Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-6iu7fPNwRW6w9VPlEHuHrkUmRc.roa
File: 1-6iu7fPNwRW6w9VPlEHuHrkUmRc.roa (raw, json)
Hash identifier: w/syP2tEDp4YDojxNs2MsJXeWuew4djjZLhVBKhGTNc=
Subject key identifier: FB:A8:AE:ED:F3:CD:C1:15:BA:C3:D5:4F:94:41:EE:1E:B9:14:99:17
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01942143E42E134C7886DB43E5F0701A8C7B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-6iu7fPNwRW6w9VPlEHuHrkUmRc.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34636
IP address blocks: 195.190.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 10:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e4:2e:13:4c:78:86:db:43:e5:f0:70:1a:8c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fba8aeedf3cdc115bac3d54f9441ee1eb9149917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:21:7c:b2:cc:9d:44:50:e0:63:59:3c:8d:00:
39:78:38:d2:bf:87:f2:35:fb:2c:a6:a0:8f:eb:2c:
cd:ad:c9:98:96:e7:11:cf:1d:d7:83:11:2e:f8:76:
db:b7:d2:2f:f8:a1:5b:98:31:01:12:a4:d6:6b:bc:
74:2e:67:8e:40:75:9f:a0:b3:3a:78:86:2f:33:90:
ee:c0:0f:61:e4:09:02:b7:b8:02:c6:44:a0:35:98:
af:57:f6:eb:b5:88:05:95:4f:99:44:e3:3a:24:83:
a5:2e:a0:7a:6a:5a:19:33:62:e5:08:8d:8b:1c:53:
a3:46:a7:7e:5e:ca:84:0d:21:b2:75:e3:09:24:78:
48:66:de:f6:2e:6b:f4:c5:ec:97:af:8a:63:c0:d5:
e6:ae:27:a3:00:32:3d:9d:70:f2:b7:0d:19:ad:1b:
d6:9d:1d:34:b5:02:3c:ed:d7:4b:07:c9:3f:a2:19:
8d:14:0e:d7:5b:71:9a:38:ed:41:62:d9:0e:c6:29:
9f:45:9e:a6:31:67:33:45:92:24:b5:fb:57:ce:e9:
ac:1f:35:df:95:ce:45:b3:22:78:15:7f:ab:53:e9:
8b:3b:b3:b3:85:b0:fa:dd:b1:3e:44:f7:ad:15:18:
b7:e5:67:48:a1:59:72:26:cd:d6:bf:c9:01:3b:25:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:AE:ED:F3:CD:C1:15:BA:C3:D5:4F:94:41:EE:1E:B9:14:99:17
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-6iu7fPNwRW6w9VPlEHuHrkUmRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:21:c2:c1:44:84:a8:d6:c5:63:b9:f7:87:3b:6a:a5:d6:24:
dd:71:b2:60:ac:8f:35:81:9d:67:6a:32:4d:53:c1:3f:d3:76:
60:ef:16:52:7f:05:34:b3:9e:43:80:ad:8e:66:6c:ca:37:55:
40:00:2e:18:b2:72:37:b3:59:52:d2:89:b5:2d:8b:f4:df:81:
9b:30:1b:ab:12:01:a1:52:7a:eb:7f:c3:ea:c7:cb:d3:87:8f:
07:df:51:39:42:71:08:19:22:1b:68:d4:a2:e5:b7:9b:a4:35:
77:53:7a:6e:56:12:25:32:17:d4:2d:33:78:c7:2a:6a:26:9b:
cd:4d:b9:d6:e1:06:ef:39:fb:e7:86:e7:79:9e:be:aa:6c:b0:
82:0a:32:8b:f8:cb:1d:a8:57:1b:9f:8e:e3:17:18:f6:f8:0d:
d2:96:e1:cf:4b:aa:7a:f5:fa:ed:59:4c:d9:32:cd:43:f5:01:
90:fa:f0:29:2a:d2:ed:c8:da:91:32:bc:a6:76:0c:32:87:94:
30:e7:dd:a7:a7:15:d8:7c:5e:36:03:68:20:bd:02:b7:95:c7:
56:35:1c:7d:1b:8b:49:e9:ab:db:41:37:9f:58:65:ab:1e:49:
b5:fe:3b:21:19:29:73:b8:c5:4b:33:39:85:01:5a:18:c7:53:
16:cd:95:6d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhQ+QuE0x4httD5fBwGox7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjUwMTAxMDk0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmE4YWVlZGYzY2RjMTE1YmFjM2Q1NGY5NDQxZWUxZWI5MTQ5OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/CF8ssydRFDgY1k8jQA5eDjSv4fy
NfsspqCP6yzNrcmYlucRzx3XgxEu+Hbbt9Iv+KFbmDEBEqTWa7x0LmeOQHWfoLM6
eIYvM5DuwA9h5AkCt7gCxkSgNZivV/brtYgFlU+ZROM6JIOlLqB6aloZM2LlCI2L
HFOjRqd+XsqEDSGydeMJJHhIZt72Lmv0xeyXr4pjwNXmriejADI9nXDytw0ZrRvW
nR00tQI87ddLB8k/ohmNFA7XW3GaOO1BYtkOximfRZ6mMWczRZIktftXzumsHzXf
lc5FsyJ4FX+rU+mLO7OzhbD63bE+RPetFRi35WdIoVlyJs3Wv8kBOyUIewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPuoru3zzcEVusPVT5RB7h65FJkXMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvMS02aXU3ZlBOd1JXNnc5VlBsRUh1SHJrVW1SYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2YvZmQzNjJmLWFmY2ItNGNmNS05OGM2LTA5NDg5ODllNmQ1
NS8xL2ZEMENLaVFNNXg0S2JoNmFyZ0VTMm9RTXcwcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMO+kDAN
BgkqhkiG9w0BAQsFAAOCAQEAXiHCwUSEqNbFY7n3hztqpdYk3XGyYKyPNYGdZ2oy
TVPBP9N2YO8WUn8FNLOeQ4CtjmZsyjdVQAAuGLJyN7NZUtKJtS2L9N+BmzAbqxIB
oVJ663/D6sfL04ePB99ROUJxCBkiG2jUouW3m6Q1d1N6blYSJTIX1C0zeMcqaiab
zU251uEG7zn754bneZ6+qmywggoyi/jLHahXG5+O4xcY9vgN0pbhz0uqevX67VlM
2TLNQ/UBkPrwKSrS7cjakTK8pnYMMoeUMOfdp6cV2HxeNgNoIL0Ct5XHVjUcfRuL
Semr20E3n1hlqx5Jtf47IRkpc7jFSzM5hQFaGMdTFs2VbQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:13:12 2025 by rpki-client