Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_KlDZ4TuXO-KOBkFlkASwUYtfGE.roa
File: _KlDZ4TuXO-KOBkFlkASwUYtfGE.roa (raw, json)
Hash identifier: +/cfVvdb7yqQSbCQyOY8hoIVEkVORvJkD9pxlV4Dm1U=
Subject key identifier: FC:A9:43:67:84:EE:5C:EF:8A:38:19:05:96:40:12:C1:46:2D:7C:61
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E850F21F971D6E71EE3BD70338FA5BFDC
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_KlDZ4TuXO-KOBkFlkASwUYtfGE.roa
Signing time: Thu 28 Mar 2024 12:35:45 +0000
ROA not before: Thu 28 Mar 2024 12:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8568
IP address blocks: 195.166.160.0/20 maxlen: 20
195.166.160.0/24 maxlen: 24
195.166.163.0/24 maxlen: 24
195.166.176.0/21 maxlen: 24
195.166.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 04:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:0f:21:f9:71:d6:e7:1e:e3:bd:70:33:8f:a5:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 28 12:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fca9436784ee5cef8a381905964012c1462d7c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:d5:8d:ae:75:bf:e2:83:59:57:d7:54:aa:
65:8e:12:cb:47:17:f6:52:dc:6d:e9:2a:d5:7d:32:
1d:47:6a:36:ca:c2:a9:16:64:1f:52:8e:16:56:01:
25:f2:26:47:56:23:a2:6f:b1:71:c8:91:25:f0:cd:
9d:1c:c1:c8:78:ab:2a:e0:62:70:d0:00:b2:60:5d:
60:67:79:55:0b:bb:d0:7b:62:43:d8:60:8b:7f:7c:
f9:89:2b:9b:25:59:e9:8b:56:12:3b:61:d2:14:12:
3a:6d:1f:e2:a0:2b:2c:ff:db:d0:c7:8c:15:d6:71:
a4:be:f3:76:79:46:dd:5f:5f:ca:07:90:27:a9:c1:
cf:05:5e:04:6f:46:83:4d:c8:90:2b:48:85:10:b3:
c1:6c:1a:10:ad:1d:0e:42:5e:fa:d9:49:0f:3c:77:
06:8d:7f:93:0c:07:9b:c2:be:f3:ab:1c:29:2c:bc:
e0:c5:a7:a3:db:da:8c:4e:00:af:8a:af:71:78:1b:
e9:95:5d:d8:49:07:bd:a4:dd:e2:f9:f6:f1:0d:a1:
41:b5:6f:b5:8f:61:01:2e:a3:20:fb:2e:8a:1f:b3:
8b:a3:c7:ff:76:61:19:b6:98:ec:63:30:29:20:d9:
11:34:28:c8:a0:11:54:00:b3:b8:04:fa:3c:d7:ad:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A9:43:67:84:EE:5C:EF:8A:38:19:05:96:40:12:C1:46:2D:7C:61
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_KlDZ4TuXO-KOBkFlkASwUYtfGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.166.160.0-195.166.183.255
Signature Algorithm: sha256WithRSAEncryption
00:b0:06:81:4e:6b:51:fb:c8:cc:b0:fa:ca:b4:d5:3b:56:0c:
69:f6:a2:be:f9:3d:6a:a5:04:3c:ce:d3:7a:db:b9:64:46:35:
45:b4:ef:22:f8:21:72:af:17:47:24:37:f5:d1:5d:2c:ac:36:
cd:74:9d:63:a3:1e:19:36:08:ba:d7:78:5e:41:70:e3:04:2a:
fa:a6:e0:84:87:08:16:54:28:01:55:62:af:14:97:ec:99:32:
97:ec:d4:ad:48:52:4c:11:66:fe:9f:3c:8e:b3:ef:29:ae:ae:
89:59:23:67:8b:90:6d:dd:32:05:85:fb:5c:44:3e:7b:9d:5a:
ef:bd:08:39:9a:c7:09:68:48:2d:55:6d:ca:59:8e:96:b0:1f:
e0:9d:92:a1:5d:a6:e9:d4:d5:28:9b:bb:06:e5:bc:0b:f3:67:
e9:8d:67:b5:97:d7:bd:e3:18:9a:ee:7b:5c:0d:dc:f8:88:14:
4e:56:2b:5e:c9:73:96:80:71:63:90:ee:94:6b:dc:e6:36:14:
26:18:d0:36:29:01:be:49:f1:c5:db:56:29:ee:ae:53:05:9c:
36:5f:07:94:4a:73:cd:43:88:29:9f:c0:7c:5b:76:04:2e:0c:
05:18:c7:75:f5:39:f4:7a:cc:be:81:5e:0a:2e:78:3a:63:ef:
7b:b1:13:f3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY6FDyH5cdbnHuO9cDOPpb/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwMzI4MTIzNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2E5NDM2Nzg0ZWU1Y2VmOGEzODE5MDU5NjQwMTJjMTQ2MmQ3YzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKnVja51v+KDWVfXVKpljhLLRxf2
Utxt6SrVfTIdR2o2ysKpFmQfUo4WVgEl8iZHViOib7FxyJEl8M2dHMHIeKsq4GJw
0ACyYF1gZ3lVC7vQe2JD2GCLf3z5iSubJVnpi1YSO2HSFBI6bR/ioCss/9vQx4wV
1nGkvvN2eUbdX1/KB5AnqcHPBV4Eb0aDTciQK0iFELPBbBoQrR0OQl762UkPPHcG
jX+TDAebwr7zqxwpLLzgxaej29qMTgCviq9xeBvplV3YSQe9pN3i+fbxDaFBtW+1
j2EBLqMg+y6KH7OLo8f/dmEZtpjsYzApINkRNCjIoBFUALO4BPo8163b9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPypQ2eE7lzvijgZBZZAEsFGLXxhMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvX0tsRFo0VHVYTy1LT0JrRmxrQVN3VVl0ZkdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXDpqAD
BAPDprAwDQYJKoZIhvcNAQELBQADggEBAACwBoFOa1H7yMyw+sq01TtWDGn2or75
PWqlBDzO03rbuWRGNUW07yL4IXKvF0ckN/XRXSysNs10nWOjHhk2CLrXeF5BcOME
Kvqm4ISHCBZUKAFVYq8Ul+yZMpfs1K1IUkwRZv6fPI6z7ymurolZI2eLkG3dMgWF
+1xEPnudWu+9CDmaxwloSC1VbcpZjpawH+CdkqFdpunU1SibuwblvAvzZ+mNZ7WX
173jGJrue1wN3PiIFE5WK17Jc5aAcWOQ7pRr3OY2FCYY0DYpAb5J8cXbVinurlMF
nDZfB5RKc81DiCmfwHxbdgQuDAUYx3X1OfR6zL6BXgoueDpj73uxE/M=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:17:38 2025 by rpki-client