Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/bnIQeRpf1S-Z5dh8ounWd59qNIM.roa
File: bnIQeRpf1S-Z5dh8ounWd59qNIM.roa (raw, json)
Hash identifier: l1GXRBIKT41EWU6Nunoh1rFilnuyIO+PNmh82hTFGuo=
Subject key identifier: 6E:72:10:79:1A:5F:D5:2F:99:E5:D8:7C:A2:E9:D6:77:9F:6A:34:83
Certificate issuer: /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial: 0193B0437D892D2B9D12FD31285426F6CB14
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/bnIQeRpf1S-Z5dh8ounWd59qNIM.roa
Signing time: Tue 10 Dec 2024 11:10:33 +0000
ROA not before: Tue 10 Dec 2024 11:10:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214248
IP address blocks: 185.221.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:43:7d:89:2d:2b:9d:12:fd:31:28:54:26:f6:cb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
Validity
Not Before: Dec 10 11:10:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e7210791a5fd52f99e5d87ca2e9d6779f6a3483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:8d:41:ed:1c:e7:66:a3:1e:b2:57:c6:fa:
f7:e0:99:ba:e4:5a:36:14:ae:c5:40:92:40:5f:45:
55:ce:ec:b1:db:d8:5b:19:32:d4:dd:ce:6b:ce:1b:
a3:b2:05:bd:58:38:24:be:49:3e:c5:83:bc:a7:f3:
6e:45:8c:ea:58:4e:f2:a9:5c:87:21:ba:91:3e:aa:
a4:45:ab:b9:7b:0e:44:15:00:ba:37:0f:9d:b0:2c:
e4:66:d9:16:da:60:eb:7b:72:08:86:84:56:ac:b1:
d0:b2:d6:70:e8:e0:81:43:25:a4:0f:a4:af:cd:fb:
30:83:46:dd:51:0a:75:7b:29:a8:34:89:00:9e:ad:
44:d2:c6:05:8b:fd:24:e4:c9:df:bb:e7:58:23:53:
64:d5:18:55:74:e4:1c:28:8c:e6:a4:b6:0c:6d:2f:
c0:b8:f0:39:33:10:94:6a:1f:29:c8:93:58:ce:94:
30:63:5c:cc:78:20:4c:90:ca:9f:08:14:9b:df:f5:
d0:97:5a:4c:60:7d:83:3e:31:1c:64:64:95:5a:e4:
90:39:05:04:b8:79:9b:e5:40:de:7d:11:6d:1b:f0:
ac:ea:7b:4c:6d:af:90:bd:f0:0d:65:b7:11:ff:85:
dd:a5:b5:0a:e5:4c:7f:5e:8f:dc:57:69:73:c1:a3:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:10:79:1A:5F:D5:2F:99:E5:D8:7C:A2:E9:D6:77:9F:6A:34:83
X509v3 Authority Key Identifier:
keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/bnIQeRpf1S-Z5dh8ounWd59qNIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:54:5d:ea:70:e1:68:23:35:f8:e4:17:ea:5f:86:69:1a:0d:
91:71:26:c1:89:6e:54:bd:4a:64:41:93:22:f4:de:d7:ec:0b:
f8:9f:a7:dd:9b:4a:5a:bb:f9:7a:c8:ad:40:80:c0:52:93:4e:
64:f3:ee:ab:90:12:0a:23:a6:12:c1:a8:f5:16:a2:4e:9e:39:
0d:0d:11:96:34:16:4b:77:25:b6:b5:6a:71:56:de:e9:5e:fc:
c3:58:22:b3:8d:3c:da:57:18:08:23:40:20:72:36:ce:b7:ce:
9c:86:c6:9b:a6:d0:e7:26:2f:d3:db:a9:e2:7c:af:e5:42:76:
93:f3:a2:55:0f:d7:0d:22:b7:9d:e6:8b:66:ef:66:be:80:84:
c3:de:6b:e7:4d:77:6a:f9:bd:83:20:1a:82:28:cb:2b:33:fe:
15:34:31:b5:5a:5e:64:a2:dc:d2:73:eb:93:9a:c8:bc:4a:18:
c5:50:8a:c7:10:ae:b3:33:3c:07:e0:f5:d4:05:28:34:59:e6:
7d:ff:f2:aa:df:3a:2e:5d:22:14:ef:cd:82:f7:5f:81:aa:58:
57:06:fe:6f:78:91:8d:bd:6c:f8:ce:42:85:74:47:82:2f:6e:
99:45:fa:69:22:25:60:ac:76:6d:e1:84:0e:bf:33:68:ba:7b:
4c:dc:bc:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOwQ32JLSudEv0xKFQm9ssUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTcyY2U3ZjhjNDk0MjM1YTA4NDgyMzk2NWI5MDQ3MDRi
YzgyNDAwHhcNMjQxMjEwMTExMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTcyMTA3OTFhNWZkNTJmOTllNWQ4N2NhMmU5ZDY3NzlmNmEzNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuReNQe0c52ajHrJXxvr34Jm65Fo2
FK7FQJJAX0VVzuyx29hbGTLU3c5rzhujsgW9WDgkvkk+xYO8p/NuRYzqWE7yqVyH
IbqRPqqkRau5ew5EFQC6Nw+dsCzkZtkW2mDre3IIhoRWrLHQstZw6OCBQyWkD6Sv
zfswg0bdUQp1eymoNIkAnq1E0sYFi/0k5Mnfu+dYI1Nk1RhVdOQcKIzmpLYMbS/A
uPA5MxCUah8pyJNYzpQwY1zMeCBMkMqfCBSb3/XQl1pMYH2DPjEcZGSVWuSQOQUE
uHmb5UDefRFtG/Cs6ntMba+QvfANZbcR/4XdpbUK5Ux/Xo/cV2lzwaMgVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5yEHkaX9UvmeXYfKLp1nefajSDMB8GA1UdIwQY
MBaAFFfnLOf4xJQjWghII5ZbkEcEvIJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQt
MmEwZjg3NDNjMmMyLzEvYm5JUWVScGYxUy1aNWRoOG91bldkNTlxTklNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQtMmEwZjg3NDNjMmMy
LzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud2+MA0G
CSqGSIb3DQEBCwUAA4IBAQC4VF3qcOFoIzX45BfqX4ZpGg2RcSbBiW5UvUpkQZMi
9N7X7Av4n6fdm0pau/l6yK1AgMBSk05k8+6rkBIKI6YSwaj1FqJOnjkNDRGWNBZL
dyW2tWpxVt7pXvzDWCKzjTzaVxgII0AgcjbOt86chsabptDnJi/T26nifK/lQnaT
86JVD9cNIred5otm72a+gITD3mvnTXdq+b2DIBqCKMsrM/4VNDG1Wl5kotzSc+uT
msi8ShjFUIrHEK6zMzwH4PXUBSg0WeZ9//Kq3zouXSIU782C91+BqlhXBv5veJGN
vWz4zkKFdEeCL26ZRfppIiVgrHZt4YQOvzNountM3Lwx
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:51:07 2025 by rpki-client