Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/pwS6QQr26TKYSio_0mIBrNvfY-w.roa
File: pwS6QQr26TKYSio_0mIBrNvfY-w.roa (raw, json)
Hash identifier: OMxtAgmowIzGeR5SQVokt/0NpNNUdtNfPwiiBEcSrcg=
Subject key identifier: A7:04:BA:41:0A:F6:E9:32:98:4A:2A:3F:D2:62:01:AC:DB:DF:63:EC
Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial: 01937408BCE0A941337080F3EF157A37B9BD
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/pwS6QQr26TKYSio_0mIBrNvfY-w.roa
Signing time: Thu 28 Nov 2024 18:29:09 +0000
ROA not before: Thu 28 Nov 2024 18:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8368
IP address blocks: 92.118.212.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Nov 2024 20:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:08:bc:e0:a9:41:33:70:80:f3:ef:15:7a:37:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
Validity
Not Before: Nov 28 18:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a704ba410af6e932984a2a3fd26201acdbdf63ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:f9:f5:6e:43:a3:18:3b:3a:c8:99:45:8b:
89:b1:36:02:a3:27:f7:11:f8:6a:1a:8b:09:85:77:
54:4a:85:36:a6:0f:7e:8e:01:89:c4:41:88:d9:57:
62:4d:97:8a:99:3a:b6:1d:38:93:b2:c1:6d:f9:eb:
48:4a:49:4d:ac:59:87:4c:b9:61:4a:b5:ab:0c:7d:
25:14:71:80:22:90:4b:27:4e:74:fe:3c:1a:4b:30:
23:13:f3:6a:48:92:b0:64:fb:a2:be:ac:9b:be:0b:
04:e2:a3:ee:d1:b6:60:71:d6:98:bb:25:02:0f:ca:
b7:3d:94:f8:35:b5:bc:eb:73:a5:98:06:05:0c:50:
3b:23:6f:bb:7f:54:ae:e7:1d:15:f7:61:fa:57:5b:
fb:f0:87:5f:01:65:41:90:f2:db:3d:a8:3f:af:be:
da:41:fb:1d:53:8f:07:06:18:65:0d:f8:f2:1a:13:
5c:c1:9a:ea:87:1b:32:8a:0a:2e:c3:26:50:ef:1f:
29:04:53:33:40:f5:3b:ea:4e:dc:6c:16:a5:c1:30:
14:e4:12:fb:5c:7c:26:63:c6:0c:7a:2c:1e:b2:79:
cb:f5:d5:dc:d7:44:17:13:1f:e1:ae:f9:3b:e1:b2:
c6:71:8a:85:e3:ef:5c:46:93:bc:9c:99:5a:55:ae:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:04:BA:41:0A:F6:E9:32:98:4A:2A:3F:D2:62:01:AC:DB:DF:63:EC
X509v3 Authority Key Identifier:
keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/pwS6QQr26TKYSio_0mIBrNvfY-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.212.0/23
Signature Algorithm: sha256WithRSAEncryption
21:de:56:95:bf:dd:eb:4d:39:18:73:d6:d6:ff:df:d9:6c:b9:
64:8b:d4:9d:8c:55:1b:ba:e5:e8:ad:62:c0:36:61:5e:c9:41:
e5:bf:3f:cb:24:c0:bc:9b:c0:21:44:73:d8:8d:02:ea:7b:7d:
84:b9:ad:ec:66:fb:36:d6:2e:b0:eb:2c:d5:2b:2d:62:94:76:
40:69:4d:ff:c4:e6:8d:c6:b7:88:42:70:21:c3:12:d4:b0:3c:
42:5f:23:71:e5:cb:5d:8a:61:8d:5f:a3:92:dd:05:40:ec:7a:
32:7e:6a:b4:43:6b:01:e9:a2:25:de:cc:fc:cb:24:28:99:6e:
9d:87:e6:64:2a:4d:a5:34:00:db:1c:94:e5:94:0f:4d:90:78:
ed:d7:8a:41:ad:29:90:a0:12:a9:27:95:e3:be:a5:d8:cb:41:
f4:61:f5:7f:65:0b:dd:d3:78:99:99:1b:c9:c6:ac:e0:17:c1:
d2:0f:b5:52:86:25:6f:66:6d:3d:e3:4d:23:41:71:97:bc:5d:
d6:40:8b:e4:76:e2:1d:56:5c:5c:92:1a:5e:6b:66:e0:a6:99:
d3:3f:75:97:92:a5:ef:8c:26:82:98:d6:65:de:e8:3c:11:75:
a1:16:49:8b:05:cb:1d:d4:95:2f:07:e0:34:34:aa:34:d9:61:
0b:74:8f:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN0CLzgqUEzcIDz7xV6N7m9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw
ZGYxMjQwHhcNMjQxMTI4MTgyOTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzA0YmE0MTBhZjZlOTMyOTg0YTJhM2ZkMjYyMDFhY2RiZGY2M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwz59W5Doxg7OsiZRYuJsTYCoyf3
EfhqGosJhXdUSoU2pg9+jgGJxEGI2VdiTZeKmTq2HTiTssFt+etISklNrFmHTLlh
SrWrDH0lFHGAIpBLJ050/jwaSzAjE/NqSJKwZPuivqybvgsE4qPu0bZgcdaYuyUC
D8q3PZT4NbW863OlmAYFDFA7I2+7f1Su5x0V92H6V1v78IdfAWVBkPLbPag/r77a
QfsdU48HBhhlDfjyGhNcwZrqhxsyigouwyZQ7x8pBFMzQPU76k7cbBalwTAU5BL7
XHwmY8YMeiwesnnL9dXc10QXEx/hrvk74bLGcYqF4+9cRpO8nJlaVa6MswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcEukEK9ukymEoqP9JiAazb32PsMB8GA1UdIwQY
MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt
MGI1OTFmM2ExYmYwLzEvcHdTNlFRcjI2VEtZU2lvXzBtSUJyTnZmWS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw
LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHbUMA0G
CSqGSIb3DQEBCwUAA4IBAQAh3laVv93rTTkYc9bW/9/ZbLlki9SdjFUbuuXorWLA
NmFeyUHlvz/LJMC8m8AhRHPYjQLqe32Eua3sZvs21i6w6yzVKy1ilHZAaU3/xOaN
xreIQnAhwxLUsDxCXyNx5ctdimGNX6OS3QVA7Hoyfmq0Q2sB6aIl3sz8yyQomW6d
h+ZkKk2lNADbHJTllA9NkHjt14pBrSmQoBKpJ5XjvqXYy0H0YfV/ZQvd03iZmRvJ
xqzgF8HSD7VShiVvZm09400jQXGXvF3WQIvkduIdVlxckhpea2bgppnTP3WXkqXv
jCaCmNZl3ug8EXWhFkmLBcsd1JUvB+A0NKo02WELdI+H
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:49:22 2025 by rpki-client