Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/A8rsH0ZhXPk0Y9ZQEgUBMDMyZ3I.roa
File: A8rsH0ZhXPk0Y9ZQEgUBMDMyZ3I.roa (raw, json)
Hash identifier: CFmVJc8oQ63aqUFfSgzMgiX7gVoh/i+KZps9AJTy/5A=
Subject key identifier: 03:CA:EC:1F:46:61:5C:F9:34:63:D6:50:12:05:01:30:33:32:67:72
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 0193AB26204A5A10B56FD1BC3201AE4F1E23
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/A8rsH0ZhXPk0Y9ZQEgUBMDMyZ3I.roa
Signing time: Mon 09 Dec 2024 11:20:22 +0000
ROA not before: Mon 09 Dec 2024 11:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61241
IP address blocks: 185.161.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:26:20:4a:5a:10:b5:6f:d1:bc:32:01:ae:4f:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Dec 9 11:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03caec1f46615cf93463d6501205013033326772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:8d:e2:60:4e:17:a8:6c:cb:e7:c1:ec:4b:
db:40:c0:c3:e2:2a:82:24:2d:f1:9a:8b:21:77:99:
bc:3f:69:a1:6f:97:68:7f:01:1c:b5:f8:b9:f6:19:
58:af:5a:fb:f1:f6:5d:1e:79:9a:0e:a1:68:62:49:
84:97:87:be:9b:26:cb:c4:9a:cc:a0:55:9e:4b:24:
ca:85:4c:01:84:b3:e9:0a:36:71:41:c4:94:3a:6c:
02:e7:03:27:20:7c:c3:97:c2:38:42:b3:7c:b4:d9:
98:f4:77:2f:2a:4f:0c:6a:f5:40:89:ed:72:43:35:
f9:75:4e:23:1c:a8:a2:46:7b:03:91:7a:68:ca:81:
b8:f0:72:53:87:77:3f:19:0e:0f:02:c1:cb:f4:75:
28:b5:3b:9d:81:40:7d:16:35:54:40:7a:ac:7e:5c:
b2:8f:10:74:4c:58:10:0c:63:37:54:54:df:34:0d:
4b:11:f9:0a:ea:45:e9:22:92:ea:90:c0:a2:6f:d6:
63:7a:bd:ce:f9:a1:31:4f:ef:08:01:78:a4:ca:d7:
83:05:73:01:c3:0c:d5:52:42:d0:bd:97:0a:55:2d:
f4:30:57:fe:51:9c:2d:c0:9c:f2:99:eb:b2:7f:ac:
2b:83:63:21:70:d8:2f:9b:f3:ed:58:20:98:a2:a3:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:EC:1F:46:61:5C:F9:34:63:D6:50:12:05:01:30:33:32:67:72
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/A8rsH0ZhXPk0Y9ZQEgUBMDMyZ3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.172.0/23
Signature Algorithm: sha256WithRSAEncryption
24:21:86:91:15:e6:e1:1c:ee:94:c6:ab:10:0f:d1:be:93:13:
d4:0a:99:eb:f4:f0:4e:a1:04:10:58:98:e2:fb:85:0a:64:5f:
50:89:9e:6b:0f:39:ae:f4:01:cd:50:17:90:c2:72:c1:ba:84:
01:0e:ff:e5:af:93:cf:e6:4a:5e:fc:c9:c6:ba:47:bd:4a:2b:
ca:88:17:31:f7:00:9d:43:cf:3a:9f:d5:f4:c3:d3:b8:a3:70:
8f:48:c1:40:e0:04:00:31:9a:a0:6b:cf:64:ce:65:25:3e:5a:
52:a5:df:99:16:a7:71:d2:e3:dc:60:7f:fa:c3:37:68:62:24:
ef:9f:de:1f:60:64:91:88:a8:bc:5b:c1:e4:9e:5d:f8:2c:0b:
19:60:42:68:e6:b1:27:8a:2a:f5:22:63:59:f2:98:99:d0:07:
45:11:4e:94:f0:d9:bd:e5:09:9a:88:c3:ca:83:ee:81:ba:d8:
da:4f:7c:63:98:65:ce:cb:6c:9f:81:a6:3b:20:1d:5f:b2:ec:
6d:2f:2f:0d:bf:d3:f2:0e:bf:22:62:ab:c2:44:35:ff:6b:da:
f5:44:46:3b:f4:d6:27:07:91:57:62:93:0a:fb:ed:9c:65:8e:
87:dd:01:20:af:03:60:07:c7:1e:44:dd:07:94:5a:28:b3:31:
26:26:42:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOrJiBKWhC1b9G8MgGuTx4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmJjZmMxM2Q0ZDVmZjZkMzdjMjI2ZjExZTEyMTIwNGMz
NjdkMTcwHhcNMjQxMjA5MTEyMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2NhZWMxZjQ2NjE1Y2Y5MzQ2M2Q2NTAxMjA1MDEzMDMzMzI2NzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGON4mBOF6hsy+fB7EvbQMDD4iqC
JC3xmoshd5m8P2mhb5dofwEctfi59hlYr1r78fZdHnmaDqFoYkmEl4e+mybLxJrM
oFWeSyTKhUwBhLPpCjZxQcSUOmwC5wMnIHzDl8I4QrN8tNmY9HcvKk8MavVAie1y
QzX5dU4jHKiiRnsDkXpoyoG48HJTh3c/GQ4PAsHL9HUotTudgUB9FjVUQHqsflyy
jxB0TFgQDGM3VFTfNA1LEfkK6kXpIpLqkMCib9Zjer3O+aExT+8IAXikyteDBXMB
wwzVUkLQvZcKVS30MFf+UZwtwJzymeuyf6wrg2MhcNgvm/PtWCCYoqMdXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPK7B9GYVz5NGPWUBIFATAzMmdyMB8GA1UdIwQY
MBaAFEb7z8E9TV/203wibxHhISBMNn0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2It
ZmFjYTBlYjMzNTdkLzEvQThyc0gwWmhYUGswWTlaUUVnVUJNRE15WjNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2ItZmFjYTBlYjMzNTdk
LzEvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaGsMA0G
CSqGSIb3DQEBCwUAA4IBAQAkIYaRFebhHO6UxqsQD9G+kxPUCpnr9PBOoQQQWJji
+4UKZF9QiZ5rDzmu9AHNUBeQwnLBuoQBDv/lr5PP5kpe/MnGuke9SivKiBcx9wCd
Q886n9X0w9O4o3CPSMFA4AQAMZqga89kzmUlPlpSpd+ZFqdx0uPcYH/6wzdoYiTv
n94fYGSRiKi8W8Hknl34LAsZYEJo5rEniir1ImNZ8piZ0AdFEU6U8Nm95QmaiMPK
g+6ButjaT3xjmGXOy2yfgaY7IB1fsuxtLy8Nv9PyDr8iYqvCRDX/a9r1REY79NYn
B5FXYpMK++2cZY6H3QEgrwNgB8ceRN0HlFooszEmJkJN
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:23 2025 by rpki-client