Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/_vs5IFPgsa_PWTwjRr1mQkUXjM4.roa
File: _vs5IFPgsa_PWTwjRr1mQkUXjM4.roa (raw, json)
Hash identifier: X+OjdHuEfxUy1AyhfDm7UZyeoRnmWJExgle/vDIyhMM=
Subject key identifier: FE:FB:39:20:53:E0:B1:AF:CF:59:3C:23:46:BD:66:42:45:17:8C:CE
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 01939B5423407CF9138DCDEEC962D99252A4
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/_vs5IFPgsa_PWTwjRr1mQkUXjM4.roa
Signing time: Fri 06 Dec 2024 09:36:42 +0000
ROA not before: Fri 06 Dec 2024 09:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.37.37.0/24 maxlen: 24
185.37.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:54:23:40:7c:f9:13:8d:cd:ee:c9:62:d9:92:52:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Dec 6 09:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fefb392053e0b1afcf593c2346bd664245178cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:60:18:0d:4c:2d:3b:7d:28:2c:17:b0:3c:
96:97:41:d4:e3:0f:3b:43:c7:c0:37:a0:ff:c8:e5:
df:1f:af:dc:67:88:71:ef:6f:86:9a:35:2a:da:fc:
10:cb:e1:cb:09:20:1a:b6:87:1f:d6:82:95:02:e5:
b3:e3:75:ee:7c:be:8f:64:f5:8c:f9:be:d9:f6:f9:
94:4b:aa:28:ca:31:7a:f3:fb:2f:ec:1c:ea:22:39:
62:21:34:4f:9f:a2:c5:c0:7f:d2:52:93:8c:17:d3:
eb:2f:46:94:09:e0:35:4e:83:57:a0:41:5e:f5:a9:
5a:15:e9:24:e4:de:29:d2:80:87:c8:e3:ac:bd:29:
31:ce:95:c3:7d:02:6a:c8:a0:d5:bd:9d:5c:73:91:
1b:ad:d1:47:0d:b0:e5:ad:aa:09:ed:65:da:40:43:
04:a0:df:1a:fe:61:cb:b7:40:fc:44:ca:3b:26:26:
eb:64:9b:14:62:9b:bb:d0:2d:89:28:4a:47:62:ba:
7e:e5:19:3a:3a:84:9a:f7:6e:96:fb:66:81:69:bd:
c8:04:58:f8:93:02:86:c3:9a:d3:b4:53:c6:d0:19:
47:ab:44:f9:be:9d:14:d5:f5:3f:43:7d:d3:50:91:
25:6d:c5:a8:7d:c8:23:5c:ae:42:b7:93:6d:dc:9d:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:39:20:53:E0:B1:AF:CF:59:3C:23:46:BD:66:42:45:17:8C:CE
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/_vs5IFPgsa_PWTwjRr1mQkUXjM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.37.0/24
185.37.39.0/24
Signature Algorithm: sha256WithRSAEncryption
25:59:39:7e:88:83:5d:36:88:f4:3f:23:db:3d:b6:86:76:c2:
a4:9e:16:a2:56:71:aa:68:7f:f7:02:44:93:f2:52:8e:98:7d:
78:f2:2f:dc:41:13:0f:15:c4:19:74:10:01:30:c1:42:c8:74:
16:a9:f6:b9:fb:61:c9:ed:37:28:58:ed:1e:57:80:fe:0d:68:
34:03:5c:0b:89:07:46:99:6d:8a:8e:34:f3:a4:f9:f3:27:2e:
15:17:86:c4:d3:88:f2:5b:09:77:48:29:5c:d9:e4:db:b5:c8:
91:f9:87:1b:cb:f0:cd:66:18:06:80:d9:61:c5:30:45:bb:0a:
49:8a:a7:4f:0a:2d:37:54:13:dc:00:94:4e:9f:c8:5c:70:d7:
78:6a:03:71:d9:3a:93:4e:c8:6c:80:2f:79:58:54:78:c9:ef:
42:2b:29:7b:c4:26:76:26:b4:56:fc:e4:81:be:5f:db:c2:34:
2d:27:f5:d9:5f:a8:2b:92:c7:2a:2b:b0:f9:ae:9a:99:42:33:
b5:1f:b9:18:c6:42:45:7c:1d:f1:f2:77:e5:0e:9e:26:c1:18:
e1:a3:cd:31:bd:fa:ea:ae:10:dd:a7:0f:9b:15:a4:4b:8c:88:
32:47:82:08:be:80:67:e5:ce:93:03:17:8d:3c:ef:f3:5b:3a:
67:64:78:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZObVCNAfPkTjc3uyWLZklKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGFjYTFjMjY1YzEzMjgyM2M3ODRmZGE4NDJmN2ExYTA1
YjhjYjcwHhcNMjQxMjA2MDkzNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWZiMzkyMDUzZTBiMWFmY2Y1OTNjMjM0NmJkNjY0MjQ1MTc4Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1lgGA1MLTt9KCwXsDyWl0HU4w87
Q8fAN6D/yOXfH6/cZ4hx72+GmjUq2vwQy+HLCSAatocf1oKVAuWz43XufL6PZPWM
+b7Z9vmUS6ooyjF68/sv7BzqIjliITRPn6LFwH/SUpOMF9PrL0aUCeA1ToNXoEFe
9alaFekk5N4p0oCHyOOsvSkxzpXDfQJqyKDVvZ1cc5EbrdFHDbDlraoJ7WXaQEME
oN8a/mHLt0D8RMo7JibrZJsUYpu70C2JKEpHYrp+5Rk6OoSa926W+2aBab3IBFj4
kwKGw5rTtFPG0BlHq0T5vp0U1fU/Q33TUJElbcWofcgjXK5Ct5Nt3J3gNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP77OSBT4LGvz1k8I0a9ZkJFF4zOMB8GA1UdIwQY
MBaAFJqKyhwmXBMoI8eE/ahC96GgW4y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYt
ZGMwYzRmMTA4M2M5LzEvX3ZzNUlGUGdzYV9QV1R3alJyMW1Ra1VYak00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYtZGMwYzRmMTA4M2M5
LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSUlAwQA
uSUnMA0GCSqGSIb3DQEBCwUAA4IBAQAlWTl+iINdNoj0PyPbPbaGdsKknhaiVnGq
aH/3AkST8lKOmH148i/cQRMPFcQZdBABMMFCyHQWqfa5+2HJ7TcoWO0eV4D+DWg0
A1wLiQdGmW2KjjTzpPnzJy4VF4bE04jyWwl3SClc2eTbtciR+Ycby/DNZhgGgNlh
xTBFuwpJiqdPCi03VBPcAJROn8hccNd4agNx2TqTTshsgC95WFR4ye9CKyl7xCZ2
JrRW/OSBvl/bwjQtJ/XZX6grkscqK7D5rpqZQjO1H7kYxkJFfB3x8nflDp4mwRjh
o80xvfrqrhDdpw+bFaRLjIgyR4IIvoBn5c6TAxeNPO/zWzpnZHjz
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:28 2025 by rpki-client