Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/NPwgYFfZ4fu2Whss_55quPoxXM0.roa
File: NPwgYFfZ4fu2Whss_55quPoxXM0.roa (raw, json)
Hash identifier: WOBQ1fFjs+4yF2JF8BlhmVw+oLa68DryJtkZOgRYVQs=
Subject key identifier: 34:FC:20:60:57:D9:E1:FB:B6:5A:1B:2C:FF:9E:6A:B8:FA:31:5C:CD
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 019426D9596F375D6A1833D824C78DD748F8
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/NPwgYFfZ4fu2Whss_55quPoxXM0.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205388
IP address blocks: 185.107.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 18:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:6f:37:5d:6a:18:33:d8:24:c7:8d:d7:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34fc206057d9e1fbb65a1b2cff9e6ab8fa315ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:4e:86:3d:be:d8:00:26:d6:db:7c:2c:8e:
9c:55:49:83:12:95:57:76:a0:40:a3:c6:82:cc:fc:
cf:6a:b4:5c:ee:18:82:dd:2b:26:6a:9d:8b:04:1f:
cf:ee:97:c4:07:77:c2:5d:55:9c:9c:29:65:1f:a7:
a7:f4:d4:28:4a:2c:20:0a:31:0b:bf:4b:54:8b:c1:
ae:9d:21:09:b0:a8:53:d9:ea:60:4c:6d:31:ab:58:
8e:e5:a9:f9:f6:40:99:e6:44:1a:b9:f1:e7:2b:55:
7c:0c:8e:ff:d7:7a:4a:f6:a0:33:2f:bd:38:8d:f2:
1f:ed:65:00:87:74:c1:51:77:d2:76:af:4b:f5:f8:
85:cb:c6:60:88:1e:48:3f:2a:e6:af:b0:6c:a1:8f:
06:0a:6c:66:e1:a7:7e:bd:fd:be:c6:c5:93:ef:55:
7d:47:90:b9:0d:98:ba:ad:96:e3:07:37:66:00:18:
4b:a6:85:c8:4a:9c:41:ad:24:a0:d3:16:1a:24:5a:
5b:2d:d8:27:6e:83:e1:76:83:8c:7c:1b:26:35:57:
13:ff:d7:5a:68:2f:b0:16:7e:1b:0d:b7:87:75:41:
cb:25:2b:c0:26:5f:f4:42:4c:f7:b6:d9:32:87:c4:
a6:cc:af:e0:7b:2f:df:a7:75:3c:04:2d:aa:56:6d:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FC:20:60:57:D9:E1:FB:B6:5A:1B:2C:FF:9E:6A:B8:FA:31:5C:CD
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/NPwgYFfZ4fu2Whss_55quPoxXM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7d:1e:76:ad:ca:d4:db:47:c9:fc:07:0a:70:d3:1b:9d:dc:
18:d3:64:e3:69:79:cc:de:bf:7e:66:06:21:aa:13:31:7d:d1:
52:c0:c6:83:3d:95:32:58:a5:c1:73:7d:f5:ee:d3:de:9c:45:
6f:b9:6c:8f:49:9d:fc:cb:a2:56:9d:ff:83:9b:75:dd:47:5e:
1e:d6:3e:c3:ae:70:2c:39:6d:f5:cd:16:c1:b7:2b:f2:bc:9b:
db:00:29:cb:4b:69:6a:11:e4:e5:47:5b:41:32:8e:e4:ed:46:
95:cf:74:c5:d6:20:56:c7:13:72:41:7b:1e:20:3b:fb:15:6c:
ed:85:ed:ad:5a:51:b7:b3:47:cf:a7:51:62:ef:c6:68:2c:32:
51:65:5e:b5:fc:a4:51:2c:47:14:c9:2a:ce:fe:08:29:e5:26:
34:70:d6:79:ca:cf:49:a1:6f:10:b2:17:6c:8f:54:3d:a6:77:
d4:12:4c:f5:0d:fe:d1:56:05:a3:a1:8f:ee:20:fb:3b:26:8b:
11:8e:47:9e:10:d3:67:97:01:d5:7f:1e:30:1b:33:22:89:ac:
5b:40:0f:9d:f6:2f:d2:a1:0b:86:bf:ae:6d:ea:7c:c3:0c:ae:
a2:46:f5:68:f8:95:01:31:d7:f8:4c:70:a1:29:33:6d:57:de:
f5:9d:bd:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2VlvN11qGDPYJMeN10j4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDE4MTk2YjI5ZjYwZTg1ZDg3MTJkZTQwMzlhNTMxY2Zj
MWFiMzEwHhcNMjUwMTAyMTE0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGZjMjA2MDU3ZDllMWZiYjY1YTFiMmNmZjllNmFiOGZhMzE1Y2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxNOhj2+2AAm1tt8LI6cVUmDEpVX
dqBAo8aCzPzParRc7hiC3Ssmap2LBB/P7pfEB3fCXVWcnCllH6en9NQoSiwgCjEL
v0tUi8GunSEJsKhT2epgTG0xq1iO5an59kCZ5kQaufHnK1V8DI7/13pK9qAzL704
jfIf7WUAh3TBUXfSdq9L9fiFy8ZgiB5IPyrmr7BsoY8GCmxm4ad+vf2+xsWT71V9
R5C5DZi6rZbjBzdmABhLpoXISpxBrSSg0xYaJFpbLdgnboPhdoOMfBsmNVcT/9da
aC+wFn4bDbeHdUHLJSvAJl/0Qkz3ttkyh8SmzK/gey/fp3U8BC2qVm3yHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDT8IGBX2eH7tlobLP+earj6MVzNMB8GA1UdIwQY
MBaAFFDRgZayn2DoXYcS3kA5pTHPwasxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2Et
YjRhMTgxY2Q0MGY2LzEvTlB3Z1lGZlo0ZnUyV2hzc181NXF1UG94WE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2EtYjRhMTgxY2Q0MGY2
LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWvDMA0G
CSqGSIb3DQEBCwUAA4IBAQChfR52rcrU20fJ/AcKcNMbndwY02TjaXnM3r9+ZgYh
qhMxfdFSwMaDPZUyWKXBc3317tPenEVvuWyPSZ38y6JWnf+Dm3XdR14e1j7DrnAs
OW31zRbBtyvyvJvbACnLS2lqEeTlR1tBMo7k7UaVz3TF1iBWxxNyQXseIDv7FWzt
he2tWlG3s0fPp1Fi78ZoLDJRZV61/KRRLEcUySrO/ggp5SY0cNZ5ys9JoW8Qshds
j1Q9pnfUEkz1Df7RVgWjoY/uIPs7JosRjkeeENNnlwHVfx4wGzMiiaxbQA+d9i/S
oQuGv65t6nzDDK6iRvVo+JUBMdf4THChKTNtV971nb1t
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:49 2025 by rpki-client