Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/1-SGIyLtgJxY5NmLtuHkGQvaqDWg.roa
File: 1-SGIyLtgJxY5NmLtuHkGQvaqDWg.roa (raw, json)
Hash identifier: h9dsGW3C8nYR/BiHSyQ2boOywoCfoM9P/QSQ0ruAg6U=
Subject key identifier: F9:21:88:C8:BB:60:27:16:39:36:62:ED:B8:79:06:42:F6:AA:0D:68
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 018CC94DA0F8BB85314B337D944F0F5F80C3
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/1-SGIyLtgJxY5NmLtuHkGQvaqDWg.roa
Signing time: Tue 02 Jan 2024 08:32:37 +0000
ROA not before: Tue 02 Jan 2024 08:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198401
IP address blocks: 185.96.52.0/22 maxlen: 22
91.234.12.0/22 maxlen: 22
185.146.244.0/22 maxlen: 22
45.82.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a0:f8:bb:85:31:4b:33:7d:94:4f:0f:5f:80:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Jan 2 08:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f92188c8bb602716393662edb8790642f6aa0d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:68:25:41:43:5f:5f:57:95:2e:44:7e:d0:
fb:5e:bc:24:e0:32:e7:14:e7:fc:6d:27:a5:9c:3f:
97:e0:9c:fa:3e:40:38:e2:37:46:33:b8:e6:d7:eb:
6a:df:21:c9:c5:04:c7:62:dd:c8:ba:35:6d:cd:c3:
6d:60:1e:12:28:5f:33:c3:cb:aa:a0:a7:99:bb:d7:
ee:36:75:be:db:92:d9:fc:70:1f:e7:7c:24:c1:83:
e4:e0:03:15:ec:b8:62:55:f9:32:d5:1f:26:99:2e:
21:e6:c2:f1:9c:97:3e:7a:f2:c0:3a:82:c2:45:67:
a7:61:69:fc:b8:58:f0:f0:3c:cd:80:e1:de:f7:c6:
bf:11:24:4c:02:9c:ff:01:97:bd:bb:ce:64:77:70:
67:ed:85:c2:a4:02:a7:7d:e7:0c:67:e5:24:31:f7:
e8:09:bf:fc:d7:2e:5c:e7:d6:16:b0:b4:b6:a3:4e:
94:17:d7:bb:bd:a1:36:99:78:eb:4c:5f:50:dd:b7:
9a:a5:51:60:12:dc:0f:12:9a:9c:37:38:4b:96:80:
17:f3:7e:e3:16:0b:10:f8:10:6b:72:6b:65:7e:27:
99:4a:b7:70:5e:c9:de:db:3d:11:84:db:cd:00:6e:
0a:60:51:0f:28:fa:b1:64:07:af:da:86:18:d5:2b:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:88:C8:BB:60:27:16:39:36:62:ED:B8:79:06:42:F6:AA:0D:68
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/1-SGIyLtgJxY5NmLtuHkGQvaqDWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.144.0/22
91.234.12.0/22
185.96.52.0/22
185.146.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:49:49:0c:91:fe:a2:b3:01:fb:bc:54:97:83:45:11:9f:83:
38:6b:e3:dc:f9:c9:ad:1f:4a:97:5b:36:c1:2b:bc:1b:e3:4f:
06:d5:e3:af:4b:f7:e3:29:18:d1:f9:6d:cc:3b:60:fb:04:52:
ca:7e:76:6d:a8:46:ba:2a:7a:16:a8:95:0d:3c:8a:14:16:ae:
52:a6:ed:f5:da:b7:c2:73:31:fd:ab:50:aa:c8:d3:1a:14:6d:
c6:5f:c3:1c:9b:79:dc:84:5b:04:be:a5:79:bc:10:1c:8b:19:
2a:a4:03:26:a8:fb:f6:1e:82:37:68:8b:0e:39:8d:fe:1a:73:
71:94:89:15:22:d1:00:ec:a1:c4:1c:ff:08:45:5e:5e:1b:7e:
56:89:87:f0:b6:04:43:7d:d9:5d:e5:4e:22:91:be:4b:64:c9:
7b:e8:ff:7b:44:ee:cd:95:b4:a3:52:94:81:76:6d:96:79:a6:
27:94:fd:cc:3d:52:7d:be:a4:01:25:f9:94:52:28:4e:96:67:
49:d8:47:41:59:bb:8e:03:c5:7c:0b:ff:cf:46:81:a7:70:34:
8b:3d:d5:f9:b7:ae:ad:e5:7a:c9:38:d5:71:d1:e9:54:6b:60:
79:ab:4a:60:ce:c7:cd:18:38:d3:7d:68:da:6d:b4:e4:30:52:
4f:c2:d6:48
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAYzJTaD4u4UxSzN9lE8PX4DDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2
N2E4MDIwHhcNMjQwMTAyMDgzMjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTIxODhjOGJiNjAyNzE2MzkzNjYyZWRiODc5MDY0MmY2YWEwZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFhoJUFDX19XlS5EftD7Xrwk4DLn
FOf8bSelnD+X4Jz6PkA44jdGM7jm1+tq3yHJxQTHYt3IujVtzcNtYB4SKF8zw8uq
oKeZu9fuNnW+25LZ/HAf53wkwYPk4AMV7LhiVfky1R8mmS4h5sLxnJc+evLAOoLC
RWenYWn8uFjw8DzNgOHe98a/ESRMApz/AZe9u85kd3Bn7YXCpAKnfecMZ+UkMffo
Cb/81y5c59YWsLS2o06UF9e7vaE2mXjrTF9Q3beapVFgEtwPEpqcNzhLloAX837j
FgsQ+BBrcmtlfieZSrdwXsne2z0RhNvNAG4KYFEPKPqxZAev2oYY1SvRDQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPkhiMi7YCcWOTZi7bh5BkL2qg1oMB8GA1UdIwQY
MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt
ZDRjNjZmNGYzYjZlLzEvMS1TR0l5THRnSnhZNU5tTHR1SGtHUXZhcURXZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjYvNDI1YzI0LWJmZTAtNDc5MC1iMjUwLWQ0YzY2ZjRmM2I2
ZS8xL0RYaEwyV3BFdkRZZEV6Uk5WTWk4VWY5bnFBSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAi1SkAME
AlvqDAMEArlgNAMEArmS9DANBgkqhkiG9w0BAQsFAAOCAQEAGklJDJH+orMB+7xU
l4NFEZ+DOGvj3PnJrR9Kl1s2wSu8G+NPBtXjr0v34ykY0fltzDtg+wRSyn52bahG
uip6FqiVDTyKFBauUqbt9dq3wnMx/atQqsjTGhRtxl/DHJt53IRbBL6lebwQHIsZ
KqQDJqj79h6CN2iLDjmN/hpzcZSJFSLRAOyhxBz/CEVeXht+VomH8LYEQ33ZXeVO
IpG+S2TJe+j/e0TuzZW0o1KUgXZtlnmmJ5T9zD1Sfb6kASX5lFIoTpZnSdhHQVm7
jgPFfAv/z0aBp3A0iz3V+beureV6yTjVcdHpVGtgeatKYM7HzRg4031o2m205DBS
T8LWSA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:56:21 2025 by rpki-client