Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/_z1b5_TEdlNWvjD_ba-iKe3kyuE.roa
File: _z1b5_TEdlNWvjD_ba-iKe3kyuE.roa (raw, json)
Hash identifier: XfilMhOhubKMkXNo0UHwSZyoswPPO8leH1b1hXJUGtY=
Subject key identifier: FF:3D:5B:E7:F4:C4:76:53:56:BE:30:FF:6D:AF:A2:29:ED:E4:CA:E1
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 0193106086B6344540BC9C7B63CFFD997BFB
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/_z1b5_TEdlNWvjD_ba-iKe3kyuE.roa
Signing time: Sat 09 Nov 2024 10:03:01 +0000
ROA not before: Sat 09 Nov 2024 10:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203466
IP address blocks: 188.214.194.0/24 maxlen: 24
213.134.13.0/24 maxlen: 24
2a06:f940:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Nov 2024 11:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:60:86:b6:34:45:40:bc:9c:7b:63:cf:fd:99:7b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Nov 9 10:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff3d5be7f4c4765356be30ff6dafa229ede4cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:0a:bc:bc:11:fe:d5:41:3e:44:b8:61:6e:
d8:44:53:d9:97:81:84:d2:89:84:a4:11:4e:f1:27:
de:a4:6c:eb:ca:55:01:1a:b8:8e:f7:15:cf:43:88:
01:2c:5b:6a:7e:47:a2:56:af:50:75:24:1a:8d:50:
c1:06:a5:58:8a:9b:29:f3:e2:7d:52:27:c5:d4:97:
43:7e:2b:12:17:85:ac:d1:c9:3b:0d:92:40:00:29:
55:b2:db:a5:c9:66:cf:91:d1:f0:a4:99:77:46:54:
c3:4e:48:3e:de:c2:0c:30:cf:01:b0:a2:71:c2:03:
e9:e4:37:a2:58:ed:91:9a:d1:f2:36:1c:44:9a:26:
07:a3:ab:c9:20:64:77:3e:1d:b5:0d:a1:66:8a:3f:
bb:45:e5:cd:84:94:03:99:0e:57:58:82:a4:55:49:
be:6e:32:a4:9d:d8:8e:c0:99:6c:65:a0:65:ef:97:
40:74:40:56:5a:00:93:c5:56:0d:59:2c:d4:59:06:
a5:d5:30:7a:62:b7:bc:0c:4c:25:fd:cf:79:af:55:
ea:e4:08:75:ef:26:02:b6:06:1d:be:a1:42:5f:86:
22:03:f8:16:a3:e4:d3:50:1d:fe:e8:6d:c8:57:9e:
d4:1d:d4:a0:cf:70:d4:2a:87:cb:cf:2b:44:42:63:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:5B:E7:F4:C4:76:53:56:BE:30:FF:6D:AF:A2:29:ED:E4:CA:E1
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/_z1b5_TEdlNWvjD_ba-iKe3kyuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.194.0/24
213.134.13.0/24
IPv6:
2a06:f940:1::/48
Signature Algorithm: sha256WithRSAEncryption
50:e5:02:ef:01:91:ff:44:82:c3:0f:8b:52:7d:1f:26:75:62:
08:40:31:2c:da:80:8e:00:2e:ec:28:75:e6:5f:af:74:a9:32:
de:38:dc:47:93:15:80:83:10:ab:b4:72:5c:04:56:0e:e7:ba:
84:80:fd:43:fb:83:56:10:e3:7f:8f:17:4c:8f:d9:38:0b:50:
9e:62:97:d7:8f:4d:e4:9d:79:1d:fe:6a:03:4b:b2:f8:b1:4c:
87:da:a6:d0:6b:46:ca:3f:c6:8c:8a:fa:15:5c:cd:c4:c6:97:
8d:3c:54:dc:ab:68:81:70:4e:54:22:93:92:98:c9:76:29:18:
72:48:7b:c7:f3:2d:13:5f:a9:f3:52:59:b5:3c:d3:be:4b:63:
48:79:71:92:52:96:47:dd:cf:e8:52:81:1a:3e:32:58:ad:e5:
1f:ff:2d:99:5f:9e:f1:06:a7:87:1e:24:64:90:6d:be:da:d9:
b4:ae:5c:ff:7e:c8:4f:a6:1c:53:74:12:ba:63:4f:a6:e9:30:
55:6b:5d:b9:2b:57:96:ed:5f:8a:22:a7:72:0a:ec:46:8a:76:
5c:25:cd:87:e5:9d:17:1e:b4:1e:40:8b:dd:24:02:bc:c1:24:
0d:6a:12:a1:11:72:6b:d2:b2:a2:35:d2:35:a2:ff:96:8f:fc:
69:3c:d3:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMQYIa2NEVAvJx7Y8/9mXv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjQxMTA5MTAwMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjNkNWJlN2Y0YzQ3NjUzNTZiZTMwZmY2ZGFmYTIyOWVkZTRjYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMKvLwR/tVBPkS4YW7YRFPZl4GE
0omEpBFO8SfepGzrylUBGriO9xXPQ4gBLFtqfkeiVq9QdSQajVDBBqVYipsp8+J9
UifF1JdDfisSF4Ws0ck7DZJAAClVstulyWbPkdHwpJl3RlTDTkg+3sIMMM8BsKJx
wgPp5DeiWO2RmtHyNhxEmiYHo6vJIGR3Ph21DaFmij+7ReXNhJQDmQ5XWIKkVUm+
bjKkndiOwJlsZaBl75dAdEBWWgCTxVYNWSzUWQal1TB6Yre8DEwl/c95r1Xq5Ah1
7yYCtgYdvqFCX4YiA/gWo+TTUB3+6G3IV57UHdSgz3DUKofLzytEQmMLNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP89W+f0xHZTVr4w/22voint5MrhMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xL196MWI1X1RFZGxOV3ZqRF9iYS1pS2Uza3l1RS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2
MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBAC81sID
BADVhg0wDwQCAAIwCQMHACoG+UAAATANBgkqhkiG9w0BAQsFAAOCAQEAUOUC7wGR
/0SCww+LUn0fJnViCEAxLNqAjgAu7Ch15l+vdKky3jjcR5MVgIMQq7RyXARWDue6
hID9Q/uDVhDjf48XTI/ZOAtQnmKX149N5J15Hf5qA0uy+LFMh9qm0GtGyj/GjIr6
FVzNxMaXjTxU3KtogXBOVCKTkpjJdikYckh7x/MtE1+p81JZtTzTvktjSHlxklKW
R93P6FKBGj4yWK3lH/8tmV+e8Qanhx4kZJBtvtrZtK5c/37IT6YcU3QSumNPpukw
VWtduStXlu1fiiKncgrsRop2XCXNh+WdFx60HkCL3SQCvMEkDWoSoRFya9KyojXS
NaL/lo/8aTzTLw==
-----END CERTIFICATE-----
Generated at Wed May 7 23:42:36 2025 by rpki-client