Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/FSitLnxRqp6ppUqXkx5Ig2YYBpw.roa
File: FSitLnxRqp6ppUqXkx5Ig2YYBpw.roa (raw, json)
Hash identifier: +brmN11HGMdnaZzxBvMW1eTE0+P8Al4y2lOGHB38Ndo=
Subject key identifier: 15:28:AD:2E:7C:51:AA:9E:A9:A5:4A:97:93:1E:48:83:66:18:06:9C
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 0192E34B63EF24F39BD85DBA6217D12C9946
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/FSitLnxRqp6ppUqXkx5Ig2YYBpw.roa
Signing time: Thu 31 Oct 2024 15:57:01 +0000
ROA not before: Thu 31 Oct 2024 15:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198129
IP address blocks: 128.127.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:4b:63:ef:24:f3:9b:d8:5d:ba:62:17:d1:2c:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Oct 31 15:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1528ad2e7c51aa9ea9a54a97931e48836618069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:e3:19:3e:43:73:5a:8a:ce:b1:43:08:90:
d9:f1:06:cb:75:a7:de:82:aa:c8:a5:46:b7:2b:1d:
ce:11:e5:85:b4:b8:c8:d4:d2:83:73:c1:55:8b:1c:
11:44:6b:15:25:78:a6:01:fc:82:6e:4b:7f:c7:f7:
4b:4c:e0:2a:89:5e:a4:ea:dd:6c:ea:9c:2f:e9:4c:
53:e8:f2:17:8a:54:e3:9b:3d:3c:29:c4:61:ac:a7:
f5:0b:3e:f0:b4:58:9f:1d:f0:7c:7b:a7:3e:99:72:
b6:81:a6:45:09:30:71:e2:7d:44:ab:78:50:b0:50:
33:7f:0f:ab:6e:50:5c:c7:dd:3a:1e:db:0c:8a:eb:
05:ce:2c:ef:a5:be:6a:66:28:92:0b:71:9b:0c:a0:
54:20:65:68:6c:81:4c:ff:c8:47:86:1e:c1:3a:da:
d6:74:2f:aa:0e:78:67:c1:b9:47:0a:57:8f:8b:d2:
e0:7b:58:60:3e:b6:dd:9a:07:4b:47:bd:a2:12:af:
ca:d9:35:da:77:16:67:83:f8:06:91:e5:b6:9c:e8:
7f:3f:b7:9e:84:93:40:18:1f:a9:6c:f1:7f:77:fd:
3e:91:b4:60:53:96:11:5c:c0:80:68:00:ec:13:6c:
2a:11:60:ac:2c:f2:31:f9:73:7e:ad:85:e9:9a:b8:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:AD:2E:7C:51:AA:9E:A9:A5:4A:97:93:1E:48:83:66:18:06:9C
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/FSitLnxRqp6ppUqXkx5Ig2YYBpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:62:e8:f2:e4:a0:f5:33:2d:0c:65:af:43:c1:ee:0b:7b:e4:
10:06:7d:2f:6a:dc:70:b8:49:bc:b1:5a:5b:9c:4e:4c:2f:17:
e9:32:67:15:84:b7:f1:51:01:e6:14:66:64:59:3a:50:c7:db:
cb:25:71:8b:d2:b1:7b:f8:5f:78:f7:4e:03:f1:08:6c:58:e9:
4c:d9:f4:56:4e:b9:0d:de:c0:85:fc:d6:2f:1a:ed:ff:15:d4:
b1:a3:38:45:5a:64:68:5c:23:7c:79:99:53:f2:d6:b6:70:bf:
77:98:38:63:23:d0:13:fb:a7:7a:16:bd:cc:28:e2:00:55:1d:
9f:2c:52:87:b1:90:bb:af:1b:c9:5c:ad:38:66:d3:9d:38:ac:
54:d1:d9:c5:2b:40:7a:e9:91:96:96:70:6e:02:0a:6d:93:a3:
ee:ca:27:86:4e:80:72:9f:1e:4a:99:d1:d2:cf:5e:74:38:27:
8e:c9:88:d9:8b:e6:88:46:8f:ac:84:cf:c6:51:87:f7:c2:21:
ba:e3:ec:3b:57:8b:e0:bc:a8:2c:1c:49:2d:a4:5c:15:6f:7e:
da:3f:b1:75:2d:0c:5d:21:3a:6a:4c:2c:32:c5:69:a8:94:7b:
fd:14:8e:de:ee:ae:ac:97:26:fc:e1:ab:8a:e2:5f:f7:4b:eb:
a7:27:1e:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLjS2PvJPOb2F26YhfRLJlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQxMzJjMTJmODY5OTVmZTI4OTNlNGRlYTcyNjM4ZDI2
MDEwNzkwHhcNMjQxMDMxMTU1NzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTI4YWQyZTdjNTFhYTllYTlhNTRhOTc5MzFlNDg4MzY2MTgwNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMPjGT5Dc1qKzrFDCJDZ8QbLdafe
gqrIpUa3Kx3OEeWFtLjI1NKDc8FVixwRRGsVJXimAfyCbkt/x/dLTOAqiV6k6t1s
6pwv6UxT6PIXilTjmz08KcRhrKf1Cz7wtFifHfB8e6c+mXK2gaZFCTBx4n1Eq3hQ
sFAzfw+rblBcx906HtsMiusFzizvpb5qZiiSC3GbDKBUIGVobIFM/8hHhh7BOtrW
dC+qDnhnwblHClePi9Lge1hgPrbdmgdLR72iEq/K2TXadxZng/gGkeW2nOh/P7ee
hJNAGB+pbPF/d/0+kbRgU5YRXMCAaADsE2wqEWCsLPIx+XN+rYXpmrhjrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBUorS58UaqeqaVKl5MeSINmGAacMB8GA1UdIwQY
MBaAFMh0EywS+GmV/iiT5N6nJjjSYBB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUt
NGMwOGI0YWEyMGZlLzEvRlNpdExueFJxcDZwcFVxWGt4NUlnMllZQnB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUtNGMwOGI0YWEyMGZl
LzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgH9JMA0G
CSqGSIb3DQEBCwUAA4IBAQB8Yujy5KD1My0MZa9Dwe4Le+QQBn0vatxwuEm8sVpb
nE5MLxfpMmcVhLfxUQHmFGZkWTpQx9vLJXGL0rF7+F94904D8QhsWOlM2fRWTrkN
3sCF/NYvGu3/FdSxozhFWmRoXCN8eZlT8ta2cL93mDhjI9AT+6d6Fr3MKOIAVR2f
LFKHsZC7rxvJXK04ZtOdOKxU0dnFK0B66ZGWlnBuAgptk6PuyieGToBynx5KmdHS
z150OCeOyYjZi+aIRo+shM/GUYf3wiG64+w7V4vgvKgsHEktpFwVb37aP7F1LQxd
ITpqTCwyxWmolHv9FI7e7q6slyb84auK4l/3S+unJx7N
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:11:14 2025 by rpki-client