Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s7VLlPBRGby112PVoJq_PYHBJ1E.roa
File: s7VLlPBRGby112PVoJq_PYHBJ1E.roa (raw, json)
Hash identifier: GuZ8unCHTjqo4M9RCBvr2n51/s0iHAdON4j3yzbEhTA=
Subject key identifier: B3:B5:4B:94:F0:51:19:BC:B5:D7:63:D5:A0:9A:BF:3D:81:C1:27:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190E880FB131987B89C277E619B9FC2AA57
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s7VLlPBRGby112PVoJq_PYHBJ1E.roa
Signing time: Thu 25 Jul 2024 06:08:05 +0000
ROA not before: Thu 25 Jul 2024 06:08:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 87.121.105.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 06:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:80:fb:13:19:87:b8:9c:27:7e:61:9b:9f:c2:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 06:08:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3b54b94f05119bcb5d763d5a09abf3d81c12751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:05:e1:b5:ed:48:ec:0d:e5:fa:74:83:cf:
11:a7:26:49:85:f7:4e:92:82:4c:72:3d:a0:23:97:
d3:ad:02:da:de:81:f5:24:2b:82:20:cd:a7:ab:8b:
4f:5e:41:dd:c4:85:08:b8:38:47:ef:f0:c5:62:2e:
87:b5:06:05:dc:3a:65:29:74:e1:7b:55:6a:aa:a5:
87:a3:12:75:d4:c3:94:84:6c:ed:26:8c:23:1f:61:
ed:2d:f2:fc:2c:8d:5d:f3:7e:f8:ce:e5:c8:27:36:
ac:3b:bc:52:9e:ac:a3:21:58:52:c7:69:fc:4b:24:
38:cf:36:84:00:3a:53:0e:71:62:5f:4b:1a:2c:90:
c2:3e:54:2c:72:f8:52:25:25:b7:b5:ef:01:6e:2c:
13:3e:dc:26:55:27:96:8e:9e:d4:99:0a:61:cc:ee:
f0:d7:9e:f3:56:02:8b:71:2b:cd:2b:d7:18:48:0c:
06:f3:0c:a5:dd:8e:1c:53:7a:77:1e:16:ca:9c:93:
2f:84:ad:19:4a:83:9f:64:c3:9f:4a:35:57:62:ed:
ca:d3:d0:5d:04:d1:75:70:10:4a:39:a1:5c:32:2c:
1a:3e:76:1a:4b:7b:a4:01:ac:be:eb:73:48:c9:0f:
5d:34:89:18:2a:da:40:b1:37:7e:b6:e9:8a:c7:13:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:4B:94:F0:51:19:BC:B5:D7:63:D5:A0:9A:BF:3D:81:C1:27:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s7VLlPBRGby112PVoJq_PYHBJ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.105.0/24
94.103.125.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7e:86:08:fe:16:cb:c0:b2:1a:e6:73:7e:ec:b3:c0:58:af:
db:ad:e1:bc:1c:dd:c9:cc:ce:48:fc:b5:e1:27:a4:90:54:29:
76:00:fc:81:d6:f2:66:dc:ed:ef:a8:cd:84:6c:f7:2f:45:cc:
27:3d:a6:47:46:f7:74:9b:91:76:f5:68:e5:bc:29:f4:be:61:
8c:88:37:9a:f4:12:7a:2f:dc:da:20:85:3b:e0:6d:13:0e:9a:
ee:5f:55:ed:38:07:1f:0e:55:e3:47:04:1c:68:20:5a:ba:d2:
32:6c:51:8a:b1:3c:47:d2:95:71:58:03:a3:b4:8c:9c:79:9d:
c7:eb:ce:89:4b:db:13:b5:af:af:8d:9b:f7:c1:65:11:95:c3:
55:10:7d:0a:73:f0:9a:80:4e:f1:72:21:ae:3a:87:20:25:f0:
b0:19:32:3c:9b:21:2e:56:64:9b:3f:75:cb:41:e5:3d:5d:40:
94:cb:ed:b5:5e:9a:22:f2:5c:dd:46:80:41:d2:bf:39:66:37:
f3:95:89:0b:96:b5:20:1b:dc:55:7c:ae:2c:d7:24:c3:b6:de:
5c:3e:d3:0e:c8:a8:95:d2:49:6b:39:5e:d3:71:c5:14:e8:ff:
2f:66:a8:12:10:52:c7:cd:d8:8a:8e:7c:29:8d:a9:9c:68:6d:
e2:02:bb:95
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZDogPsTGYe4nCd+YZufwqpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzI1MDYwODA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2I1NGI5NGYwNTExOWJjYjVkNzYzZDVhMDlhYmYzZDgxYzEyNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4gF4bXtSOwN5fp0g88RpyZJhfdO
koJMcj2gI5fTrQLa3oH1JCuCIM2nq4tPXkHdxIUIuDhH7/DFYi6HtQYF3DplKXTh
e1VqqqWHoxJ11MOUhGztJowjH2HtLfL8LI1d8374zuXIJzasO7xSnqyjIVhSx2n8
SyQ4zzaEADpTDnFiX0saLJDCPlQscvhSJSW3te8BbiwTPtwmVSeWjp7UmQphzO7w
157zVgKLcSvNK9cYSAwG8wyl3Y4cU3p3HhbKnJMvhK0ZSoOfZMOfSjVXYu3K09Bd
BNF1cBBKOaFcMiwaPnYaS3ukAay+63NIyQ9dNIkYKtpAsTd+tumKxxMWlQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLO1S5TwURm8tddj1aCavz2BwSdRMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvczdWTGxQQlJHYnkxMTJQVm9KcV9QWUhCSjFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV3lpAwQA
Xmd9AwQAwSUsMA0GCSqGSIb3DQEBCwUAA4IBAQBjfoYI/hbLwLIa5nN+7LPAWK/b
reG8HN3JzM5I/LXhJ6SQVCl2APyB1vJm3O3vqM2EbPcvRcwnPaZHRvd0m5F29Wjl
vCn0vmGMiDea9BJ6L9zaIIU74G0TDpruX1XtOAcfDlXjRwQcaCBautIybFGKsTxH
0pVxWAOjtIyceZ3H686JS9sTta+vjZv3wWURlcNVEH0Kc/CagE7xciGuOocgJfCw
GTI8myEuVmSbP3XLQeU9XUCUy+21Xpoi8lzdRoBB0r85ZjfzlYkLlrUgG9xVfK4s
1yTDtt5cPtMOyKiV0klrOV7TccUU6P8vZqgSEFLHzdiKjnwpjamcaG3iAruV
-----END CERTIFICATE-----
Generated at Tue May 13 17:28:12 2025 by rpki-client