Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0arsF2VREI7pwfooUJbuoN0Xld4.roa
File: 0arsF2VREI7pwfooUJbuoN0Xld4.roa (raw, json)
Hash identifier: Qiq73V16QXFuJhJdjL0dSViz+56pWRe1JOMExtSFJco=
Subject key identifier: D1:AA:EC:17:65:51:10:8E:E9:C1:FA:28:50:96:EE:A0:DD:17:95:DE
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01952484B7FFE77FE8121FAF8A10B2A62E22
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0arsF2VREI7pwfooUJbuoN0Xld4.roa
Signing time: Thu 20 Feb 2025 18:00:32 +0000
ROA not before: Thu 20 Feb 2025 18:00:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399195
IP address blocks: 150.107.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 28 Mar 2025 16:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:84:b7:ff:e7:7f:e8:12:1f:af:8a:10:b2:a6:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 20 18:00:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1aaec176551108ee9c1fa285096eea0dd1795de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:73:7a:fc:a4:e3:30:07:f7:8d:f9:53:33:
c5:e6:3b:d2:02:97:19:2b:01:97:e1:5b:eb:69:d9:
4b:93:55:28:29:1b:d2:b9:a6:ee:9a:38:43:76:d6:
3b:0b:ef:94:74:87:64:86:a9:25:2d:fe:f6:7d:8f:
45:44:b7:3e:bb:17:d9:f4:82:23:7a:8f:d3:a8:9d:
24:bb:e7:5b:4d:97:bd:e1:42:be:78:68:59:e6:9c:
86:9d:cc:64:23:47:af:c8:bb:1f:3f:6b:40:28:62:
ef:f9:db:68:fc:6c:e1:51:6f:c3:3a:1b:6e:40:06:
87:a0:4a:cf:a8:6b:43:02:60:d9:24:f9:8c:e4:54:
32:81:d0:a9:6b:cf:08:91:2a:c5:50:f0:32:4d:b4:
43:fc:31:97:e1:58:03:63:cb:ce:8f:93:3e:f6:51:
f5:f5:ef:91:b4:1f:6c:58:ac:68:e3:cf:8e:b5:be:
cc:11:c2:6d:d2:eb:17:49:9b:cf:5c:38:b3:86:e6:
d0:3e:57:eb:e1:8d:c6:96:4d:79:be:e3:57:09:8f:
77:25:32:68:58:51:f1:82:8f:de:67:e8:21:e4:78:
e1:c5:25:34:f4:cd:89:01:d5:7f:83:f8:dd:76:81:
53:8d:4b:03:ac:9c:69:bb:8d:eb:0b:1f:20:ca:a6:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:EC:17:65:51:10:8E:E9:C1:FA:28:50:96:EE:A0:DD:17:95:DE
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/0arsF2VREI7pwfooUJbuoN0Xld4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:42:3f:54:eb:d3:cb:1d:ce:0b:db:c8:cc:6f:0e:54:56:09:
96:dd:6c:63:cc:a6:8c:84:a4:2b:ab:02:36:03:15:97:c3:64:
7e:e1:27:85:cd:ed:cf:c6:f6:f1:20:fa:d2:64:a3:32:87:ff:
80:9e:1a:a7:d0:ce:b6:65:fd:49:db:88:d9:63:33:8b:9c:c8:
cd:39:a2:76:36:61:53:3c:a8:56:63:77:04:18:d5:d7:b0:2f:
fa:1c:d4:d6:6d:e5:4a:ac:be:6b:5a:ef:ba:96:f5:a3:eb:b1:
77:cb:30:38:82:dc:e2:ce:b5:ff:54:fb:13:c3:7e:92:e0:b9:
b6:40:9f:ee:b9:04:e3:24:7e:e3:53:3a:5b:25:a8:5b:9d:a3:
78:50:07:38:6c:cc:3d:16:5c:3c:68:ee:23:97:53:43:d0:cf:
fc:aa:a7:d9:7f:72:f9:b2:10:81:53:39:1a:7d:17:b4:d0:5a:
10:1e:6e:a4:45:86:1b:e6:9a:38:29:a0:52:ba:a4:cc:13:ba:
ed:51:3d:e3:a6:b2:e8:a9:12:b0:7e:2b:b8:d7:06:46:f5:ce:
a0:8d:a6:d8:34:59:de:7e:52:19:88:6e:5d:ff:9e:54:59:a9:
3a:6f:4f:41:cc:d0:57:b4:1b:01:76:f2:75:8b:08:4a:30:32:
7f:27:70:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUkhLf/53/oEh+vihCypi4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjUwMjIwMTgwMDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWFhZWMxNzY1NTExMDhlZTljMWZhMjg1MDk2ZWVhMGRkMTc5NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdJzevyk4zAH9435UzPF5jvSApcZ
KwGX4VvradlLk1UoKRvSuabumjhDdtY7C++UdIdkhqklLf72fY9FRLc+uxfZ9IIj
eo/TqJ0ku+dbTZe94UK+eGhZ5pyGncxkI0evyLsfP2tAKGLv+dto/GzhUW/DOhtu
QAaHoErPqGtDAmDZJPmM5FQygdCpa88IkSrFUPAyTbRD/DGX4VgDY8vOj5M+9lH1
9e+RtB9sWKxo48+Otb7MEcJt0usXSZvPXDizhubQPlfr4Y3Glk15vuNXCY93JTJo
WFHxgo/eZ+gh5HjhxSU09M2JAdV/g/jddoFTjUsDrJxpu43rCx8gyqbTvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNGq7BdlURCO6cH6KFCW7qDdF5XeMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvMGFyc0YyVlJFSTdwd2Zvb1VKYnVvTjBYbGQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmswMA0G
CSqGSIb3DQEBCwUAA4IBAQBfQj9U69PLHc4L28jMbw5UVgmW3WxjzKaMhKQrqwI2
AxWXw2R+4SeFze3PxvbxIPrSZKMyh/+Anhqn0M62Zf1J24jZYzOLnMjNOaJ2NmFT
PKhWY3cEGNXXsC/6HNTWbeVKrL5rWu+6lvWj67F3yzA4gtzizrX/VPsTw36S4Lm2
QJ/uuQTjJH7jUzpbJahbnaN4UAc4bMw9Flw8aO4jl1ND0M/8qqfZf3L5shCBUzka
fRe00FoQHm6kRYYb5po4KaBSuqTME7rtUT3jprLoqRKwfiu41wZG9c6gjabYNFne
flIZiG5d/55UWak6b09BzNBXtBsBdvJ1iwhKMDJ/J3DK
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:45 2025 by rpki-client