Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-rAFqn-z7kAbRB14P7-C88efq0k.roa
File: 1-rAFqn-z7kAbRB14P7-C88efq0k.roa (raw, json)
Hash identifier: 5qkEVgx7h6GS6BeYbSwDeFzHWh1aet/mBBY878W8vzE=
Subject key identifier: FA:B0:05:AA:7F:B3:EE:40:1B:44:1D:78:3F:BF:82:F3:C7:9F:AB:49
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019434F8A8D0C03820195445812FF86304EB
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-rAFqn-z7kAbRB14P7-C88efq0k.roa
Signing time: Sun 05 Jan 2025 05:38:18 +0000
ROA not before: Sun 05 Jan 2025 05:38:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 10:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:34:f8:a8:d0:c0:38:20:19:54:45:81:2f:f8:63:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 5 05:38:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab005aa7fb3ee401b441d783fbf82f3c79fab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:d0:05:31:42:6a:0c:bc:e0:71:79:81:a0:
1d:4b:05:47:44:9f:7e:24:be:ab:49:3a:fd:6a:81:
e2:46:67:dd:50:81:86:a2:ae:52:9e:51:93:67:4b:
15:43:f1:66:28:26:b2:0d:e6:2e:ed:33:09:ac:03:
4d:10:7d:34:44:ea:d9:c8:d1:67:e8:67:58:06:a6:
66:a7:9e:ca:24:a3:d8:9a:14:e0:c2:c5:cf:3e:09:
2f:7a:4f:03:0c:49:0c:99:4c:a3:7d:00:6d:08:f4:
d0:f7:32:18:7d:df:83:b7:07:ca:74:ed:61:15:12:
67:94:0e:dd:ff:79:30:9c:7a:55:ed:16:93:50:4b:
bb:5a:9b:9e:78:b4:62:50:5c:5a:8b:20:bf:b9:30:
4c:8e:b0:80:bd:ee:cb:ac:55:94:a5:43:89:51:e9:
eb:d1:5b:a3:ad:25:64:89:85:54:39:ac:24:7b:de:
73:c8:3d:80:67:7b:8c:5a:6c:56:b7:55:4b:1c:2a:
14:bb:2a:af:cc:ff:c2:ba:72:ba:fc:34:9a:8d:44:
06:b1:1d:16:a7:97:30:8e:73:3c:3a:45:c1:c7:eb:
3f:e9:0b:d1:f6:8b:98:d3:09:8e:18:5e:83:0d:1d:
6a:57:4f:f8:70:2f:0a:47:57:f0:de:43:97:72:65:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:05:AA:7F:B3:EE:40:1B:44:1D:78:3F:BF:82:F3:C7:9F:AB:49
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-rAFqn-z7kAbRB14P7-C88efq0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
37:43:6e:63:53:96:db:c8:86:2d:f0:8e:24:0e:65:37:cd:a7:
19:4e:b6:91:02:70:6a:d7:5f:95:bb:4f:11:b1:57:74:a1:07:
a2:9d:9a:79:05:41:75:30:b8:be:56:ce:58:c5:fb:be:d9:45:
f5:25:f3:7b:ef:30:c8:58:11:e3:ba:c3:45:f7:b2:ac:20:3b:
b2:b9:78:26:dc:ad:9e:57:46:d1:52:80:22:5c:9c:a1:dd:80:
bd:6b:35:d1:71:56:07:6c:04:41:2e:17:b8:94:36:00:55:49:
e5:70:bd:2d:3d:27:d3:9a:b2:b7:f6:c4:79:de:d2:87:9d:8b:
a7:8f:38:28:7b:4e:55:f6:e0:95:e0:76:d7:9f:73:92:52:9b:
e0:80:9a:11:5c:89:3d:83:84:dd:ba:9c:3b:1d:76:6e:92:87:
1a:85:c2:0c:e1:90:b6:dd:31:79:79:ff:30:34:42:bd:99:a6:
c8:8e:a1:33:c1:ad:74:f7:a0:94:73:01:aa:be:64:2b:7f:66:
f7:d9:8e:87:e5:b2:03:d3:98:c3:62:7f:69:d4:2f:db:00:aa:
0b:5e:fa:bd:dd:f1:b4:de:db:29:d3:85:ee:1b:c1:53:83:30:
fc:18:72:78:1e:73:49:20:86:1e:5c:e7:f3:88:f3:7b:eb:44:
ad:56:71:2a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQ0+KjQwDggGVRFgS/4YwTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjUwMTA1MDUzODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWIwMDVhYTdmYjNlZTQwMWI0NDFkNzgzZmJmODJmM2M3OWZhYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3/QBTFCagy84HF5gaAdSwVHRJ9+
JL6rSTr9aoHiRmfdUIGGoq5SnlGTZ0sVQ/FmKCayDeYu7TMJrANNEH00ROrZyNFn
6GdYBqZmp57KJKPYmhTgwsXPPgkvek8DDEkMmUyjfQBtCPTQ9zIYfd+DtwfKdO1h
FRJnlA7d/3kwnHpV7RaTUEu7WpueeLRiUFxaiyC/uTBMjrCAve7LrFWUpUOJUenr
0VujrSVkiYVUOawke95zyD2AZ3uMWmxWt1VLHCoUuyqvzP/CunK6/DSajUQGsR0W
p5cwjnM8OkXBx+s/6QvR9ouY0wmOGF6DDR1qV0/4cC8KR1fw3kOXcmVzTQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqwBap/s+5AG0QdeD+/gvPHn6tJMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvMS1yQUZxbi16N2tBYlJCMTRQNy1DODhlZnEway5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTcvZGI5YmYxLWUwMTktNDVhNC04NjYzLWE2Y2E0NTRkYjJk
Ny8xL1kyTzdaWWxmT2xTa3N5U2hESG1zbU9faW9jby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbl+njAN
BgkqhkiG9w0BAQsFAAOCAQEAN0NuY1OW28iGLfCOJA5lN82nGU62kQJwatdflbtP
EbFXdKEHop2aeQVBdTC4vlbOWMX7vtlF9SXze+8wyFgR47rDRfeyrCA7srl4Jtyt
nldG0VKAIlycod2AvWs10XFWB2wEQS4XuJQ2AFVJ5XC9LT0n05qyt/bEed7Sh52L
p484KHtOVfbgleB2159zklKb4ICaEVyJPYOE3bqcOx12bpKHGoXCDOGQtt0xeXn/
MDRCvZmmyI6hM8GtdPeglHMBqr5kK39m99mOh+WyA9OYw2J/adQv2wCqC176vd3x
tN7bKdOF7hvBU4Mw/BhyeB5zSSCGHlzn84jze+tErVZxKg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:30:04 2025 by rpki-client