2:5e:31:98:88:4b:
25:6f:43:22:c3:a9:67:1d:68:91:f0:0d:07:19:5c:
71:5c:d7:fc:be:e0:01:d1:42:0d:4d:b2:aa:56:93:
d8:d5:e7:0f:c1:9f:bf:b4:2b:34:2a:b0:31:f3:9e:
89:7e:6e:49:b6:49:e1:f9:6a:54:04:13:ad:62:5a:
8f:18:30:ba:0b:78:48:5f:04:77:30:87:83:0c:9f:
09:55:ac:65:dc:c9:7d:6b:ab:cf:98:4c:e3:b3:2e:
5d:56:84:ac:89:2c:64:f8:27:c0:65:87:35:71:fa:
f0:84:fb:71:b2:79:ed:3e:91:cf:80:4c:d6:a5:f5:
07:d8:9d:2a:7c:62:9b:fc:58:6f:33:2a:0b:fc:e9:
76:35:a9:84:b8:05:a5:54:b6:57:42:b9:cb:d8:eb:
11:6e:cf:cd:91:be:c8:4b:d7:a7:68:e1:cf:4d:21:
53:b8:a0:b7:67:81:53:b9:98:6e:de:12:d7:10:3c:
c4:88:4f:61:5d:19:cb:8e:f2:d7:60:a8:8f:76:fc:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:09:CF:AA:B6:9A:0B:B9:19:86:2F:87:2E:3A:B3:72:53:01:87
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/XsUJz6q2mgu5GYYvhy46s3JTAYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:b5:d8:5f:da:8b:a0:ea:2a:de:86:dc:39:55:ff:4b:a2:db:
09:1d:3e:08:5e:cb:53:fe:9e:78:1e:9f:b9:52:95:c7:0c:be:
a3:ea:e5:da:f0:a4:90:4d:73:e5:c1:dc:ce:56:ea:4f:9b:a4:
0f:cc:fb:9b:80:c1:f1:14:12:07:8f:80:c4:24:c4:93:c8:97:
38:da:4f:4a:9e:3d:e6:21:b1:6f:19:78:21:12:50:d2:73:d0:
91:58:a6:47:06:0c:11:80:e8:5e:7a:cf:35:48:e4:82:b6:ba:
a6:26:82:60:04:d6:1d:a2:0e:d2:aa:f2:90:0c:2d:2c:ae:8b:
ec:b3:38:14:7a:70:f6:80:9d:21:1a:37:9f:c1:bd:a4:92:36:
0f:d4:e6:98:ac:c1:a3:dc:66:d8:0c:4f:08:ac:cd:2f:55:96:
08:ee:27:a8:8a:57:9d:67:0c:f0:2b:e5:3a:6c:97:50:ca:27:
66:fe:2f:b7:2d:a8:8a:87:ca:1c:20:cc:65:6e:a2:6f:d6:60:
96:1a:35:3e:fe:94:41:6c:02:06:35:71:8f:9b:a0:f5:e2:e1:
f8:4e:ac:7e:9c:a6:9c:4c:e6:64:bf:2e:c6:05:54:cf:46:8e:
7f:c5:16:d5:22:d1:0d:e0:c6:dc:36:ab:e7:7b:ce:47:4e:f8:
fe:bc:b4:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDt0GGY5p30W45hNoSd9gBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGNlZDNiMDlhOTA1ZWI5Njg2OWM1OGY2NmI0ZjhiNTkx
NTAzYjAwHhcNMjQwMTAxMDYzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWM1MDljZmFhYjY5YTBiYjkxOTg2MmY4NzJlM2FiMzcyNTMwMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6cHA/4YlFK+qAC9tg8u4MEiAqlq
k9mLhRkSC+sWGXRkL7GEeNBdsqMEP9hnUFyT0Seg/ljiXjGYiEslb0Miw6lnHWiR
8A0HGVxxXNf8vuAB0UINTbKqVpPY1ecPwZ+/tCs0KrAx856Jfm5Jtknh+WpUBBOt
YlqPGDC6C3hIXwR3MIeDDJ8JVaxl3Ml9a6vPmEzjsy5dVoSsiSxk+CfAZYc1cfrw
hPtxsnntPpHPgEzWpfUH2J0qfGKb/FhvMyoL/Ol2NamEuAWlVLZXQrnL2OsRbs/N
kb7IS9enaOHPTSFTuKC3Z4FTuZhu3hLXEDzEiE9hXRnLjvLXYKiPdvxmbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7FCc+qtpoLuRmGL4cuOrNyUwGHMB8GA1UdIwQY
MBaAFP+M7TsJqQXrloacWPZrT4tZFQOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYt
YmU1NjFjY2RlZDJjLzEvWHNVSno2cTJtZ3U1R1lZdmh5NDZzM0pUQVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYtYmU1NjFjY2RlZDJj
LzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWrcMA0G
CSqGSIb3DQEBCwUAA4IBAQCitdhf2oug6irehtw5Vf9LotsJHT4IXstT/p54Hp+5
UpXHDL6j6uXa8KSQTXPlwdzOVupPm6QPzPubgMHxFBIHj4DEJMSTyJc42k9Knj3m
IbFvGXghElDSc9CRWKZHBgwRgOhees81SOSCtrqmJoJgBNYdog7SqvKQDC0srovs
szgUenD2gJ0hGjefwb2kkjYP1OaYrMGj3GbYDE8IrM0vVZYI7ieoiledZwzwK+U6
bJdQyidm/i+3LaiKh8ocIMxlbqJv1mCWGjU+/pRBbAIGNXGPm6D14uH4Tqx+nKac
TOZkvy7GBVTPRo5/xRbVItEN4MbcNqvne85HTvj+vLSn
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:35 2025 by rpki-client