Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/o98lrlIHQ-qbBFodtQZeWX-Q0OE.roa
File: o98lrlIHQ-qbBFodtQZeWX-Q0OE.roa (raw, json)
Hash identifier: HBKex0zzWw1+2msjbncz7z4UkKpSGnjzxvO/aJVe42g=
Subject key identifier: A3:DF:25:AE:52:07:43:EA:9B:04:5A:1D:B5:06:5E:59:7F:90:D0:E1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC802037D97082BE80CF544F0FA7E074C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/o98lrlIHQ-qbBFodtQZeWX-Q0OE.roa
Signing time: Tue 02 Jan 2024 02:30:24 +0000
ROA not before: Tue 02 Jan 2024 02:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25515
IP address blocks: 217.107.96.0/21 maxlen: 21
217.107.104.0/23 maxlen: 23
185.141.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:03:7d:97:08:2b:e8:0c:f5:44:f0:fa:7e:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3df25ae520743ea9b045a1db5065e597f90d0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:0e:82:a6:05:80:f0:46:e1:19:e6:eb:a7:
29:47:77:7a:77:02:cf:48:0c:cc:a4:06:9f:e2:d5:
05:c6:fc:10:30:f0:c4:ac:37:1c:97:c9:9e:2a:f4:
2e:81:4b:91:b5:93:56:af:1a:03:14:6e:df:81:cb:
f7:ab:7a:e8:96:e6:b8:50:1c:c2:ca:92:ce:2b:9f:
10:81:f2:bd:4c:57:a2:1d:cc:78:79:25:72:36:8f:
f0:e8:4e:d4:a8:48:b2:73:32:00:cf:c3:2c:83:62:
2a:54:0a:13:53:7c:5d:e7:12:a7:87:3e:6f:59:83:
89:ed:9e:23:b8:24:91:01:e2:3f:b0:ef:86:03:a7:
ee:c9:f1:48:a8:64:ff:98:59:a5:2d:39:0e:77:f9:
7b:31:b1:0d:87:3d:65:67:3b:af:62:cb:19:23:54:
2d:5c:e4:f9:f9:31:74:22:49:59:8a:da:4a:70:f3:
97:7b:62:14:f0:d2:6d:b5:31:91:14:e9:82:ae:1d:
1e:5e:81:c5:53:db:21:95:36:37:23:65:89:7f:46:
58:7e:b3:86:a6:5c:bb:78:02:06:68:56:0b:8c:ea:
cf:b4:ab:e5:2a:fb:c4:8d:03:6f:a7:b7:30:b4:86:
d2:6a:a4:19:be:cb:30:05:e3:1b:c7:ed:db:1f:d8:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:25:AE:52:07:43:EA:9B:04:5A:1D:B5:06:5E:59:7F:90:D0:E1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/o98lrlIHQ-qbBFodtQZeWX-Q0OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.236.0/23
217.107.96.0-217.107.105.255
Signature Algorithm: sha256WithRSAEncryption
3c:d2:50:fd:94:9b:51:52:73:dc:f5:04:f8:2e:54:13:cb:ea:
27:df:b8:8c:bf:11:89:b2:6c:ac:2f:26:e4:11:7e:da:cd:5e:
4a:18:e0:c3:d7:36:8e:e3:a7:89:f3:d4:4e:13:a7:35:59:27:
94:95:d5:c5:53:49:d9:e8:a9:c1:49:8f:aa:ca:a5:dc:7e:fc:
2a:a2:92:ee:76:40:24:e9:45:0d:9a:6c:dc:96:4b:6d:a3:d4:
09:cd:02:7c:3b:3d:35:e8:a7:34:37:2e:69:2f:c2:43:5e:7b:
f6:75:44:41:17:9b:e4:9f:45:11:f0:88:48:f2:e6:32:3e:52:
aa:fe:db:f4:67:20:2c:a7:72:c3:9a:2d:93:0b:e7:da:51:be:
60:44:8f:6d:72:c8:2f:88:6a:09:39:9a:82:ff:af:07:6f:a4:
4d:5b:ef:c1:f3:ab:f3:40:0f:70:a5:dd:16:82:04:85:dd:37:
04:ef:cd:6e:06:a2:34:a2:c4:6a:b6:7b:8b:b9:26:9a:27:c6:
44:87:50:3c:1b:55:ed:02:4f:de:80:c2:27:d0:24:17:76:4e:
6e:b6:2f:1e:29:98:7c:b7:a2:00:a8:1b:e8:f2:04:4c:7a:83:
9f:17:a2:9f:94:48:a7:cf:13:45:ca:73:b1:d8:75:b7:5f:0c:
a4:87:6d:ba
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzIAgN9lwgr6Az1RPD6fgdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwMTAyMDIzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2RmMjVhZTUyMDc0M2VhOWIwNDVhMWRiNTA2NWU1OTdmOTBkMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D4OgqYFgPBG4Rnm66cpR3d6dwLP
SAzMpAaf4tUFxvwQMPDErDccl8meKvQugUuRtZNWrxoDFG7fgcv3q3rolua4UBzC
ypLOK58QgfK9TFeiHcx4eSVyNo/w6E7UqEiyczIAz8Msg2IqVAoTU3xd5xKnhz5v
WYOJ7Z4juCSRAeI/sO+GA6fuyfFIqGT/mFmlLTkOd/l7MbENhz1lZzuvYssZI1Qt
XOT5+TF0IklZitpKcPOXe2IU8NJttTGRFOmCrh0eXoHFU9shlTY3I2WJf0ZYfrOG
ply7eAIGaFYLjOrPtKvlKvvEjQNvp7cwtIbSaqQZvsswBeMbx+3bH9i0DwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKPfJa5SB0PqmwRaHbUGXll/kNDhMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvbzk4bHJsSUhRLXFiQkZvZHRRWmVXWC1RME9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBuY3sMAwD
BAXZa2ADBAHZa2gwDQYJKoZIhvcNAQELBQADggEBADzSUP2Um1FSc9z1BPguVBPL
6iffuIy/EYmybKwvJuQRftrNXkoY4MPXNo7jp4nz1E4TpzVZJ5SV1cVTSdnoqcFJ
j6rKpdx+/Cqiku52QCTpRQ2abNyWS22j1AnNAnw7PTXopzQ3LmkvwkNee/Z1REEX
m+SfRRHwiEjy5jI+Uqr+2/RnICyncsOaLZML59pRvmBEj21yyC+Iagk5moL/rwdv
pE1b78Hzq/NAD3Cl3RaCBIXdNwTvzW4GojSixGq2e4u5JponxkSHUDwbVe0CT96A
wifQJBd2Tm62Lx4pmHy3ogCoG+jyBEx6g58Xop+USKfPE0XKc7HYdbdfDKSHbbo=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:43:23 2025 by rpki-client