Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/04Xr-8Ooeq8y8z5tN4rUu12opKI.roa
File: 04Xr-8Ooeq8y8z5tN4rUu12opKI.roa (raw, json)
Hash identifier: mqCT2t6xtgxkAHOtaWKHrNFULEbZcSb1AtI/VAI9iq8=
Subject key identifier: D3:85:EB:FB:C3:A8:7A:AF:32:F3:3E:6D:37:8A:D4:BB:5D:A8:A4:A2
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01945EC1910C154070520E12F4849B52A5FA
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/04Xr-8Ooeq8y8z5tN4rUu12opKI.roa
Signing time: Mon 13 Jan 2025 08:22:11 +0000
ROA not before: Mon 13 Jan 2025 08:22:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.127.156.0/23 maxlen: 24
93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 13:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:c1:91:0c:15:40:70:52:0e:12:f4:84:9b:52:a5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 13 08:22:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d385ebfbc3a87aaf32f33e6d378ad4bb5da8a4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:4f:6c:a0:8f:73:a3:5f:a6:da:a7:d1:4d:
55:ee:82:e5:c7:f6:ca:73:36:78:38:52:67:91:b0:
8c:d4:a8:0b:26:6b:a0:08:d3:d7:ea:00:2e:4d:e9:
47:4a:af:1f:f0:25:2a:5c:3e:83:56:06:c1:0f:bf:
67:a4:e1:a8:1a:16:fe:a1:a4:c7:e1:f4:76:77:1e:
6e:52:e2:39:bd:ea:8f:97:18:f7:15:a2:bd:21:1a:
14:83:a9:d9:48:84:b5:96:c0:87:1e:b7:1a:e1:f6:
03:82:32:c3:b1:6c:44:50:76:b4:62:f0:22:07:de:
52:a1:bb:cf:f7:83:b6:4b:39:37:3f:49:94:4e:a7:
5c:45:e1:02:2c:83:1d:0a:3f:a0:f5:24:58:ca:4e:
09:d6:8f:1d:d5:f6:c7:d3:d3:57:c9:ff:a2:25:f2:
7b:ac:90:88:fc:1a:84:6f:91:cb:cb:7a:c9:19:2c:
c0:1c:0e:50:60:cf:cb:82:a1:23:f2:13:ca:e7:49:
6b:9f:f0:c8:ec:44:f9:f4:4c:f4:2e:d0:6f:32:40:
f0:c2:6b:d6:a8:a6:18:f9:76:c6:75:b1:16:28:62:
0b:86:2c:9e:b2:cf:4b:01:7f:b5:0d:c6:58:84:c5:
c9:cf:2b:fb:76:df:2b:95:c7:ab:f7:65:aa:43:c0:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:EB:FB:C3:A8:7A:AF:32:F3:3E:6D:37:8A:D4:BB:5D:A8:A4:A2
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/04Xr-8Ooeq8y8z5tN4rUu12opKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.156.0/23
93.127.160.0/23
93.127.164.0/24
93.127.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:27:d4:b5:f0:82:65:5b:9e:63:fc:9b:da:87:6a:94:2e:ce:
e7:19:31:b2:41:91:e9:82:2f:b8:c0:ca:75:21:84:f7:86:70:
e0:c0:8e:28:69:1c:2c:e0:09:01:75:4a:d1:fe:e2:4a:c8:10:
32:e9:c2:ba:bb:6e:d1:25:97:cb:f5:6b:b1:02:ed:88:0e:e3:
0f:28:e7:ca:b4:e3:91:f8:7f:26:5d:a2:45:af:d2:61:ea:b9:
a5:b1:ec:ac:48:0f:21:90:52:81:7e:de:4f:9d:1f:ef:e1:c1:
53:bd:1a:9f:e4:d8:f7:b5:59:51:de:5f:d8:a1:63:22:a9:9d:
aa:d4:2a:29:1c:60:1c:be:46:cc:97:4e:f8:3c:25:d2:14:18:
1a:95:31:b4:94:e2:ac:f0:73:c8:84:03:e4:f9:d9:e0:52:cb:
ae:23:cc:4a:c5:d7:04:a8:98:fd:62:0a:60:c1:bc:b3:70:6f:
af:32:c4:eb:2d:11:7a:e1:b8:29:e1:20:a3:18:f2:1d:b7:7a:
fc:29:a0:4c:d6:24:63:fd:7e:26:cc:94:db:4c:1e:84:af:33:
c1:1a:91:7d:e6:44:67:f3:7d:4e:2f:e7:eb:c8:8d:14:6c:d4:
7e:a2:2d:93:00:b7:c6:90:7b:28:69:66:79:a4:4d:eb:0b:7c:
ff:f3:89:b1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZRewZEMFUBwUg4S9ISbUqX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwMTEzMDgyMjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzg1ZWJmYmMzYTg3YWFmMzJmMzNlNmQzNzhhZDRiYjVkYThhNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx15PbKCPc6Nfptqn0U1V7oLlx/bK
czZ4OFJnkbCM1KgLJmugCNPX6gAuTelHSq8f8CUqXD6DVgbBD79npOGoGhb+oaTH
4fR2dx5uUuI5veqPlxj3FaK9IRoUg6nZSIS1lsCHHrca4fYDgjLDsWxEUHa0YvAi
B95SobvP94O2Szk3P0mUTqdcReECLIMdCj+g9SRYyk4J1o8d1fbH09NXyf+iJfJ7
rJCI/BqEb5HLy3rJGSzAHA5QYM/LgqEj8hPK50lrn/DI7ET59Ez0LtBvMkDwwmvW
qKYY+XbGdbEWKGILhiyess9LAX+1DcZYhMXJzyv7dt8rlcer92WqQ8B//wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNOF6/vDqHqvMvM+bTeK1LtdqKSiMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvMDRYci04T29lcTh5OHo1dE40clV1MTJvcEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBXX+cAwQB
XX+gAwQAXX+kAwQAXX+4MA0GCSqGSIb3DQEBCwUAA4IBAQBKJ9S18IJlW55j/Jva
h2qULs7nGTGyQZHpgi+4wMp1IYT3hnDgwI4oaRws4AkBdUrR/uJKyBAy6cK6u27R
JZfL9WuxAu2IDuMPKOfKtOOR+H8mXaJFr9Jh6rmlseysSA8hkFKBft5PnR/v4cFT
vRqf5Nj3tVlR3l/YoWMiqZ2q1CopHGAcvkbMl074PCXSFBgalTG0lOKs8HPIhAPk
+dngUsuuI8xKxdcEqJj9YgpgwbyzcG+vMsTrLRF64bgp4SCjGPIdt3r8KaBM1iRj
/X4mzJTbTB6ErzPBGpF95kRn831OL+fryI0UbNR+oi2TALfGkHsoaWZ5pE3rC3z/
84mx
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:33:43 2025 by rpki-client