Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/euUrArt4fdVZqKQP4L3ZlGAuUF4.roa
File: euUrArt4fdVZqKQP4L3ZlGAuUF4.roa (raw, json)
Hash identifier: qvnr1KXZpCC4XeAhkYHKWraE5bPWhcjst5FpNMarpLI=
Subject key identifier: 7A:E5:2B:02:BB:78:7D:D5:59:A8:A4:0F:E0:BD:D9:94:60:2E:50:5E
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0193764FEE2F3199423F94F6B4F6A7EDE9D9
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/euUrArt4fdVZqKQP4L3ZlGAuUF4.roa
Signing time: Fri 29 Nov 2024 05:06:10 +0000
ROA not before: Fri 29 Nov 2024 05:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 140.150.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 06:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:4f:ee:2f:31:99:42:3f:94:f6:b4:f6:a7:ed:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Nov 29 05:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae52b02bb787dd559a8a40fe0bdd994602e505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:c6:1f:9d:8e:b6:2d:42:a4:be:0d:eb:59:
8c:7a:96:03:4e:45:4a:2d:aa:08:1d:6f:80:44:47:
33:cf:92:c0:97:89:2c:65:b0:fb:1a:af:fa:f9:3f:
95:0b:e3:3f:92:eb:de:6f:95:12:c6:31:eb:bb:e5:
df:2c:f6:64:d7:41:b7:21:6e:2d:eb:59:a3:40:93:
a5:2f:18:4e:ae:1d:e0:9d:cb:9f:9e:0f:0a:f3:11:
14:93:d4:c0:d5:e3:39:76:fa:c5:52:9d:bb:74:ce:
3d:be:27:38:98:ba:87:0f:9a:ae:00:3e:9a:f4:d0:
f7:f6:82:a5:45:86:01:52:43:42:83:c4:9b:73:99:
21:ac:d8:b6:72:79:6d:a3:8f:5a:c6:b4:d0:59:f6:
e4:b8:b8:bf:3f:95:75:08:9a:9e:aa:0e:d8:1a:43:
69:d3:74:81:eb:dd:83:5c:8c:27:74:44:de:b5:2d:
8c:d8:aa:76:92:c4:c7:2e:7b:9a:59:01:ba:de:a5:
8d:db:39:33:53:1a:40:0d:0a:43:da:b0:bc:ee:f1:
94:8c:a0:5b:18:09:66:69:8f:6e:ab:49:5e:cf:e4:
8c:9d:a5:da:b6:68:f5:a4:70:9d:01:8f:21:71:a7:
3d:cd:9e:f1:45:95:7a:06:6f:3e:0c:4b:7c:03:ca:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:2B:02:BB:78:7D:D5:59:A8:A4:0F:E0:BD:D9:94:60:2E:50:5E
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/euUrArt4fdVZqKQP4L3ZlGAuUF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:60:f9:af:4e:56:96:32:d4:4b:24:bc:17:7a:24:e6:13:58:
07:a0:47:5b:8d:6a:c4:d6:61:99:71:6d:81:fa:c8:31:df:3f:
99:59:ab:19:fd:52:26:41:44:1b:d5:c4:da:2d:c3:74:93:14:
87:a0:17:c3:a8:a4:05:cc:b3:95:64:e1:b1:7a:76:16:e5:b5:
b3:df:5b:9f:ad:11:90:01:62:48:10:f8:64:cf:98:38:ef:37:
04:46:78:b3:fa:41:b9:76:c8:e5:38:77:fd:9a:2d:b9:0f:6a:
fd:e5:5f:4b:a6:a3:6d:21:25:1b:9b:d1:c0:18:1c:16:a9:08:
aa:8b:95:e6:7d:1c:bc:02:13:48:ef:aa:02:7f:3c:8f:53:62:
b5:44:a3:5f:98:ea:a4:b7:4d:14:be:22:7b:f7:0e:b5:f5:a7:
71:ef:dc:9d:dd:0b:e6:21:cf:7c:dd:5e:53:b0:69:fd:fd:9c:
be:bb:61:51:ec:97:f6:c2:d5:75:a6:5e:ea:d5:43:86:e7:2d:
b9:9a:db:98:6c:a7:1a:88:93:8c:61:a4:fc:00:3a:39:63:a8:
13:05:df:2d:9f:32:66:ee:7d:6d:35:dd:f6:5b:df:b7:81:6a:
e2:43:b4:f3:7a:31:af:3b:03:5f:29:86:2d:f3:24:4b:bc:57:
88:6f:4d:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN2T+4vMZlCP5T2tPan7enZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjQxMTI5MDUwNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWU1MmIwMmJiNzg3ZGQ1NTlhOGE0MGZlMGJkZDk5NDYwMmU1MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXfGH52Oti1CpL4N61mMepYDTkVK
LaoIHW+AREczz5LAl4ksZbD7Gq/6+T+VC+M/kuveb5USxjHru+XfLPZk10G3IW4t
61mjQJOlLxhOrh3gncufng8K8xEUk9TA1eM5dvrFUp27dM49vic4mLqHD5quAD6a
9ND39oKlRYYBUkNCg8Sbc5khrNi2cnlto49axrTQWfbkuLi/P5V1CJqeqg7YGkNp
03SB692DXIwndETetS2M2Kp2ksTHLnuaWQG63qWN2zkzUxpADQpD2rC87vGUjKBb
GAlmaY9uq0lez+SMnaXatmj1pHCdAY8hcac9zZ7xRZV6Bm8+DEt8A8pklwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrlKwK7eH3VWaikD+C92ZRgLlBeMB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvZXVVckFydDRmZFZacUtRUDRMM1psR0F1VUY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjJYIMA0G
CSqGSIb3DQEBCwUAA4IBAQALYPmvTlaWMtRLJLwXeiTmE1gHoEdbjWrE1mGZcW2B
+sgx3z+ZWasZ/VImQUQb1cTaLcN0kxSHoBfDqKQFzLOVZOGxenYW5bWz31ufrRGQ
AWJIEPhkz5g47zcERniz+kG5dsjlOHf9mi25D2r95V9LpqNtISUbm9HAGBwWqQiq
i5XmfRy8AhNI76oCfzyPU2K1RKNfmOqkt00UviJ79w619adx79yd3QvmIc983V5T
sGn9/Zy+u2FR7Jf2wtV1pl7q1UOG5y25mtuYbKcaiJOMYaT8ADo5Y6gTBd8tnzJm
7n1tNd32W9+3gWriQ7TzejGvOwNfKYYt8yRLvFeIb01x
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:34 2025 by rpki-client