Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/u_bWkDEfyh8-jV9mesAVQ14sZ6U.roa
File: u_bWkDEfyh8-jV9mesAVQ14sZ6U.roa (raw, json)
Hash identifier: M1b2zWZgxW17nA92Fw4zo66gL6TVZ2J5qtX77BsBCjY=
Subject key identifier: BB:F6:D6:90:31:1F:CA:1F:3E:8D:5F:66:7A:C0:15:43:5E:2C:67:A5
Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial: 0192E7E955D8B29863F5515A932CD065EDB9
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/u_bWkDEfyh8-jV9mesAVQ14sZ6U.roa
Signing time: Fri 01 Nov 2024 13:28:01 +0000
ROA not before: Fri 01 Nov 2024 13:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213925
IP address blocks: 194.147.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 11:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:e9:55:d8:b2:98:63:f5:51:5a:93:2c:d0:65:ed:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Validity
Not Before: Nov 1 13:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbf6d690311fca1f3e8d5f667ac015435e2c67a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:27:2a:51:8d:b0:b2:2f:d0:45:c6:dc:14:
7b:b1:5b:b1:26:27:bf:1b:ad:80:e4:c1:2e:5a:6f:
f1:6e:4c:7f:20:ee:3a:56:77:6c:16:57:8f:34:b1:
59:c4:fb:e8:cb:bf:83:66:11:8c:74:fb:64:c3:8b:
f8:a7:0c:a3:bb:96:9a:36:8c:ea:ac:33:75:fd:60:
83:68:81:ea:33:44:cd:08:54:02:5f:45:46:7f:fc:
39:f3:12:ea:3c:cf:44:f1:42:a3:63:d2:6a:9e:4f:
19:0d:6a:c1:c1:50:14:d0:13:5f:15:91:cd:df:38:
7b:14:81:45:8c:58:1c:d6:2c:65:90:83:eb:17:7d:
21:c8:3e:4b:39:8c:d0:5e:0f:30:fe:a3:c8:40:04:
ad:66:67:16:2f:ff:0c:c5:8b:70:36:dd:3a:f3:e2:
8e:f5:09:b4:04:e1:6c:31:45:35:16:46:a0:3f:c6:
07:4c:04:02:8f:59:bd:a8:4d:6e:8e:ca:47:b8:c7:
f2:80:20:11:52:d5:76:38:fc:08:7b:83:76:f4:23:
41:1d:57:90:ef:d1:3c:7c:fc:a7:6d:b2:91:9b:90:
4b:ec:9d:ea:00:7f:b4:c9:52:f6:a4:ba:e4:86:0e:
6e:9f:2d:ff:54:d7:52:88:e9:a6:d1:45:6b:3a:58:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:D6:90:31:1F:CA:1F:3E:8D:5F:66:7A:C0:15:43:5E:2C:67:A5
X509v3 Authority Key Identifier:
keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/u_bWkDEfyh8-jV9mesAVQ14sZ6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:24:e7:c3:fe:df:4d:4a:14:f5:d0:5e:f6:98:53:c7:96:e4:
67:2b:99:2b:92:d5:b0:00:59:8d:04:f9:ce:e5:1c:d6:c1:f6:
3a:6e:8d:c4:d1:bc:57:aa:1b:27:60:ab:53:d9:67:3b:23:4c:
79:5b:37:2b:1a:88:37:42:7c:56:c2:96:f9:7d:87:46:f1:de:
43:0c:02:7a:5e:ff:03:03:3b:0b:f2:41:d4:46:c0:7f:e8:ff:
34:d1:ce:a4:89:0b:f4:ee:bf:6c:83:92:ff:74:1a:e9:bb:c7:
1e:62:a0:b8:64:f8:82:38:ff:4f:63:7a:d1:e2:56:d9:50:dc:
e5:5a:2a:7c:99:07:66:62:59:88:22:1a:0b:bc:9e:8b:69:8a:
0f:15:1e:2a:ad:4a:11:7a:b7:95:1a:26:06:8d:5d:eb:e4:07:
6f:d5:eb:69:1d:1c:c6:9a:6f:02:cb:0d:20:9a:8e:31:e2:1a:
4d:c3:26:79:1d:6d:74:8b:4d:d2:40:3e:9c:13:12:17:31:d9:
19:92:8f:d3:34:a1:2a:3d:68:af:f9:19:78:54:52:06:c2:49:
96:d7:59:be:3a:35:73:8d:22:6c:73:e5:fc:ae:bf:14:bb:15:
49:17:56:39:0d:88:ae:21:bd:12:4e:40:68:99:22:e3:3b:71:
94:11:d1:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLn6VXYsphj9VFakyzQZe25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1
M2VlMmIwHhcNMjQxMTAxMTMyODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmY2ZDY5MDMxMWZjYTFmM2U4ZDVmNjY3YWMwMTU0MzVlMmM2N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXAnKlGNsLIv0EXG3BR7sVuxJie/
G62A5MEuWm/xbkx/IO46VndsFlePNLFZxPvoy7+DZhGMdPtkw4v4pwyju5aaNozq
rDN1/WCDaIHqM0TNCFQCX0VGf/w58xLqPM9E8UKjY9Jqnk8ZDWrBwVAU0BNfFZHN
3zh7FIFFjFgc1ixlkIPrF30hyD5LOYzQXg8w/qPIQAStZmcWL/8MxYtwNt068+KO
9Qm0BOFsMUU1FkagP8YHTAQCj1m9qE1ujspHuMfygCARUtV2OPwIe4N29CNBHVeQ
79E8fPynbbKRm5BL7J3qAH+0yVL2pLrkhg5uny3/VNdSiOmm0UVrOljpPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLv21pAxH8ofPo1fZnrAFUNeLGelMB8GA1UdIwQY
MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt
ZGM3ZTEyNmNhMjM0LzEvdV9iV2tERWZ5aDgtalY5bWVzQVZRMTRzWjZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0
LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpPTMA0G
CSqGSIb3DQEBCwUAA4IBAQAOJOfD/t9NShT10F72mFPHluRnK5krktWwAFmNBPnO
5RzWwfY6bo3E0bxXqhsnYKtT2Wc7I0x5WzcrGog3QnxWwpb5fYdG8d5DDAJ6Xv8D
AzsL8kHURsB/6P800c6kiQv07r9sg5L/dBrpu8ceYqC4ZPiCOP9PY3rR4lbZUNzl
Wip8mQdmYlmIIhoLvJ6LaYoPFR4qrUoRereVGiYGjV3r5Adv1etpHRzGmm8Cyw0g
mo4x4hpNwyZ5HW10i03SQD6cExIXMdkZko/TNKEqPWiv+Rl4VFIGwkmW11m+OjVz
jSJsc+X8rr8UuxVJF1Y5DYiuIb0STkBomSLjO3GUEdGG
-----END CERTIFICATE-----
Generated at Sun May 11 09:27:04 2025 by rpki-client