Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/fmstw9mSpvOHkks2awABeKFPyR4.roa
File: fmstw9mSpvOHkks2awABeKFPyR4.roa (raw, json)
Hash identifier: XO8oDA2w40dqFVuV+/DKkhzI7TTW50rhFBtr+h9pXBo=
Subject key identifier: 7E:6B:2D:C3:D9:92:A6:F3:87:92:4B:36:6B:00:01:78:A1:4F:C9:1E
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 0195542584840EC66CA8F1D3E2AB151830ED
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/fmstw9mSpvOHkks2awABeKFPyR4.roa
Signing time: Sat 01 Mar 2025 23:58:19 +0000
ROA not before: Sat 01 Mar 2025 23:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 194.50.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 14:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:25:84:84:0e:c6:6c:a8:f1:d3:e2:ab:15:18:30:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Mar 1 23:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e6b2dc3d992a6f387924b366b000178a14fc91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:2a:38:0a:44:ad:cc:ee:b5:78:e6:38:a5:
70:34:5c:09:6c:5c:49:d6:ab:93:96:ec:e8:8c:77:
5e:26:17:81:76:e5:02:03:1a:32:00:fd:f0:95:f2:
a1:9d:33:62:f3:22:fd:95:58:ff:8b:10:25:7a:d3:
e0:7c:b0:aa:9c:9a:10:eb:78:52:c9:df:0b:3b:27:
2d:bf:3f:55:a9:6d:ab:70:c8:22:04:b9:76:35:2d:
cb:2c:7b:d1:d5:fd:f0:11:1a:14:d5:a0:0f:3a:11:
f0:c1:b8:9c:5b:20:3b:0d:24:84:b8:f5:a0:bb:56:
b6:d4:b0:8f:a9:a0:d9:d2:c8:5e:94:32:2b:24:1c:
5e:7b:57:2c:5d:20:6e:b1:6d:4f:75:a7:3f:43:2b:
e0:55:8d:f3:66:23:9d:e3:7d:1f:42:93:0e:80:da:
58:7d:b1:71:1b:cf:52:4a:9e:46:9e:13:bc:59:d8:
0e:67:a6:46:ab:1c:61:19:a0:0e:c5:5e:95:ce:fd:
78:92:ee:87:35:df:1d:78:a9:0a:2e:26:6c:6f:ad:
17:15:da:fd:7d:b7:51:79:16:84:7d:5e:5c:a6:c6:
34:26:e2:d8:55:04:72:82:7c:2f:55:4d:fe:c6:bc:
30:a6:5a:78:e8:0f:e7:5c:f6:df:80:10:b7:d0:60:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:2D:C3:D9:92:A6:F3:87:92:4B:36:6B:00:01:78:A1:4F:C9:1E
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/fmstw9mSpvOHkks2awABeKFPyR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.169.0/24
Signature Algorithm: sha256WithRSAEncryption
af:32:ee:52:b5:51:45:80:b8:d0:60:c9:67:41:f8:b3:03:f0:
5f:1e:c9:36:57:e9:45:20:09:2a:9c:f2:70:56:15:3f:db:78:
30:ed:75:3c:6e:da:13:0f:c9:ef:ef:72:ca:39:a3:89:9d:7a:
44:45:bb:80:7a:2e:9f:48:80:ca:db:d8:3b:9d:2a:ef:45:4a:
04:bf:7c:97:25:14:e3:5e:b0:46:6f:93:bf:74:8e:e6:a2:c9:
f8:66:15:2a:83:bd:9d:09:fb:b9:c1:8a:52:db:54:69:f3:67:
73:dc:45:6f:26:f3:86:45:b9:8b:c9:17:cd:87:45:2f:1b:8f:
48:58:2e:06:06:e7:5b:ed:6f:a9:a2:09:c3:2b:6b:b0:1d:87:
2c:7f:2b:b7:ef:83:b9:44:51:b6:31:bf:43:cd:11:3f:f4:c4:
0a:32:78:34:31:d4:8b:c9:17:40:33:d2:ba:86:5b:3f:dd:40:
71:a5:54:73:0c:b2:a1:58:d2:fd:c8:b3:16:b1:1b:2e:8c:85:
73:6b:32:87:98:8d:6a:ee:bc:12:fa:ba:a9:d0:43:aa:6d:27:
97:4c:e5:1e:95:67:92:cf:d2:20:8a:f4:14:d9:e2:12:46:30:
b0:83:d8:c7:c6:0c:47:bc:67:21:53:45:32:b7:7a:37:fe:a8:
22:88:24:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVUJYSEDsZsqPHT4qsVGDDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx
M2FlMzkwHhcNMjUwMzAxMjM1ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTZiMmRjM2Q5OTJhNmYzODc5MjRiMzY2YjAwMDE3OGExNGZjOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7kqOApErczutXjmOKVwNFwJbFxJ
1quTluzojHdeJheBduUCAxoyAP3wlfKhnTNi8yL9lVj/ixAletPgfLCqnJoQ63hS
yd8LOyctvz9VqW2rcMgiBLl2NS3LLHvR1f3wERoU1aAPOhHwwbicWyA7DSSEuPWg
u1a21LCPqaDZ0shelDIrJBxee1csXSBusW1Pdac/QyvgVY3zZiOd430fQpMOgNpY
fbFxG89SSp5GnhO8WdgOZ6ZGqxxhGaAOxV6Vzv14ku6HNd8deKkKLiZsb60XFdr9
fbdReRaEfV5cpsY0JuLYVQRygnwvVU3+xrwwplp46A/nXPbfgBC30GCJSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH5rLcPZkqbzh5JLNmsAAXihT8keMB8GA1UdIwQY
MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt
OTZhMzRiMDIyZjg5LzEvZm1zdHc5bVNwdk9Ia2tzMmF3QUJlS0ZQeVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5
LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjKpMA0G
CSqGSIb3DQEBCwUAA4IBAQCvMu5StVFFgLjQYMlnQfizA/BfHsk2V+lFIAkqnPJw
VhU/23gw7XU8btoTD8nv73LKOaOJnXpERbuAei6fSIDK29g7nSrvRUoEv3yXJRTj
XrBGb5O/dI7mosn4ZhUqg72dCfu5wYpS21Rp82dz3EVvJvOGRbmLyRfNh0UvG49I
WC4GBudb7W+pognDK2uwHYcsfyu374O5RFG2Mb9DzRE/9MQKMng0MdSLyRdAM9K6
hls/3UBxpVRzDLKhWNL9yLMWsRsujIVzazKHmI1q7rwS+rqp0EOqbSeXTOUelWeS
z9IgivQU2eISRjCwg9jHxgxHvGchU0Uyt3o3/qgiiCQL
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:20 2025 by rpki-client