Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/F_djl6PVmw6UGhY-XeMEjk5v41k.roa
File: F_djl6PVmw6UGhY-XeMEjk5v41k.roa (raw, json)
Hash identifier: jzaipheAe0VcFgHiwGkeTP7qKGKph1o2HMiju/CwyT0=
Subject key identifier: 17:F7:63:97:A3:D5:9B:0E:94:1A:16:3E:5D:E3:04:8E:4E:6F:E3:59
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018EE0A09F96CD838BD24DA7F247B2CDF5F1
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/F_djl6PVmw6UGhY-XeMEjk5v41k.roa
Signing time: Mon 15 Apr 2024 07:20:06 +0000
ROA not before: Mon 15 Apr 2024 07:20:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 93.93.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 07:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:a0:9f:96:cd:83:8b:d2:4d:a7:f2:47:b2:cd:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Apr 15 07:20:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17f76397a3d59b0e941a163e5de3048e4e6fe359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:14:10:b3:bc:cb:72:f3:4b:65:ec:48:a4:
e6:65:a1:be:04:dc:32:46:12:39:33:af:3c:09:d1:
16:12:77:52:e6:0b:be:3c:48:e6:07:84:11:a9:77:
ac:cf:e0:1c:ce:38:af:f4:bc:06:c8:b5:01:1c:f6:
a5:5c:4b:25:01:9d:90:de:7d:f3:7c:d9:1f:a5:a0:
1d:7b:3e:10:44:32:da:8d:0f:13:ba:08:35:23:35:
8d:6d:48:a9:7a:79:60:08:ca:ad:f3:87:87:03:80:
95:fe:29:51:55:25:6c:37:04:81:e8:c4:2b:88:f0:
dc:b6:ab:5d:b6:12:6f:f4:9f:02:cd:6d:eb:fa:7e:
82:c7:67:3b:f4:16:8d:4c:5c:34:83:3e:38:33:71:
e4:63:58:59:e3:06:57:2d:bf:04:5d:c3:d1:e3:91:
27:52:3b:c3:c0:43:0e:f6:64:6f:ca:f1:2b:8a:bd:
24:3f:ad:54:a8:61:fa:54:e1:bf:50:49:5d:0d:d0:
3d:6e:09:fa:91:01:a2:6d:5d:07:b7:ad:90:d6:91:
0c:4f:bd:7e:66:ac:42:64:0f:0e:35:78:37:97:8c:
d2:c1:c8:9b:7d:b7:c0:a7:21:bb:38:9e:69:29:e0:
54:66:69:53:18:ca:01:48:39:e5:f1:29:eb:0c:83:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:63:97:A3:D5:9B:0E:94:1A:16:3E:5D:E3:04:8E:4E:6F:E3:59
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/F_djl6PVmw6UGhY-XeMEjk5v41k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.96.0/22
Signature Algorithm: sha256WithRSAEncryption
44:37:fa:4e:22:27:59:6f:a6:79:e9:85:88:de:83:38:cb:7f:
67:c3:ff:f9:38:47:83:3c:34:12:5b:35:9c:7f:41:d4:aa:0d:
3b:7c:46:46:d0:a8:f6:41:2f:9a:cf:42:09:08:e5:72:1f:70:
c3:8b:56:df:1e:31:2e:26:40:e3:15:09:07:d0:67:94:5b:d3:
f4:8f:cb:e7:d4:ce:fe:2f:72:3f:d5:7f:de:24:fe:49:b2:78:
ad:68:17:23:0f:c6:90:6b:fd:13:0c:5c:4c:6e:41:ee:ab:56:
fa:4c:ce:5f:4c:74:e1:27:5f:1e:d2:25:11:2a:f5:6f:99:03:
c8:41:f0:43:94:ac:71:80:6e:1f:33:82:b3:04:dd:88:e9:8e:
7f:d0:be:59:5d:be:40:35:d0:4f:1a:fd:38:42:50:69:d2:30:
a1:bc:d2:43:2b:3a:1c:8f:8f:c6:df:1b:8d:47:87:09:93:b0:
55:ce:29:aa:62:be:32:20:36:d0:af:a9:db:6c:91:af:a5:bc:
f0:c4:53:16:66:f3:6b:88:4f:5b:08:84:e0:1c:52:db:41:91:
c2:67:c5:b9:cf:40:19:a2:98:bc:6f:b3:83:da:24:24:02:c4:
07:ab:08:1c:29:55:32:54:3d:ab:f6:d1:54:5c:f3:36:00:7e:
af:b7:17:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7goJ+WzYOL0k2n8keyzfXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjQwNDE1MDcyMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2Y3NjM5N2EzZDU5YjBlOTQxYTE2M2U1ZGUzMDQ4ZTRlNmZlMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7EUELO8y3LzS2XsSKTmZaG+BNwy
RhI5M688CdEWEndS5gu+PEjmB4QRqXesz+Aczjiv9LwGyLUBHPalXEslAZ2Q3n3z
fNkfpaAdez4QRDLajQ8Tugg1IzWNbUipenlgCMqt84eHA4CV/ilRVSVsNwSB6MQr
iPDctqtdthJv9J8CzW3r+n6Cx2c79BaNTFw0gz44M3HkY1hZ4wZXLb8EXcPR45En
UjvDwEMO9mRvyvErir0kP61UqGH6VOG/UEldDdA9bgn6kQGibV0Ht62Q1pEMT71+
ZqxCZA8ONXg3l4zSwcibfbfApyG7OJ5pKeBUZmlTGMoBSDnl8SnrDINUDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBf3Y5ej1ZsOlBoWPl3jBI5Ob+NZMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvRl9kamw2UFZtdzZVR2hZLVhlTUVqazV2NDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXV1gMA0G
CSqGSIb3DQEBCwUAA4IBAQBEN/pOIidZb6Z56YWI3oM4y39nw//5OEeDPDQSWzWc
f0HUqg07fEZG0Kj2QS+az0IJCOVyH3DDi1bfHjEuJkDjFQkH0GeUW9P0j8vn1M7+
L3I/1X/eJP5JsnitaBcjD8aQa/0TDFxMbkHuq1b6TM5fTHThJ18e0iURKvVvmQPI
QfBDlKxxgG4fM4KzBN2I6Y5/0L5ZXb5ANdBPGv04QlBp0jChvNJDKzocj4/G3xuN
R4cJk7BVzimqYr4yIDbQr6nbbJGvpbzwxFMWZvNriE9bCITgHFLbQZHCZ8W5z0AZ
opi8b7OD2iQkAsQHqwgcKVUyVD2r9tFUXPM2AH6vtxea
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:19:03 2025 by rpki-client