Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ed9y6STWYaMwUMdnjm1JH7Z6RAA.roa
File: ed9y6STWYaMwUMdnjm1JH7Z6RAA.roa (raw, json)
Hash identifier: Q+uFImKUrZFlc8SMe37IvtIpJpTbxTfJ6rYtQ49NsJs=
Subject key identifier: 79:DF:72:E9:24:D6:61:A3:30:50:C7:67:8E:6D:49:1F:B6:7A:44:00
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019376841E2A0F58909EAE2A640CB417B71D
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ed9y6STWYaMwUMdnjm1JH7Z6RAA.roa
Signing time: Fri 29 Nov 2024 06:03:10 +0000
ROA not before: Fri 29 Nov 2024 06:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 140.150.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 06:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:84:1e:2a:0f:58:90:9e:ae:2a:64:0c:b4:17:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Nov 29 06:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79df72e924d661a33050c7678e6d491fb67a4400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b4:20:8a:d4:e8:5a:8f:80:e5:c1:02:70:59:
ac:5e:74:1c:8f:38:91:19:25:9e:7a:61:b2:b8:b9:
dd:06:ac:81:e5:25:fe:7a:0c:ba:31:76:f5:1a:19:
ee:ee:d0:11:c7:10:b7:02:51:03:60:d8:d1:ea:88:
5b:40:b5:43:01:81:4a:64:71:cd:4f:98:3e:af:75:
a5:e7:07:51:82:e8:a6:23:47:6f:51:11:ec:f0:59:
36:1a:67:01:82:59:2f:6a:5c:c9:13:e2:0e:a1:4a:
31:92:f3:bd:db:e5:4b:61:c8:60:54:7b:f3:bb:a6:
15:45:10:5c:6e:9c:98:da:e9:e9:35:fa:42:38:98:
5e:9e:4c:67:04:76:99:2f:c5:1b:55:c7:23:4f:14:
17:4e:0d:60:02:30:70:b4:2e:60:e6:e4:d1:02:92:
6f:35:b7:86:3c:c9:21:d7:74:a4:df:d6:d2:1c:0a:
95:44:eb:52:d0:c7:c6:b2:32:c1:ea:7a:c5:ed:18:
ff:8b:db:b2:e4:c8:1b:08:f1:1a:81:85:e6:31:a6:
bc:40:e6:26:b1:ba:4f:e7:09:d6:df:95:bd:68:9c:
23:7e:ec:8f:1d:db:5d:e5:04:5e:cc:95:f5:6e:f9:
59:2d:10:09:df:e7:28:50:c0:31:a8:80:b0:81:a5:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:72:E9:24:D6:61:A3:30:50:C7:67:8E:6D:49:1F:B6:7A:44:00
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ed9y6STWYaMwUMdnjm1JH7Z6RAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.8.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0b:56:e0:d4:f1:4c:eb:25:6c:3f:82:88:49:cd:03:02:ce:
01:12:2d:1f:76:a8:f1:c5:9f:48:b8:9a:75:c4:ea:1d:2d:d9:
f2:e6:0d:4c:74:8f:f2:42:03:56:ee:91:51:af:9e:94:fb:35:
0c:02:ab:e4:90:0e:1b:17:f5:0c:4d:58:72:9f:db:60:10:c2:
9e:3d:85:99:6e:0f:a3:5c:8f:93:83:7b:39:f5:90:4b:8e:c9:
23:bc:5f:e4:39:78:ad:f2:1b:55:9f:27:0e:5e:d6:da:4e:3c:
f1:09:19:6c:c0:da:b8:3f:5a:fe:7f:5a:0c:bc:9b:0f:a4:dd:
47:e4:d6:8d:18:2f:f1:c0:30:ed:cd:b0:66:a1:e7:90:ff:c1:
ca:c2:98:85:ce:7a:e8:0c:34:4a:cb:ba:49:96:52:e2:cc:2d:
27:0e:a3:91:74:e5:b1:97:6a:76:2a:7e:4a:80:f2:76:62:0a:
84:56:f6:2a:96:ba:42:e1:ef:6b:82:5c:78:13:e8:c4:14:64:
79:fc:ca:69:3b:14:04:62:7c:da:18:f1:bf:99:2d:45:d5:7e:
f0:e9:8f:49:21:86:94:38:80:db:2e:46:44:fe:89:4f:d0:0c:
c8:16:d3:10:14:6e:5b:12:b3:1c:4b:e6:8a:43:ba:9d:ec:02:
34:79:e6:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN2hB4qD1iQnq4qZAy0F7cdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjQxMTI5MDYwMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRmNzJlOTI0ZDY2MWEzMzA1MGM3Njc4ZTZkNDkxZmI2N2E0NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47QgitToWo+A5cECcFmsXnQcjziR
GSWeemGyuLndBqyB5SX+egy6MXb1Ghnu7tARxxC3AlEDYNjR6ohbQLVDAYFKZHHN
T5g+r3Wl5wdRguimI0dvURHs8Fk2GmcBglkvalzJE+IOoUoxkvO92+VLYchgVHvz
u6YVRRBcbpyY2unpNfpCOJhenkxnBHaZL8UbVccjTxQXTg1gAjBwtC5g5uTRApJv
NbeGPMkh13Sk39bSHAqVROtS0MfGsjLB6nrF7Rj/i9uy5MgbCPEagYXmMaa8QOYm
sbpP5wnW35W9aJwjfuyPHdtd5QRezJX1bvlZLRAJ3+coUMAxqICwgaVJqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnfcukk1mGjMFDHZ45tSR+2ekQAMB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvZWQ5eTZTVFdZYU13VU1kbmptMUpIN1o2UkFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjJYIMA0G
CSqGSIb3DQEBCwUAA4IBAQAbC1bg1PFM6yVsP4KISc0DAs4BEi0fdqjxxZ9IuJp1
xOodLdny5g1MdI/yQgNW7pFRr56U+zUMAqvkkA4bF/UMTVhyn9tgEMKePYWZbg+j
XI+Tg3s59ZBLjskjvF/kOXit8htVnycOXtbaTjzxCRlswNq4P1r+f1oMvJsPpN1H
5NaNGC/xwDDtzbBmoeeQ/8HKwpiFznroDDRKy7pJllLizC0nDqORdOWxl2p2Kn5K
gPJ2YgqEVvYqlrpC4e9rglx4E+jEFGR5/MppOxQEYnzaGPG/mS1F1X7w6Y9JIYaU
OIDbLkZE/olP0AzIFtMQFG5bErMcS+aKQ7qd7AI0eeao
-----END CERTIFICATE-----
Generated at Wed May 7 05:08:08 2025 by rpki-client