Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0cr8oDFQUJbSyD1ukLjjQdZL_u0.roa
File: 0cr8oDFQUJbSyD1ukLjjQdZL_u0.roa (raw, json)
Hash identifier: HvWs76cNct+URkRJEdFiqvRvpaVan9fj7uWuNv3tuRo=
Subject key identifier: D1:CA:FC:A0:31:50:50:96:D2:C8:3D:6E:90:B8:E3:41:D6:4B:FE:ED
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019107D8A7479E5AAF190A223C5929CD8846
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0cr8oDFQUJbSyD1ukLjjQdZL_u0.roa
Signing time: Wed 31 Jul 2024 08:12:04 +0000
ROA not before: Wed 31 Jul 2024 08:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204528
IP address blocks: 81.199.15.0/24 maxlen: 24
81.199.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 08:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:d8:a7:47:9e:5a:af:19:0a:22:3c:59:29:cd:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jul 31 08:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1cafca031505096d2c83d6e90b8e341d64bfeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:ad:e8:41:cc:63:36:83:8b:3a:d8:ef:a5:
b3:aa:6a:7b:9f:b3:84:0e:d9:fe:c8:51:44:26:bb:
cd:c4:11:b3:b1:b9:5f:0f:16:40:02:24:ab:e3:ba:
aa:36:0f:3a:e9:ab:4a:76:d3:f7:34:aa:a1:0e:81:
df:d1:ce:04:af:1d:7e:6e:fd:ca:ed:7a:e5:c0:f8:
0a:14:58:46:6b:54:0b:4d:e8:91:da:67:59:98:17:
04:47:22:ad:96:31:7e:6d:49:51:4a:e4:b9:d9:d2:
54:b5:7a:4a:b6:a8:5f:4f:0d:33:d4:c5:9a:ae:28:
6b:f7:b3:88:cb:32:fa:af:73:4c:55:41:f7:1d:12:
9c:41:49:bd:a8:fb:41:8a:6c:09:98:02:08:af:36:
a1:e0:0a:77:e1:61:91:84:51:56:63:9a:f1:fa:67:
1a:f1:3a:e0:76:1b:48:7b:74:64:b2:e9:55:98:57:
ba:cf:07:3f:c5:56:cc:ee:50:01:0e:30:8f:c0:dc:
fb:51:4d:d8:84:44:62:a3:f0:bd:f8:6d:03:ea:11:
88:17:2d:b0:f9:46:54:53:40:9e:a4:c9:fc:71:e3:
f6:73:59:d9:90:21:61:24:f4:ab:03:4f:b4:fc:8d:
02:e0:f5:1b:ff:f0:85:13:50:a9:65:33:55:38:6d:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CA:FC:A0:31:50:50:96:D2:C8:3D:6E:90:B8:E3:41:D6:4B:FE:ED
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0cr8oDFQUJbSyD1ukLjjQdZL_u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.15.0/24
81.199.94.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ca:43:bc:ea:a5:d1:8f:a5:21:0e:a0:ba:61:5b:8e:ad:9f:
ba:a5:38:cc:f2:8c:21:66:39:d5:da:19:de:c2:1f:d9:e3:bc:
ac:53:51:5f:6e:4f:65:67:90:20:b7:87:ee:22:2c:ea:41:c9:
28:ad:d9:db:55:23:79:ab:75:ee:f8:fd:dd:8c:82:a0:e7:05:
c3:d9:bb:fc:27:4d:c1:4e:83:bb:54:8e:07:0e:bb:7c:6d:07:
06:dd:30:01:d4:14:45:e8:4e:10:19:a6:e1:e7:a4:1e:d3:37:
ae:7e:1b:92:4b:a5:e6:87:39:a2:c1:34:4f:68:84:a5:46:44:
30:7e:28:97:23:fa:eb:1b:4c:e2:0b:35:20:25:5c:5a:52:f9:
5e:b0:19:f9:d3:bc:15:5c:c6:e0:d2:2d:a7:f1:2d:87:95:c2:
d2:4c:83:8a:de:e8:9d:79:27:8b:ae:ec:46:01:94:ac:0f:41:
b2:0b:14:50:2c:ef:c6:ec:86:ad:58:6b:7c:be:ed:bf:95:d7:
90:c2:8f:a9:1b:c9:37:b5:f3:9b:84:1a:3c:9a:c1:a5:c2:72:
02:ff:46:ef:2a:35:09:d1:25:91:d0:49:fd:0f:d5:a6:02:ad:
e6:a0:d8:df:85:8d:fe:4b:d5:88:a5:36:73:50:45:12:82:c2:
60:bb:f0:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEH2KdHnlqvGQoiPFkpzYhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjQwNzMxMDgxMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWNhZmNhMDMxNTA1MDk2ZDJjODNkNmU5MGI4ZTM0MWQ2NGJmZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX+t6EHMYzaDizrY76Wzqmp7n7OE
Dtn+yFFEJrvNxBGzsblfDxZAAiSr47qqNg866atKdtP3NKqhDoHf0c4Erx1+bv3K
7XrlwPgKFFhGa1QLTeiR2mdZmBcERyKtljF+bUlRSuS52dJUtXpKtqhfTw0z1MWa
rihr97OIyzL6r3NMVUH3HRKcQUm9qPtBimwJmAIIrzah4Ap34WGRhFFWY5rx+mca
8TrgdhtIe3RksulVmFe6zwc/xVbM7lABDjCPwNz7UU3YhERio/C9+G0D6hGIFy2w
+UZUU0CepMn8ceP2c1nZkCFhJPSrA0+0/I0C4PUb//CFE1CpZTNVOG1hCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNHK/KAxUFCW0sg9bpC440HWS/7tMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvMGNyOG9ERlFVSmJTeUQxdWtMampRZFpMX3UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUccPAwQA
UcdeMA0GCSqGSIb3DQEBCwUAA4IBAQBRykO86qXRj6UhDqC6YVuOrZ+6pTjM8owh
ZjnV2hnewh/Z47ysU1Ffbk9lZ5Agt4fuIizqQckordnbVSN5q3Xu+P3djIKg5wXD
2bv8J03BToO7VI4HDrt8bQcG3TAB1BRF6E4QGabh56Qe0zeufhuSS6XmhzmiwTRP
aISlRkQwfiiXI/rrG0ziCzUgJVxaUvlesBn507wVXMbg0i2n8S2HlcLSTIOK3uid
eSeLruxGAZSsD0GyCxRQLO/G7IatWGt8vu2/ldeQwo+pG8k3tfObhBo8msGlwnIC
/0bvKjUJ0SWR0En9D9WmAq3moNjfhY3+S9WIpTZzUEUSgsJgu/Cq
-----END CERTIFICATE-----
Generated at Fri May 9 12:51:35 2025 by rpki-client