Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7ZuShgrjiXurwz3mpK8ToAR6Vzg.roa
File: 7ZuShgrjiXurwz3mpK8ToAR6Vzg.roa (raw, json)
Hash identifier: GTx81FjcFrwemg86MYQ4sjVyOTh/owsvaYNScOwY0d0=
Subject key identifier: ED:9B:92:86:0A:E3:89:7B:AB:C3:3D:E6:A4:AF:13:A0:04:7A:57:38
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018D80FAC9A8B9939214E61703F03A25D5AB
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7ZuShgrjiXurwz3mpK8ToAR6Vzg.roa
Signing time: Wed 07 Feb 2024 00:32:15 +0000
ROA not before: Wed 07 Feb 2024 00:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51628
IP address blocks: 192.145.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 03:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:80:fa:c9:a8:b9:93:92:14:e6:17:03:f0:3a:25:d5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 7 00:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed9b92860ae3897babc33de6a4af13a0047a5738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:a3:6a:d1:c0:ee:e8:3d:e5:37:6c:8a:24:
6f:f2:d1:2d:73:c3:f2:39:5b:37:c7:22:46:eb:9c:
90:ee:d7:78:3f:9f:7e:f4:13:78:61:21:72:ff:e3:
0a:43:09:62:f6:98:a2:a6:af:09:96:71:55:e4:35:
47:c2:2c:4e:b4:78:b2:b9:c8:c8:11:e1:74:7c:0b:
8f:31:65:3d:04:23:85:f0:1f:4d:f0:11:ad:ac:d4:
fa:30:b1:0a:2a:78:1a:e9:43:6b:3f:4a:f0:0d:22:
89:e9:18:42:dd:61:d9:ef:fa:35:c9:b5:63:bf:7a:
a1:00:bf:dc:a2:83:a1:7d:9d:b5:f1:a8:16:a5:b5:
6b:77:eb:2b:02:8b:51:89:b8:c2:ad:ce:b9:60:9f:
03:d7:c2:1e:ec:e9:62:55:8e:fd:38:16:7e:a2:8f:
38:7a:f7:c5:6f:c6:80:14:54:f4:7e:fb:2c:57:85:
ee:e8:7a:23:75:67:90:24:8e:9f:e3:64:32:45:7b:
cc:59:a0:c1:ad:d4:64:df:5a:c4:1a:1c:c5:43:2a:
36:34:8b:11:eb:60:f9:78:48:dd:2d:1e:f9:e3:12:
b9:f8:95:1e:a9:f9:03:18:00:c0:7c:01:cd:1a:25:
74:f5:3d:ae:a5:c9:83:41:48:1e:f7:2f:f6:14:36:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9B:92:86:0A:E3:89:7B:AB:C3:3D:E6:A4:AF:13:A0:04:7A:57:38
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7ZuShgrjiXurwz3mpK8ToAR6Vzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:19:2b:4c:e9:da:93:ae:9b:00:78:13:b9:c5:f0:c3:07:a8:
a9:2c:59:58:e9:b0:01:99:16:12:00:08:61:63:9e:9d:c4:c7:
aa:77:4d:85:72:15:6a:c7:fc:a7:39:b4:22:99:6f:e9:85:b0:
66:11:33:95:e8:db:27:ae:7c:71:a9:9c:3d:02:c3:53:99:c7:
1e:83:03:0a:8e:61:90:bf:a5:16:19:bd:24:98:81:0b:54:26:
a2:e3:bc:ff:8a:f8:84:0f:f3:ba:d3:c5:cf:fa:48:e8:a0:e4:
3f:d1:24:e7:54:5d:e7:8e:46:e4:e8:24:85:9d:ed:e6:85:2b:
84:49:b5:7f:47:50:31:80:9d:37:e9:15:29:3a:bf:07:ed:14:
c6:3a:1b:68:70:15:7c:10:f9:bb:ed:cf:6e:a2:91:8a:07:46:
45:36:9b:7a:6e:a2:18:b6:a4:ff:ec:23:0f:83:97:f4:c2:3b:
e4:0d:ff:e3:42:04:ff:fb:59:85:a0:0e:9a:6b:df:dd:9e:d8:
e3:9c:a4:5b:a2:a0:9d:2e:26:ce:ba:ab:06:f7:bb:2a:d8:70:
aa:68:c5:79:0c:e3:5e:41:9a:d1:7c:61:3e:27:04:62:9c:9f:
1f:47:ad:be:75:02:a9:8b:35:85:b1:db:68:9c:f8:9c:e6:8b:
6d:79:3b:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2A+smouZOSFOYXA/A6JdWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQwMjA3MDAzMjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDliOTI4NjBhZTM4OTdiYWJjMzNkZTZhNGFmMTNhMDA0N2E1NzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxqjatHA7ug95TdsiiRv8tEtc8Py
OVs3xyJG65yQ7td4P59+9BN4YSFy/+MKQwli9piipq8JlnFV5DVHwixOtHiyucjI
EeF0fAuPMWU9BCOF8B9N8BGtrNT6MLEKKnga6UNrP0rwDSKJ6RhC3WHZ7/o1ybVj
v3qhAL/cooOhfZ218agWpbVrd+srAotRibjCrc65YJ8D18Ie7OliVY79OBZ+oo84
evfFb8aAFFT0fvssV4Xu6HojdWeQJI6f42QyRXvMWaDBrdRk31rEGhzFQyo2NIsR
62D5eEjdLR754xK5+JUeqfkDGADAfAHNGiV09T2upcmDQUge9y/2FDYszwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2bkoYK44l7q8M95qSvE6AEelc4MB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvN1p1U2hncmppWHVyd3ozbXBLOFRvQVI2VnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJFjMA0G
CSqGSIb3DQEBCwUAA4IBAQBPGStM6dqTrpsAeBO5xfDDB6ipLFlY6bABmRYSAAhh
Y56dxMeqd02FchVqx/ynObQimW/phbBmETOV6NsnrnxxqZw9AsNTmccegwMKjmGQ
v6UWGb0kmIELVCai47z/iviED/O608XP+kjooOQ/0STnVF3njkbk6CSFne3mhSuE
SbV/R1AxgJ036RUpOr8H7RTGOhtocBV8EPm77c9uopGKB0ZFNpt6bqIYtqT/7CMP
g5f0wjvkDf/jQgT/+1mFoA6aa9/dntjjnKRboqCdLibOuqsG97sq2HCqaMV5DONe
QZrRfGE+JwRinJ8fR62+dQKpizWFsdtonPic5otteTth
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:36 2025 by rpki-client