Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Adcqgpn-bKlzH6CtIpng7Z1Ao4c.roa
File: Adcqgpn-bKlzH6CtIpng7Z1Ao4c.roa (raw, json)
Hash identifier: /CSFqBHDlq8+8iyvrDTd6KlHgeCzOjQmQKnEJG1xd+M=
Subject key identifier: 01:D7:2A:82:99:FE:6C:A9:73:1F:A0:AD:22:99:E0:ED:9D:40:A3:87
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01942B2120FDACDEF0AA88327CA9553ED101
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Adcqgpn-bKlzH6CtIpng7Z1Ao4c.roa
Signing time: Fri 03 Jan 2025 07:46:18 +0000
ROA not before: Fri 03 Jan 2025 07:46:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 213.137.93.0/24 maxlen: 24
213.137.94.0/24 maxlen: 24
213.137.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 18:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:21:20:fd:ac:de:f0:aa:88:32:7c:a9:55:3e:d1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 3 07:46:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d72a8299fe6ca9731fa0ad2299e0ed9d40a387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:47:e6:c5:c2:45:ed:f7:7c:e1:95:cc:d7:
00:7f:bb:d6:85:9a:b4:97:eb:4c:db:47:1c:96:38:
a6:be:86:34:6b:29:95:d6:52:db:0f:93:d0:de:91:
e9:94:81:38:52:34:23:49:d2:69:8a:e7:dc:cb:f8:
d6:b3:ea:b0:f4:1e:98:77:3e:c9:0f:43:0c:64:60:
b6:9d:55:a7:e6:40:5e:66:05:72:27:7f:c9:b3:4f:
f1:6e:69:9b:64:07:d4:80:e3:ca:f3:dd:eb:78:a8:
28:14:84:95:9e:6c:5c:9a:7d:87:50:f8:c8:d9:7d:
bf:1f:82:89:be:44:13:af:1e:90:7f:7e:b8:68:c3:
bb:6c:c5:17:a2:4a:07:2a:0b:2a:3b:b5:d5:49:87:
20:2b:97:be:0c:46:f0:de:c3:2a:b9:4e:93:6e:9a:
9e:61:b1:79:f7:dd:7c:f5:4d:a1:f0:5a:12:0a:48:
a2:71:9b:79:85:d4:76:cb:43:d8:25:a9:20:20:1d:
c5:b0:52:5f:fa:94:a0:af:1a:74:7d:92:61:c8:b4:
60:ff:c9:f5:48:0d:21:b8:cb:ef:7e:6b:c7:12:81:
fd:24:13:42:ff:3f:94:31:02:21:78:66:27:a0:fb:
a0:47:d6:f6:db:ce:c3:18:57:86:e9:b3:51:1e:be:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:2A:82:99:FE:6C:A9:73:1F:A0:AD:22:99:E0:ED:9D:40:A3:87
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Adcqgpn-bKlzH6CtIpng7Z1Ao4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.93.0-213.137.95.255
Signature Algorithm: sha256WithRSAEncryption
b0:e1:a4:4c:71:31:73:f1:a5:67:88:32:ea:52:fc:f6:06:68:
ea:e6:9d:db:28:09:36:94:2f:48:97:f3:9e:2c:fd:cf:fd:87:
6c:21:8f:ff:07:20:e7:01:a4:53:fb:79:22:c5:7e:b0:60:85:
05:0b:5e:4a:14:a2:fc:d3:8f:fc:a0:cb:27:a0:58:96:7e:a1:
04:84:25:c1:94:de:45:3b:1c:50:be:84:5e:df:d8:8f:8f:d4:
9b:fb:62:ec:49:d6:d7:99:12:df:e3:a9:80:31:1b:35:64:88:
fe:84:9d:c2:c3:c0:09:05:9b:fc:ab:fa:11:0e:03:7c:f1:68:
a8:c0:61:0b:89:88:93:7f:f9:27:f9:60:f5:17:99:9b:87:77:
ee:29:49:9c:18:50:bd:95:25:63:50:ba:6f:e3:32:1a:d4:5f:
cd:d8:55:73:a6:45:89:a4:4c:20:89:72:d6:52:52:b9:e2:21:
63:68:db:10:bf:c0:37:c1:20:db:30:4f:88:8b:48:ef:9c:56:
2e:86:52:0a:c8:a1:0d:51:5b:60:fc:6e:8a:11:bc:82:59:63:
14:30:29:35:0e:78:e8:8b:2a:d6:fa:48:2e:b7:94:78:85:54:
90:77:e2:9e:d4:d4:4c:9b:9e:a0:b6:ed:ee:a5:1c:90:e8:89:
92:8e:c0:e7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQrISD9rN7wqogyfKlVPtEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwMTAzMDc0NjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWQ3MmE4Mjk5ZmU2Y2E5NzMxZmEwYWQyMjk5ZTBlZDlkNDBhMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QhH5sXCRe33fOGVzNcAf7vWhZq0
l+tM20ccljimvoY0aymV1lLbD5PQ3pHplIE4UjQjSdJpiufcy/jWs+qw9B6Ydz7J
D0MMZGC2nVWn5kBeZgVyJ3/Js0/xbmmbZAfUgOPK893reKgoFISVnmxcmn2HUPjI
2X2/H4KJvkQTrx6Qf364aMO7bMUXokoHKgsqO7XVSYcgK5e+DEbw3sMquU6Tbpqe
YbF599189U2h8FoSCkiicZt5hdR2y0PYJakgIB3FsFJf+pSgrxp0fZJhyLRg/8n1
SA0huMvvfmvHEoH9JBNC/z+UMQIheGYnoPugR9b2287DGFeG6bNRHr7BhwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAHXKoKZ/mypcx+grSKZ4O2dQKOHMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvQWRjcWdwbi1iS2x6SDZDdElwbmc3WjFBbzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADViV0D
BAXViUAwDQYJKoZIhvcNAQELBQADggEBALDhpExxMXPxpWeIMupS/PYGaOrmndso
CTaUL0iX854s/c/9h2whj/8HIOcBpFP7eSLFfrBghQULXkoUovzTj/ygyyegWJZ+
oQSEJcGU3kU7HFC+hF7f2I+P1Jv7YuxJ1teZEt/jqYAxGzVkiP6EncLDwAkFm/yr
+hEOA3zxaKjAYQuJiJN/+Sf5YPUXmZuHd+4pSZwYUL2VJWNQum/jMhrUX83YVXOm
RYmkTCCJctZSUrniIWNo2xC/wDfBINswT4iLSO+cVi6GUgrIoQ1RW2D8booRvIJZ
YxQwKTUOeOiLKtb6SC63lHiFVJB34p7U1EybnqC27e6lHJDoiZKOwOc=
-----END CERTIFICATE-----
Generated at Wed May 7 04:06:56 2025 by rpki-client