Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EQ9j0cJU4yWHKp3_fZvZfR1u488.roa
File: EQ9j0cJU4yWHKp3_fZvZfR1u488.roa (raw, json)
Hash identifier: nR5sM9IEnmgyf/cFcl14NCZyoxwhcscLR9kBpejohBo=
Subject key identifier: 11:0F:63:D1:C2:54:E3:25:87:2A:9D:FF:7D:9B:D9:7D:1D:6E:E3:CF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01965A5A03245395B93081E825EA3097E0D3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EQ9j0cJU4yWHKp3_fZvZfR1u488.roa
Signing time: Mon 21 Apr 2025 21:56:10 +0000
ROA not before: Mon 21 Apr 2025 21:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214478
IP address blocks: 109.176.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 14:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5a:03:24:53:95:b9:30:81:e8:25:ea:30:97:e0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 21 21:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110f63d1c254e325872a9dff7d9bd97d1d6ee3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:a8:cd:05:b5:85:27:78:f5:0f:f4:71:99:
1c:18:25:7a:59:9f:01:d1:a9:83:57:6c:50:ff:30:
29:89:65:57:eb:46:fe:f1:bb:74:36:37:1a:20:2e:
06:28:d5:e3:e2:b6:6c:80:c4:ca:49:ba:0d:f0:eb:
7b:8e:74:67:10:3a:ca:2a:f1:39:b8:28:1c:f0:36:
a1:03:11:77:75:e7:68:47:6f:c3:7c:ad:b3:21:69:
1c:9d:7f:77:86:d6:f4:ad:d9:44:d0:e6:c1:eb:66:
c3:45:a4:f7:54:42:c3:8e:3a:d1:89:6d:af:71:cf:
93:fe:3d:2f:c2:53:83:a3:cb:98:6d:35:91:6c:ee:
2c:a6:d2:ae:c3:67:d0:0c:e4:2b:9a:6e:15:09:2f:
2d:49:f2:35:d4:f4:cb:b7:1c:d8:5a:b8:0c:3b:ac:
f8:f3:c6:1a:81:61:40:11:03:74:46:dd:8a:97:b9:
e8:92:20:d2:ae:94:2e:eb:3b:82:2a:ad:33:9e:65:
eb:ae:17:3f:47:15:af:de:ba:7e:39:27:56:00:3d:
8b:25:af:48:68:e2:35:ba:f1:0f:fc:76:d2:a6:c2:
ca:ae:09:f6:fd:49:a6:a5:ed:8e:a2:a0:c8:9d:ee:
06:2d:8b:3d:88:e6:08:2e:3d:9f:26:56:d3:7f:32:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:63:D1:C2:54:E3:25:87:2A:9D:FF:7D:9B:D9:7D:1D:6E:E3:CF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EQ9j0cJU4yWHKp3_fZvZfR1u488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.203.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6b:41:54:e6:7e:49:17:1f:69:e8:fe:4c:17:a2:19:6d:8e:
d3:b1:51:09:c1:d2:d0:e6:65:93:7d:22:c8:8e:4f:87:2f:c8:
81:65:8c:d5:d8:51:e7:bb:11:9c:1b:a2:c9:08:2a:f0:67:73:
3b:83:c2:87:d6:f7:66:5f:68:89:8b:2c:5b:4a:c1:e1:a5:c5:
12:3a:11:d6:25:fc:8a:1d:82:c3:74:8b:0a:4a:9f:ee:a9:e4:
46:67:a4:32:97:3e:45:a3:70:5d:39:91:18:5c:89:51:c2:2b:
23:6a:a5:9a:71:f8:05:9f:e1:52:96:22:c2:83:79:ab:c1:69:
e8:a9:d3:11:42:49:f8:94:3d:56:bb:3a:d8:e4:f4:ff:e0:4b:
e2:c8:15:bb:62:6e:7b:f8:ee:57:ec:10:ae:9d:85:ec:dd:49:
29:e3:b5:c7:48:8f:45:0e:48:5e:14:dd:11:64:cd:31:80:80:
74:a0:50:19:35:9d:93:cc:7f:39:3d:2c:1c:b3:27:1c:4f:71:
dc:e6:31:e3:60:43:15:ff:59:43:a1:fc:18:8a:f8:ad:3a:41:
46:c2:64:e5:61:7f:57:0c:3a:c9:69:ad:0e:5c:52:fa:50:b1:
a5:e5:33:11:e9:9a:92:04:30:53:aa:0e:a4:fe:c6:f3:c6:8b:
72:03:c6:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZaWgMkU5W5MIHoJeowl+DTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNDIxMjE1NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTBmNjNkMWMyNTRlMzI1ODcyYTlkZmY3ZDliZDk3ZDFkNmVlM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAOozQW1hSd49Q/0cZkcGCV6WZ8B
0amDV2xQ/zApiWVX60b+8bt0NjcaIC4GKNXj4rZsgMTKSboN8Ot7jnRnEDrKKvE5
uCgc8DahAxF3dedoR2/DfK2zIWkcnX93htb0rdlE0ObB62bDRaT3VELDjjrRiW2v
cc+T/j0vwlODo8uYbTWRbO4sptKuw2fQDOQrmm4VCS8tSfI11PTLtxzYWrgMO6z4
88YagWFAEQN0Rt2Kl7nokiDSrpQu6zuCKq0znmXrrhc/RxWv3rp+OSdWAD2LJa9I
aOI1uvEP/HbSpsLKrgn2/Ummpe2OoqDIne4GLYs9iOYILj2fJlbTfzJm/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEPY9HCVOMlhyqd/32b2X0dbuPPMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRVE5ajBjSlU0eVdIS3AzX2ZadlpmUjF1NDg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDLMA0G
CSqGSIb3DQEBCwUAA4IBAQABa0FU5n5JFx9p6P5MF6IZbY7TsVEJwdLQ5mWTfSLI
jk+HL8iBZYzV2FHnuxGcG6LJCCrwZ3M7g8KH1vdmX2iJiyxbSsHhpcUSOhHWJfyK
HYLDdIsKSp/uqeRGZ6Qylz5Fo3BdOZEYXIlRwisjaqWacfgFn+FSliLCg3mrwWno
qdMRQkn4lD1WuzrY5PT/4EviyBW7Ym57+O5X7BCunYXs3Ukp47XHSI9FDkheFN0R
ZM0xgIB0oFAZNZ2TzH85PSwcsyccT3Hc5jHjYEMV/1lDofwYivitOkFGwmTlYX9X
DDrJaa0OXFL6ULGl5TMR6ZqSBDBTqg6k/sbzxotyA8Yd
-----END CERTIFICATE-----
Generated at Thu May 1 15:28:44 2025 by rpki-client