Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/93N70EU8aCygXgH6EZvrlMICYfY.roa
File: 93N70EU8aCygXgH6EZvrlMICYfY.roa (raw, json)
Hash identifier: fHZmG6mRB23e9ZVJgsM4sWFkO67kTQErcD+LnqCovac=
Subject key identifier: F7:73:7B:D0:45:3C:68:2C:A0:5E:01:FA:11:9B:EB:94:C2:02:61:F6
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 019425FC979E1A7AAC3268D7D455F8A2127E
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/93N70EU8aCygXgH6EZvrlMICYfY.roa
Signing time: Thu 02 Jan 2025 07:48:18 +0000
ROA not before: Thu 02 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 81.161.62.0/24 maxlen: 24
91.227.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 13:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:97:9e:1a:7a:ac:32:68:d7:d4:55:f8:a2:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Jan 2 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7737bd0453c682ca05e01fa119beb94c20261f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:d2:00:d4:06:dd:d3:c2:74:21:c5:4d:95:
c2:a3:10:b3:b4:e5:d1:57:32:4e:6c:f2:58:9c:2d:
cb:22:41:b1:12:cc:21:95:91:34:be:2d:5a:4c:16:
0d:24:18:5d:3a:62:81:13:0c:5c:79:00:d5:75:f1:
6e:11:02:53:0d:33:09:e9:28:88:d4:3c:79:5e:1b:
82:34:d4:24:99:7e:02:a8:1b:77:bf:d8:6f:6d:d0:
41:86:b7:04:db:10:fa:d9:1f:3d:d1:38:9c:ea:7f:
31:a4:f1:54:00:26:4d:8e:fc:a4:ce:71:96:42:c4:
8f:30:bd:7c:a1:fe:82:1e:d8:5d:db:97:b3:8d:e3:
c6:49:f2:ae:9f:21:77:b9:e9:c3:ae:05:96:e1:43:
d4:de:e9:49:59:64:a4:ae:56:e8:18:01:68:59:cc:
bb:ba:f5:f5:fc:94:39:ee:34:60:ae:22:81:c5:d6:
a7:9d:1f:01:e1:d8:5e:fd:1b:ce:99:5e:6f:60:9c:
b1:96:58:4b:a0:ba:d3:e1:f9:8f:88:36:cc:83:69:
24:ba:c4:e4:5e:99:bd:a6:68:a7:b8:18:10:3c:fd:
9a:b9:8e:bf:54:75:8c:ff:0c:38:58:18:c9:54:09:
0f:8a:91:31:86:2b:fa:0e:a4:51:d1:9c:74:35:99:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:7B:D0:45:3C:68:2C:A0:5E:01:FA:11:9B:EB:94:C2:02:61:F6
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/93N70EU8aCygXgH6EZvrlMICYfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.62.0/24
91.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ed:38:60:34:46:e6:31:97:78:92:da:ca:de:b1:aa:1f:78:
73:ed:ab:92:4a:f3:b8:24:dc:d4:ee:6c:4a:bc:38:29:3d:e4:
90:fe:32:37:c9:45:e2:85:29:03:f9:95:de:da:d2:37:c3:4d:
09:24:7a:51:d6:32:54:f0:74:c8:a2:b2:0e:70:92:6a:60:de:
79:4f:14:d8:89:d3:f8:7e:6c:82:ff:4c:25:ea:f1:96:31:93:
e8:f4:fd:e4:27:15:37:2e:46:4a:95:71:28:12:9c:01:40:d0:
35:27:bf:a0:36:eb:a8:9a:5d:03:c2:3a:0c:1a:0a:d2:10:76:
e8:19:f4:a5:6d:92:6a:8a:a5:96:06:51:a8:aa:e7:1c:6d:db:
0f:08:a3:98:17:13:5d:27:9e:fd:28:06:ee:16:38:62:d3:73:
e4:95:28:58:92:d9:48:b0:0b:12:29:ab:9d:2a:ea:a2:72:27:
76:a9:4e:55:6f:3e:b2:51:9a:03:85:44:6c:60:f0:91:41:3e:
c3:05:7a:7a:d8:2e:5e:e1:59:4d:b4:81:e7:c1:6e:12:87:a8:
e3:1b:a7:9c:60:8f:ba:10:89:a8:95:d1:e0:99:3b:0f:bc:4e:
5c:cb:ba:f7:b9:f4:65:b5:23:2b:6f:51:70:2d:e6:aa:96:f2:
5b:91:b5:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/JeeGnqsMmjX1FX4ohJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDFkMTNhMTVhOTg3ZGQ2MDAxOWMwMjY1ZDJlY2VjNDg0
MDk0NGEwHhcNMjUwMTAyMDc0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzczN2JkMDQ1M2M2ODJjYTA1ZTAxZmExMTliZWI5NGMyMDI2MWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67SANQG3dPCdCHFTZXCoxCztOXR
VzJObPJYnC3LIkGxEswhlZE0vi1aTBYNJBhdOmKBEwxceQDVdfFuEQJTDTMJ6SiI
1Dx5XhuCNNQkmX4CqBt3v9hvbdBBhrcE2xD62R890Tic6n8xpPFUACZNjvykznGW
QsSPML18of6CHthd25ezjePGSfKunyF3uenDrgWW4UPU3ulJWWSkrlboGAFoWcy7
uvX1/JQ57jRgriKBxdannR8B4dhe/RvOmV5vYJyxllhLoLrT4fmPiDbMg2kkusTk
Xpm9pminuBgQPP2auY6/VHWM/ww4WBjJVAkPipExhiv6DqRR0Zx0NZnBMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPdze9BFPGgsoF4B+hGb65TCAmH2MB8GA1UdIwQY
MBaAFHdB0ToVqYfdYAGcAmXS7OxIQJRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTkt
MzUyM2UzMDMwYmU0LzEvOTNONzBFVThhQ3lnWGdINkVadnJsTUlDWWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTktMzUyM2UzMDMwYmU0
LzEvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaE+AwQA
W+PBMA0GCSqGSIb3DQEBCwUAA4IBAQCd7ThgNEbmMZd4ktrK3rGqH3hz7auSSvO4
JNzU7mxKvDgpPeSQ/jI3yUXihSkD+ZXe2tI3w00JJHpR1jJU8HTIorIOcJJqYN55
TxTYidP4fmyC/0wl6vGWMZPo9P3kJxU3LkZKlXEoEpwBQNA1J7+gNuuoml0DwjoM
GgrSEHboGfSlbZJqiqWWBlGoquccbdsPCKOYFxNdJ579KAbuFjhi03PklShYktlI
sAsSKaudKuqicid2qU5Vbz6yUZoDhURsYPCRQT7DBXp62C5e4VlNtIHnwW4Sh6jj
G6ecYI+6EImoldHgmTsPvE5cy7r3ufRltSMrb1FwLeaqlvJbkbVd
-----END CERTIFICATE-----
Generated at Fri May 2 15:11:16 2025 by rpki-client