Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/rR0xdD8vCcjmN9wrcgw9Z12mVvE.roa
File: rR0xdD8vCcjmN9wrcgw9Z12mVvE.roa (raw, json)
Hash identifier: cVCb1BIod7iH2YrNglbHPcL0xEp93hiSYbtgfBxr22Y=
Subject key identifier: AD:1D:31:74:3F:2F:09:C8:E6:37:DC:2B:72:0C:3D:67:5D:A6:56:F1
Certificate issuer: /CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Certificate serial: 018CC5DBFC68A6E525B4B0E204A0C07C5B75
Authority key identifier: 64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/rR0xdD8vCcjmN9wrcgw9Z12mVvE.roa
Signing time: Mon 01 Jan 2024 16:29:37 +0000
ROA not before: Mon 01 Jan 2024 16:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62433
IP address blocks: 91.228.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fc:68:a6:e5:25:b4:b0:e2:04:a0:c0:7c:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad1d31743f2f09c8e637dc2b720c3d675da656f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:b1:2a:b1:31:d6:58:64:f0:a1:2a:a4:6e:
2a:4c:c8:b4:db:e4:44:1e:7f:06:6a:93:72:83:48:
c5:3e:0e:1c:34:75:a0:b1:ec:81:73:1c:2a:59:9b:
e9:c7:ce:05:51:24:e7:e5:46:0e:62:82:37:ae:63:
71:e8:fe:24:b5:2a:e3:f1:db:88:06:cf:23:7e:24:
d7:ca:d0:cb:51:c6:f8:30:b8:06:81:d6:e0:a8:a2:
b8:01:99:4e:87:de:dd:34:07:65:ba:92:fd:55:66:
49:64:78:d3:27:3a:08:50:ca:c3:c7:41:d8:76:a4:
50:99:27:8b:2a:c6:cb:88:b3:8e:55:27:7d:e2:04:
e1:c5:cc:b1:84:ac:e1:8a:9d:50:c6:de:43:30:44:
a7:80:dc:1c:8e:b7:83:97:53:09:16:53:26:51:b3:
b6:3b:8c:90:26:90:7b:96:ba:67:9a:b6:be:19:63:
91:ac:4d:18:b9:9e:39:3a:e6:a0:22:2c:54:f4:7f:
4f:1a:51:fd:33:e2:6e:e4:fb:8e:89:af:c9:cb:de:
4a:ea:f0:a2:c1:f7:18:de:44:c7:85:0f:d3:e4:0b:
cf:4c:d2:b0:e5:a2:81:20:07:f6:c9:53:b4:51:f7:
52:91:b5:f5:57:75:bc:fc:c3:a9:e4:e5:4f:25:29:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:31:74:3F:2F:09:C8:E6:37:DC:2B:72:0C:3D:67:5D:A6:56:F1
X509v3 Authority Key Identifier:
keyid:64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/rR0xdD8vCcjmN9wrcgw9Z12mVvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.255.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:17:d4:28:4a:74:5c:c4:ea:ba:db:dd:05:13:a0:8e:c8:26:
a7:bb:20:59:6c:0f:d5:b8:72:d5:a2:cc:42:22:b0:f4:dc:e0:
7f:50:b6:b9:e4:dc:04:f5:5a:8b:b7:f6:11:e3:a7:62:18:08:
e7:24:67:aa:f8:60:50:b9:19:08:09:90:03:73:d7:db:04:a1:
14:94:d6:d6:07:03:a0:c5:0a:20:d6:74:93:ab:83:1a:9c:63:
37:bd:03:a6:ed:49:ce:e3:90:e3:90:ac:24:44:ad:d7:f5:82:
e7:bd:b8:65:9f:69:3f:27:9f:d7:24:69:e6:75:5e:e6:5d:b2:
dd:76:95:21:e3:8a:73:6a:6c:ba:b2:a7:ca:d8:7b:f4:9d:e6:
62:31:7b:bd:68:43:69:42:b2:04:96:92:95:51:63:25:62:a1:
d0:36:0d:8b:5c:21:7f:d3:2e:69:1c:b5:6a:6e:85:9e:aa:4e:
4f:d7:e5:0b:7a:a4:4f:cd:b6:f7:bf:cf:c2:f5:11:8d:d9:71:
d2:26:8e:16:c2:b7:b6:e1:6f:03:03:62:bd:d8:24:8a:03:41:
d4:83:e7:71:52:d9:2c:61:00:36:b4:bb:0e:c2:8b:df:e4:b5:
32:68:31:fc:77:70:ad:11:f1:27:eb:01:11:c4:0d:82:b8:30:
6e:87:9a:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF2/xopuUltLDiBKDAfFt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTNlNzVjNmQwYWJhYmM5MzFjMjg0N2NkYWE4NjVmYjhk
N2Y5Y2YwHhcNMjQwMTAxMTYyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDFkMzE3NDNmMmYwOWM4ZTYzN2RjMmI3MjBjM2Q2NzVkYTY1NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9ixKrEx1lhk8KEqpG4qTMi02+RE
Hn8GapNyg0jFPg4cNHWgseyBcxwqWZvpx84FUSTn5UYOYoI3rmNx6P4ktSrj8duI
Bs8jfiTXytDLUcb4MLgGgdbgqKK4AZlOh97dNAdlupL9VWZJZHjTJzoIUMrDx0HY
dqRQmSeLKsbLiLOOVSd94gThxcyxhKzhip1Qxt5DMESngNwcjreDl1MJFlMmUbO2
O4yQJpB7lrpnmra+GWORrE0YuZ45OuagIixU9H9PGlH9M+Ju5PuOia/Jy95K6vCi
wfcY3kTHhQ/T5AvPTNKw5aKBIAf2yVO0UfdSkbX1V3W8/MOp5OVPJSnbCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK0dMXQ/LwnI5jfcK3IMPWddplbxMB8GA1UdIwQY
MBaAFGSj51xtCrq8kxwoR82qhl+41/nPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MGMwN2EtMDMyMy00NDI0LWFlYjMt
ZjY1ODI2ZmZjYmY4LzEvclIweGREOHZDY2ptTjl3cmNndzlaMTJtVnZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MGMwN2EtMDMyMy00NDI0LWFlYjMtZjY1ODI2ZmZjYmY4
LzEvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+T/MA0G
CSqGSIb3DQEBCwUAA4IBAQDLF9QoSnRcxOq6290FE6COyCanuyBZbA/VuHLVosxC
IrD03OB/ULa55NwE9VqLt/YR46diGAjnJGeq+GBQuRkICZADc9fbBKEUlNbWBwOg
xQog1nSTq4ManGM3vQOm7UnO45DjkKwkRK3X9YLnvbhln2k/J5/XJGnmdV7mXbLd
dpUh44pzamy6sqfK2Hv0neZiMXu9aENpQrIElpKVUWMlYqHQNg2LXCF/0y5pHLVq
boWeqk5P1+ULeqRPzbb3v8/C9RGN2XHSJo4Wwre24W8DA2K92CSKA0HUg+dxUtks
YQA2tLsOwovf5LUyaDH8d3CtEfEn6wERxA2CuDBuh5pZ
-----END CERTIFICATE-----
Generated at Sat May 3 12:18:09 2025 by rpki-client