Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/61tPwf8AwdRKhYBMpOmDDH0Mz5E.roa
File: 61tPwf8AwdRKhYBMpOmDDH0Mz5E.roa (raw, json)
Hash identifier: wExFVqRw3+D2eaHpZJ9YsJ9lx5Eaf3lcdvUlXFUJbdo=
Subject key identifier: EB:5B:4F:C1:FF:00:C1:D4:4A:85:80:4C:A4:E9:83:0C:7D:0C:CF:91
Certificate issuer: /CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
Certificate serial: 018CC2DAE7A74909F5777A93901C1FDFC0AF
Authority key identifier: 4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/61tPwf8AwdRKhYBMpOmDDH0Mz5E.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43800
IP address blocks: 193.34.136.0/23 maxlen: 23
185.54.4.0/23 maxlen: 23
185.54.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e7:a7:49:09:f5:77:7a:93:90:1c:1f:df:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb5b4fc1ff00c1d44a85804ca4e9830c7d0ccf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:3c:5b:4d:90:87:2d:ea:5d:c0:67:93:87:
60:cc:fb:07:ff:90:8a:ad:22:fd:6a:83:59:5d:9c:
0a:f8:4f:2b:72:a4:92:56:9e:c2:1e:be:1e:a9:6d:
2e:3f:9b:e6:d9:70:d9:c1:4d:8f:74:ec:eb:db:12:
8b:c7:e7:95:5c:a9:ac:19:22:1b:85:97:bb:cd:f5:
59:c0:8e:8f:b2:1d:83:1b:05:2d:e8:00:4c:ca:ec:
62:55:74:35:0f:83:54:16:18:23:c2:b4:0d:39:8c:
a2:7a:16:aa:e8:5d:01:74:e4:91:8f:e2:74:eb:d3:
93:60:7c:16:aa:c0:47:a0:72:6c:15:e3:af:fe:2e:
09:22:0a:ba:02:b9:f9:08:70:ba:6f:9b:d3:64:02:
ed:18:a9:42:20:91:21:90:e4:4f:21:f7:31:53:1b:
23:75:5e:4f:77:2c:9d:35:ed:99:2f:b2:fb:56:17:
07:9a:6f:9d:22:22:db:86:cf:6f:bc:1c:44:b4:82:
50:8e:53:ae:fc:c3:e3:76:3c:66:17:c7:92:63:5c:
d6:ba:7c:7f:0b:ea:e8:40:82:48:c9:c1:29:6e:7f:
ad:a1:66:65:9f:26:4f:73:b9:3c:69:59:60:9d:ba:
a7:b4:cc:a8:c6:77:a4:13:ec:f5:51:62:c7:ad:5c:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:4F:C1:FF:00:C1:D4:4A:85:80:4C:A4:E9:83:0C:7D:0C:CF:91
X509v3 Authority Key Identifier:
keyid:4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/61tPwf8AwdRKhYBMpOmDDH0Mz5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.4.0-185.54.6.255
193.34.136.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:80:2b:96:ba:c2:a0:d4:b5:63:90:cb:a6:ca:85:da:70:fc:
1f:fa:3b:69:6b:eb:83:60:4b:e0:3a:f1:7d:91:fc:fe:b3:67:
57:60:ed:98:d1:c1:d6:c1:6c:d6:f7:62:2d:7c:06:27:6f:3f:
1b:cf:2e:f2:fb:54:29:b9:89:9e:5b:09:a4:7c:9a:0c:e0:8c:
03:55:b6:12:5b:96:42:ae:8b:8e:31:4a:7d:10:27:14:c7:03:
19:e6:b8:d3:f7:9f:34:b3:f6:0a:3b:db:00:a0:bf:d4:0b:c2:
b6:74:9b:50:f5:e5:a6:9f:f4:e8:b6:bb:58:25:c1:5e:ff:79:
cc:b1:af:f4:6c:9c:46:13:b5:02:cc:ad:dc:2f:65:53:b2:81:
6a:62:55:ef:6b:3d:74:64:b0:13:16:0b:2a:2e:c9:72:3b:fb:
47:2e:e2:30:5d:15:4b:5e:b8:0c:1e:93:9d:cf:84:1c:08:1f:
98:e4:5c:70:0a:81:c8:b8:3e:00:de:52:79:57:e1:83:f0:45:
35:2d:74:fc:99:1d:76:71:07:72:94:35:a7:1b:82:f0:a6:3c:
7c:4e:d2:43:f0:72:48:07:54:dd:ab:03:17:3b:34:2c:fa:95:
ab:a6:70:eb:12:94:a9:59:eb:80:67:78:6d:86:cd:7a:ef:36:
41:d4:ba:20
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzC2uenSQn1d3qTkBwf38CvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGRjNWQ0YzA3NmZkODQyNjNhYjcyZTZmMTdiNWZmNGFj
Yjg0NDgwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjViNGZjMWZmMDBjMWQ0NGE4NTgwNGNhNGU5ODMwYzdkMGNjZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M08W02Qhy3qXcBnk4dgzPsH/5CK
rSL9aoNZXZwK+E8rcqSSVp7CHr4eqW0uP5vm2XDZwU2PdOzr2xKLx+eVXKmsGSIb
hZe7zfVZwI6Psh2DGwUt6ABMyuxiVXQ1D4NUFhgjwrQNOYyiehaq6F0BdOSRj+J0
69OTYHwWqsBHoHJsFeOv/i4JIgq6Arn5CHC6b5vTZALtGKlCIJEhkORPIfcxUxsj
dV5PdyydNe2ZL7L7VhcHmm+dIiLbhs9vvBxEtIJQjlOu/MPjdjxmF8eSY1zWunx/
C+roQIJIycEpbn+toWZlnyZPc7k8aVlgnbqntMyoxnekE+z1UWLHrVzQGQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOtbT8H/AMHUSoWATKTpgwx9DM+RMB8GA1UdIwQY
MBaAFE9NxdTAdv2EJjq3Lm8Xtf9Ky4RIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDAzRjFNQjJfWVFtT3JjdWJ4ZTFfMHJMaEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yNTc1ZmUtYTUyNi00MTk1LTk3NDUt
ZmE5NmJkZDJmZmEzLzEvNjF0UHdmOEF3ZFJLaFlCTXBPbURESDBNejVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yNTc1ZmUtYTUyNi00MTk1LTk3NDUtZmE5NmJkZDJmZmEz
LzEvVDAzRjFNQjJfWVFtT3JjdWJ4ZTFfMHJMaEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5NgQD
BAC5NgYDBAHBIogwDQYJKoZIhvcNAQELBQADggEBAMCAK5a6wqDUtWOQy6bKhdpw
/B/6O2lr64NgS+A68X2R/P6zZ1dg7ZjRwdbBbNb3Yi18BidvPxvPLvL7VCm5iZ5b
CaR8mgzgjANVthJblkKui44xSn0QJxTHAxnmuNP3nzSz9go72wCgv9QLwrZ0m1D1
5aaf9Oi2u1glwV7/ecyxr/RsnEYTtQLMrdwvZVOygWpiVe9rPXRksBMWCyouyXI7
+0cu4jBdFUteuAwek53PhBwIH5jkXHAKgci4PgDeUnlX4YPwRTUtdPyZHXZxB3KU
NacbgvCmPHxO0kPwckgHVN2rAxc7NCz6laumcOsSlKlZ64BneG2GzXrvNkHUuiA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:19:29 2025 by rpki-client