Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/xZbkUR96vDVTzhsa5QL6l0hTcbM.roa
File: xZbkUR96vDVTzhsa5QL6l0hTcbM.roa (raw, json)
Hash identifier: C9/Dfr2s2lnKNh2Y/S2Cpqwk9grxWP8QkkhZpvjMi98=
Subject key identifier: C5:96:E4:51:1F:7A:BC:35:53:CE:1B:1A:E5:02:FA:97:48:53:71:B3
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0193B9CD0A0FFCA650D5AAD63E54DC838709
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/xZbkUR96vDVTzhsa5QL6l0hTcbM.roa
Signing time: Thu 12 Dec 2024 07:37:22 +0000
ROA not before: Thu 12 Dec 2024 07:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
185.212.204.0/23 maxlen: 24
185.212.206.0/24 maxlen: 24
185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:cd:0a:0f:fc:a6:50:d5:aa:d6:3e:54:dc:83:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Dec 12 07:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c596e4511f7abc3553ce1b1ae502fa97485371b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:2b:4a:5c:ff:f9:86:32:0f:56:e8:84:f6:
71:07:bd:f4:db:56:4e:65:49:e7:b6:93:3b:ae:fa:
0b:1f:62:b7:b6:ef:04:97:d2:90:0b:39:d4:a0:53:
8f:58:f2:8d:fd:47:1d:33:a1:9d:6b:3c:94:2c:7f:
2b:3d:48:8e:f7:eb:a8:16:31:df:ab:f4:66:8c:0c:
c3:16:3a:6a:35:6c:e0:3f:e9:92:c5:89:6c:03:bb:
46:a0:af:96:a8:d6:0a:52:0d:e4:ea:95:ce:3a:24:
df:bd:46:f5:9b:9f:9f:fd:47:c7:f9:4d:ab:35:e9:
e4:d3:14:8a:40:fb:27:8a:d5:65:1a:40:d6:c0:27:
76:80:a8:2a:b3:40:96:bb:71:f3:fc:ae:43:37:47:
0d:0a:39:e1:fb:a6:14:16:44:b7:62:2f:12:0c:9f:
17:f5:e6:43:af:8d:c6:93:74:29:f9:00:61:94:b2:
ad:3d:40:1e:61:7b:51:84:9c:e3:70:8c:9e:f0:27:
9e:7c:00:fb:0e:e0:79:bc:24:11:9e:85:7e:0d:aa:
5e:44:92:83:b9:12:3c:70:65:4c:8a:ad:ef:22:3a:
96:04:bf:66:2d:d7:8d:92:9f:0b:ce:31:ed:6a:3c:
ef:e2:5d:7b:af:b7:74:c8:f0:23:6b:0d:39:01:d2:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:E4:51:1F:7A:BC:35:53:CE:1B:1A:E5:02:FA:97:48:53:71:B3
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/xZbkUR96vDVTzhsa5QL6l0hTcbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.212.204.0-185.212.206.255
185.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:30:d6:07:23:47:d7:a3:35:c1:90:ea:5e:5e:da:0f:35:20:
b4:65:22:97:f7:6b:87:52:86:16:9d:9b:4b:f4:fb:87:2f:f7:
05:2d:77:a6:00:42:5d:f4:bf:37:f0:18:45:4e:20:40:79:5c:
e0:bb:f7:9e:90:43:b6:8a:0c:d3:34:ab:97:6f:0c:d6:0a:89:
6e:ef:42:b6:95:c7:07:21:0d:33:51:99:42:b3:6f:b1:35:fb:
30:75:01:7a:5b:1e:8e:7d:33:54:05:7a:97:c8:bf:54:f6:26:
d9:97:67:30:05:9e:6f:cc:90:7d:c5:20:92:b3:ff:c0:ff:a3:
cd:29:8e:7d:77:9e:e8:a7:83:77:7c:fe:86:73:59:a2:cc:78:
ea:f9:8c:58:4c:e2:3c:20:76:db:40:f8:c6:0e:77:f4:6a:13:
f4:01:d4:da:d5:4b:8b:f5:8e:b8:2d:78:a5:3c:bb:0e:f3:35:
0a:1c:3e:81:5d:ab:de:de:29:56:06:02:6f:d1:bd:6a:87:86:
38:08:88:c9:e9:a4:aa:cc:63:5a:b9:38:5b:3e:33:b3:35:e2:
e6:bd:b9:2e:5e:04:66:f0:25:dd:1f:23:9a:61:0b:bf:5e:62:
97:7b:04:86:0e:dc:e6:c8:aa:ad:21:55:ff:06:15:90:f2:c6:
66:23:0c:c2
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZO5zQoP/KZQ1arWPlTcg4cJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjQxMjEyMDczNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTk2ZTQ1MTFmN2FiYzM1NTNjZTFiMWFlNTAyZmE5NzQ4NTM3MWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wrSlz/+YYyD1bohPZxB73021ZO
ZUnntpM7rvoLH2K3tu8El9KQCznUoFOPWPKN/UcdM6GdazyULH8rPUiO9+uoFjHf
q/RmjAzDFjpqNWzgP+mSxYlsA7tGoK+WqNYKUg3k6pXOOiTfvUb1m5+f/UfH+U2r
Nenk0xSKQPsnitVlGkDWwCd2gKgqs0CWu3Hz/K5DN0cNCjnh+6YUFkS3Yi8SDJ8X
9eZDr43Gk3Qp+QBhlLKtPUAeYXtRhJzjcIye8CeefAD7DuB5vCQRnoV+DapeRJKD
uRI8cGVMiq3vIjqWBL9mLdeNkp8LzjHtajzv4l17r7d0yPAjaw05AdI7owIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMWW5FEferw1U84bGuUC+pdIU3GzMB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEveFpia1VSOTZ2RFZUemhzYTVRTDZsMGhUY2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBXbFyMAwD
BAK51MwDBAC51M4DBAG5+1AwDQYJKoZIhvcNAQELBQADggEBAF8w1gcjR9ejNcGQ
6l5e2g81ILRlIpf3a4dShhadm0v0+4cv9wUtd6YAQl30vzfwGEVOIEB5XOC7956Q
Q7aKDNM0q5dvDNYKiW7vQraVxwchDTNRmUKzb7E1+zB1AXpbHo59M1QFepfIv1T2
JtmXZzAFnm/MkH3FIJKz/8D/o80pjn13nuing3d8/oZzWaLMeOr5jFhM4jwgdttA
+MYOd/RqE/QB1NrVS4v1jrgteKU8uw7zNQocPoFdq97eKVYGAm/RvWqHhjgIiMnp
pKrMY1q5OFs+M7M14ua9uS5eBGbwJd0fI5phC79eYpd7BIYO3ObIqq0hVf8GFZDy
xmYjDMI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:58:53 2025 by rpki-client