Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uK7Zvoe1BBbctk2f1YMnEbqE7xg.roa
File: uK7Zvoe1BBbctk2f1YMnEbqE7xg.roa (raw, json)
Hash identifier: /+o12nDAzcyhSln4gDl/5eO0OdFY+OG5URiBay1nnSE=
Subject key identifier: B8:AE:D9:BE:87:B5:04:16:DC:B6:4D:9F:D5:83:27:11:BA:84:EF:18
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0193620AB88716203C919C6FFCF83274CBB0
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uK7Zvoe1BBbctk2f1YMnEbqE7xg.roa
Signing time: Mon 25 Nov 2024 06:38:09 +0000
ROA not before: Mon 25 Nov 2024 06:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 77.111.119.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 13:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:0a:b8:87:16:20:3c:91:9c:6f:fc:f8:32:74:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 25 06:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8aed9be87b50416dcb64d9fd5832711ba84ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fb:96:cd:a5:d9:01:bd:72:30:7a:89:ae:cb:
63:2f:cd:3b:ee:0a:54:96:0f:d1:29:08:6b:e5:69:
2f:9d:61:bc:ac:6b:f4:4e:93:da:f0:7b:f2:9b:f1:
9c:48:70:e3:a4:bd:c4:3d:20:8a:da:5b:ee:1d:d9:
59:0b:b9:03:1e:89:76:31:75:a0:82:5e:22:e6:34:
b8:0e:e5:d6:1c:e5:ec:7e:f8:e1:6a:92:e9:ed:c2:
cc:d2:41:83:3c:f4:fc:8d:61:08:49:1d:45:1a:68:
83:99:ee:48:89:ee:b1:0c:a7:c6:bf:4b:e7:bc:2b:
f1:4b:91:7d:98:1c:0d:5a:8d:56:da:4c:41:cd:a6:
b2:e0:32:a9:b3:14:c7:c5:c0:2b:1d:ba:c9:4a:50:
3d:ae:9e:60:ee:cc:15:a4:79:c0:d0:a2:d1:dd:9d:
24:27:84:72:a0:5f:7f:fa:e0:1e:71:de:2e:47:a0:
c0:46:84:84:ab:c1:03:e8:74:fe:d0:64:4c:b9:2e:
d3:f7:ed:3c:8a:92:ed:45:33:26:b0:91:a9:24:63:
50:29:54:65:f7:6d:a7:ba:5b:ff:44:a6:2c:7c:43:
35:6d:df:76:7f:88:d3:2c:49:1b:d5:06:54:67:c8:
98:91:72:92:29:13:ea:89:50:4e:d7:79:f5:34:84:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AE:D9:BE:87:B5:04:16:DC:B6:4D:9F:D5:83:27:11:BA:84:EF:18
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/uK7Zvoe1BBbctk2f1YMnEbqE7xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.119.0/24
92.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
80:66:12:51:30:72:d0:92:9d:3c:6e:bc:75:b0:3c:fe:f3:88:
d5:f0:9f:60:ee:0f:d5:27:47:eb:f9:18:c1:e0:6a:9b:c2:6b:
ef:c7:8b:22:99:72:ea:59:a9:53:97:95:fb:f1:3e:02:2e:ed:
75:40:8f:1b:a4:06:ef:5a:ca:85:e0:e0:42:c0:86:aa:1a:02:
8f:4e:5f:83:43:24:54:a7:f8:8b:ba:08:e3:6b:3b:fb:b1:8d:
94:b6:ad:3e:10:f6:a9:31:11:2a:03:51:d0:37:bb:75:64:55:
d9:0b:68:9e:e2:1a:58:8b:a2:81:7a:7d:86:6f:4a:2f:08:25:
b5:5d:10:5e:bd:c3:f1:8c:9b:7f:57:01:98:12:7d:28:3b:fb:
5d:af:bf:a8:68:a6:f3:38:a7:2d:b6:01:0f:15:60:59:65:f4:
63:b2:71:7f:eb:50:ea:2f:f9:cb:dd:de:10:5c:25:27:f5:14:
62:32:fc:78:cf:7c:b7:60:de:50:37:b2:2c:52:ec:66:05:9e:
04:59:98:9d:4a:e5:25:16:3c:d9:0e:56:74:22:15:11:c5:81:
71:29:a2:17:d2:da:10:3c:1e:7d:8b:ef:e1:c1:17:28:9d:6e:
df:ba:51:e5:66:1c:6a:6f:b3:12:df:a2:91:5b:e4:16:f8:0e:
eb:28:de:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZNiCriHFiA8kZxv/PgydMuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjQxMTI1MDYzODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGFlZDliZTg3YjUwNDE2ZGNiNjRkOWZkNTgzMjcxMWJhODRlZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fuWzaXZAb1yMHqJrstjL8077gpU
lg/RKQhr5WkvnWG8rGv0TpPa8Hvym/GcSHDjpL3EPSCK2lvuHdlZC7kDHol2MXWg
gl4i5jS4DuXWHOXsfvjhapLp7cLM0kGDPPT8jWEISR1FGmiDme5Iie6xDKfGv0vn
vCvxS5F9mBwNWo1W2kxBzaay4DKpsxTHxcArHbrJSlA9rp5g7swVpHnA0KLR3Z0k
J4RyoF9/+uAecd4uR6DARoSEq8ED6HT+0GRMuS7T9+08ipLtRTMmsJGpJGNQKVRl
922nulv/RKYsfEM1bd92f4jTLEkb1QZUZ8iYkXKSKRPqiVBO13n1NIR7ywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLiu2b6HtQQW3LZNn9WDJxG6hO8YMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvdUs3WnZvZTFCQmJjdGsyZjFZTW5FYnFFN3hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATW93AwQA
XD1nMA0GCSqGSIb3DQEBCwUAA4IBAQCAZhJRMHLQkp08brx1sDz+84jV8J9g7g/V
J0fr+RjB4Gqbwmvvx4simXLqWalTl5X78T4CLu11QI8bpAbvWsqF4OBCwIaqGgKP
Tl+DQyRUp/iLugjjazv7sY2Utq0+EPapMREqA1HQN7t1ZFXZC2ie4hpYi6KBen2G
b0ovCCW1XRBevcPxjJt/VwGYEn0oO/tdr7+oaKbzOKcttgEPFWBZZfRjsnF/61Dq
L/nL3d4QXCUn9RRiMvx4z3y3YN5QN7IsUuxmBZ4EWZidSuUlFjzZDlZ0IhURxYFx
KaIX0toQPB59i+/hwRconW7fulHlZhxqb7MS36KRW+QW+A7rKN4D
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:53:10 2025 by rpki-client