Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/pYhgYyqnCZ1DBuN9ifyZf18Sh9k.roa
File: pYhgYyqnCZ1DBuN9ifyZf18Sh9k.roa (raw, json)
Hash identifier: MKaMTEA/d/oP50i36DZ3/52YSsXCZosDYyKKZPP4S+0=
Subject key identifier: A5:88:60:63:2A:A7:09:9D:43:06:E3:7D:89:FC:99:7F:5F:12:87:D9
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 01942C9D4A916A283DBE3A21AB6EA20E8494
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/pYhgYyqnCZ1DBuN9ifyZf18Sh9k.roa
Signing time: Fri 03 Jan 2025 14:41:33 +0000
ROA not before: Fri 03 Jan 2025 14:41:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 93.174.248.0/21 maxlen: 21
2a03:8ac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 Jan 2025 17:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:9d:4a:91:6a:28:3d:be:3a:21:ab:6e:a2:0e:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jan 3 14:41:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a58860632aa7099d4306e37d89fc997f5f1287d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:7e:0c:cb:1b:0e:12:5e:14:28:6a:7b:71:
c1:cd:95:37:23:12:18:a9:f2:8d:19:8c:65:76:7d:
39:40:9e:31:ac:35:4e:05:8c:26:1c:2b:00:62:0a:
45:8e:8f:93:4e:ce:95:aa:d8:ac:05:47:4c:78:2e:
c7:ff:67:b4:99:c3:08:80:ea:22:26:62:ba:a0:5b:
22:4b:c1:fc:5b:59:75:e0:a7:ad:41:23:33:92:52:
39:af:37:f0:4c:86:35:d5:7d:91:f0:7b:57:9c:8c:
91:e9:d6:4a:63:80:ef:f1:2a:1f:38:72:e7:47:84:
56:ca:6b:c4:7f:6d:4c:10:d2:34:69:a5:4a:bc:59:
32:26:f4:28:6d:0e:81:bf:59:d6:40:a4:ce:99:86:
4b:72:fc:45:28:82:cd:c5:79:d4:fe:7f:3c:aa:49:
9a:c5:68:04:f0:4d:bb:5c:80:0c:10:79:47:4e:a6:
65:c0:e0:bf:39:af:c9:93:64:a9:68:dd:12:b2:d2:
86:81:b0:4a:ea:92:2e:7f:52:3b:8a:f5:0e:90:29:
53:a3:0f:e2:fc:78:97:05:a9:4f:e9:40:53:b8:b9:
ef:bc:6b:fb:86:bd:f7:f8:cb:e6:e9:4b:d4:25:9f:
fc:b0:57:ed:34:46:9a:92:05:91:16:07:dc:a6:1a:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:60:63:2A:A7:09:9D:43:06:E3:7D:89:FC:99:7F:5F:12:87:D9
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/pYhgYyqnCZ1DBuN9ifyZf18Sh9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.248.0/21
IPv6:
2a03:8ac0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:80:da:9a:ea:33:e4:eb:23:a3:4f:0c:d4:cb:f5:e6:09:5b:
f6:b9:e3:cb:47:00:20:62:49:15:f2:48:11:ef:40:31:17:02:
55:4a:a8:05:b2:70:a3:3d:d1:ea:6d:d2:f9:22:9b:93:26:db:
a8:26:bf:79:d4:bd:91:1f:2e:2d:34:b3:26:b3:1f:c8:55:17:
ad:b5:da:f4:7f:82:ac:1a:0b:4e:c6:3c:9f:ce:ee:c8:c6:07:
81:87:0a:2a:57:ed:86:9c:94:5a:06:78:11:55:a6:4f:17:2a:
dd:65:cb:fa:81:bc:1e:3b:e6:68:64:ad:b5:59:8c:bb:ec:9d:
aa:40:ad:36:5e:6a:49:04:c4:5f:04:4b:0b:07:76:1f:6a:c1:
cb:e3:86:13:ad:7d:43:ef:94:58:88:78:20:22:60:90:7f:90:
07:d7:4a:28:90:2f:44:8e:61:07:65:cc:96:f0:14:72:a5:34:
86:59:42:36:59:b7:1b:14:ac:27:53:53:08:93:6e:51:dc:61:
d3:f4:f7:53:42:06:bc:e9:98:0f:25:93:6b:67:d5:67:1c:72:
6f:bf:96:9f:0c:ab:6e:b4:78:32:1a:7b:23:be:1a:45:27:bc:
83:d4:25:be:84:7b:ba:48:9a:58:9a:e6:f5:63:89:7d:b6:7c:
7f:e4:fc:99
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQsnUqRaig9vjohq26iDoSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5
ZGRlYjYwHhcNMjUwMTAzMTQ0MTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTg4NjA2MzJhYTcwOTlkNDMwNmUzN2Q4OWZjOTk3ZjVmMTI4N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ux+DMsbDhJeFChqe3HBzZU3IxIY
qfKNGYxldn05QJ4xrDVOBYwmHCsAYgpFjo+TTs6VqtisBUdMeC7H/2e0mcMIgOoi
JmK6oFsiS8H8W1l14KetQSMzklI5rzfwTIY11X2R8HtXnIyR6dZKY4Dv8SofOHLn
R4RWymvEf21MENI0aaVKvFkyJvQobQ6Bv1nWQKTOmYZLcvxFKILNxXnU/n88qkma
xWgE8E27XIAMEHlHTqZlwOC/Oa/Jk2SpaN0SstKGgbBK6pIuf1I7ivUOkClTow/i
/HiXBalP6UBTuLnvvGv7hr33+Mvm6UvUJZ/8sFftNEaakgWRFgfcphrohQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKWIYGMqpwmdQwbjfYn8mX9fEofZMB8GA1UdIwQY
MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt
NWM5OWI2ODNkYjBkLzEvcFloZ1l5cW5DWjFEQnVOOWlmeVpmMThTaDlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk
LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXa74MA0E
AgACMAcDBQAqA4rAMA0GCSqGSIb3DQEBCwUAA4IBAQCwgNqa6jPk6yOjTwzUy/Xm
CVv2uePLRwAgYkkV8kgR70AxFwJVSqgFsnCjPdHqbdL5IpuTJtuoJr951L2RHy4t
NLMmsx/IVRettdr0f4KsGgtOxjyfzu7IxgeBhwoqV+2GnJRaBngRVaZPFyrdZcv6
gbweO+ZoZK21WYy77J2qQK02XmpJBMRfBEsLB3YfasHL44YTrX1D75RYiHggImCQ
f5AH10ookC9EjmEHZcyW8BRypTSGWUI2WbcbFKwnU1MIk25R3GHT9PdTQga86ZgP
JZNrZ9VnHHJvv5afDKtutHgyGnsjvhpFJ7yD1CW+hHu6SJpYmub1Y4l9tnx/5PyZ
-----END CERTIFICATE-----
Generated at Thu May 8 03:53:55 2025 by rpki-client