Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/f2fQlTveqHJceEBrI074elO0Uy8.roa
File: f2fQlTveqHJceEBrI074elO0Uy8.roa (raw, json)
Hash identifier: dAj/qCvJBclZE/+D64mjeSEwvVBnFfbPp98laacyrqA=
Subject key identifier: 7F:67:D0:95:3B:DE:A8:72:5C:78:40:6B:23:4E:F8:7A:53:B4:53:2F
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 018CC3B7404420C570355FE52C03010EB894
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/f2fQlTveqHJceEBrI074elO0Uy8.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208344
IP address blocks: 194.110.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:40:44:20:c5:70:35:5f:e5:2c:03:01:0e:b8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f67d0953bdea8725c78406b234ef87a53b4532f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:72:2f:31:21:71:4d:d4:47:05:aa:5a:2d:
87:8d:8d:a0:d4:06:6c:bf:ff:e0:f7:c3:e8:55:0f:
4e:1a:78:65:c9:5d:13:30:ac:96:31:ac:6f:be:d2:
ab:6c:f5:4f:9e:df:5b:ff:b4:ad:05:78:72:d3:98:
31:c7:74:5f:1b:d6:2f:d3:92:d5:89:f0:a2:e1:7c:
d2:d8:77:9d:ac:9f:b2:05:a3:28:1c:1e:2f:60:cc:
e5:71:93:25:5f:2c:52:8c:68:5b:fa:c2:49:c0:b8:
3e:f8:97:87:9f:6e:78:ec:5b:a1:9f:a9:ef:d1:1f:
b7:d8:85:e1:d2:2e:1a:cd:d7:b6:d2:8e:11:ac:c5:
7f:17:a8:d8:f8:43:19:e2:c2:be:e7:73:54:75:22:
85:3f:0b:ee:70:76:af:d2:2f:ba:1e:8c:30:bb:13:
d9:27:ab:f2:9d:1d:0c:5c:7f:ff:38:40:69:cd:48:
19:9f:60:70:0f:f2:6c:2d:fd:d2:20:92:e1:01:e2:
16:31:87:4f:d5:a6:fe:7c:b2:dc:38:8b:d5:ad:40:
1a:7c:5c:ea:6e:fe:18:2b:ba:e1:6b:a6:f3:d3:45:
89:e7:8b:46:96:e9:68:75:11:b2:c5:cd:34:dc:d1:
e0:0f:4d:02:e4:57:48:86:51:9d:30:dd:bc:67:ef:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:D0:95:3B:DE:A8:72:5C:78:40:6B:23:4E:F8:7A:53:B4:53:2F
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/f2fQlTveqHJceEBrI074elO0Uy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.221.0/24
Signature Algorithm: sha256WithRSAEncryption
80:66:86:b7:8c:47:61:a2:4c:a7:fa:96:eb:03:27:13:60:41:
cd:44:2e:a2:45:72:55:50:6b:e7:a9:b1:48:ae:2a:3d:33:b9:
42:ca:2a:d9:06:b3:27:d1:c2:a4:f3:db:b5:0c:ae:c5:13:d1:
ae:8a:79:64:7d:c1:6c:ce:3a:f3:5e:a7:3a:26:28:e7:f5:e8:
73:54:01:b4:3c:3a:a4:75:f5:73:8c:8d:60:2c:42:31:1b:40:
34:7b:a2:55:26:dd:36:27:ec:f4:0c:98:39:29:eb:97:55:3e:
84:ae:07:a3:4a:2c:c3:86:46:00:3b:96:26:22:fa:55:87:0c:
42:5a:56:14:f5:c2:75:a7:92:22:49:05:ab:27:bb:f8:aa:08:
00:4d:26:4c:87:e2:d1:5e:20:74:e6:52:f5:a4:43:9d:88:96:
c5:27:87:e8:ae:db:a1:6f:27:60:10:d3:3e:46:3c:f1:d8:63:
06:fb:93:a8:e3:50:63:f2:28:70:e4:1a:d5:af:66:67:60:09:
f7:11:75:22:d2:5a:e9:71:44:f0:d5:bd:1e:58:2f:0c:67:8b:
6c:6f:09:d5:78:09:5e:84:b5:94:40:90:2b:fa:5f:ae:d0:54:
3d:bb:1a:7a:15:88:f3:67:e3:4e:3d:c3:a9:aa:bf:6f:ae:af:
37:fb:b9:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDt0BEIMVwNV/lLAMBDriUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YmUwNzY3MGMyYzlhMmFlMDI3ODEzMWFhMjljZjNjZTdh
NWFhYTMwHhcNMjQwMTAxMDYzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjY3ZDA5NTNiZGVhODcyNWM3ODQwNmIyMzRlZjg3YTUzYjQ1MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzddyLzEhcU3URwWqWi2HjY2g1AZs
v//g98PoVQ9OGnhlyV0TMKyWMaxvvtKrbPVPnt9b/7StBXhy05gxx3RfG9Yv05LV
ifCi4XzS2HedrJ+yBaMoHB4vYMzlcZMlXyxSjGhb+sJJwLg++JeHn2547Fuhn6nv
0R+32IXh0i4azde20o4RrMV/F6jY+EMZ4sK+53NUdSKFPwvucHav0i+6HowwuxPZ
J6vynR0MXH//OEBpzUgZn2BwD/JsLf3SIJLhAeIWMYdP1ab+fLLcOIvVrUAafFzq
bv4YK7rha6bz00WJ54tGlulodRGyxc003NHgD00C5FdIhlGdMN28Z+98sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9n0JU73qhyXHhAayNO+HpTtFMvMB8GA1UdIwQY
MBaAFNW+B2cMLJoq4CeBMaopzzznpaqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYt
OWFkYTIzNzhhOWEwLzEvZjJmUWxUdmVxSEpjZUVCckkwNzRlbE8wVXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2MzY2UtZWM4MS00NWVkLTg2ZTYtOWFkYTIzNzhhOWEw
LzEvMWI0SFp3d3NtaXJnSjRFeHFpblBQT2VscXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7dMA0G
CSqGSIb3DQEBCwUAA4IBAQCAZoa3jEdhokyn+pbrAycTYEHNRC6iRXJVUGvnqbFI
rio9M7lCyirZBrMn0cKk89u1DK7FE9GuinlkfcFszjrzXqc6Jijn9ehzVAG0PDqk
dfVzjI1gLEIxG0A0e6JVJt02J+z0DJg5KeuXVT6ErgejSizDhkYAO5YmIvpVhwxC
WlYU9cJ1p5IiSQWrJ7v4qggATSZMh+LRXiB05lL1pEOdiJbFJ4fortuhbydgENM+
Rjzx2GMG+5Oo41Bj8ihw5BrVr2ZnYAn3EXUi0lrpcUTw1b0eWC8MZ4tsbwnVeAle
hLWUQJAr+l+u0FQ9uxp6FYjzZ+NOPcOpqr9vrq83+7kp
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:14 2025 by rpki-client