Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/AxxglPPMUd2K7EM2HfO9hVQG_Tk.roa
File: AxxglPPMUd2K7EM2HfO9hVQG_Tk.roa (raw, json)
Hash identifier: TSoP+LtR4XOj1CnQimkPS7eCirUPcyLSK3/9s7G7SB4=
Subject key identifier: 03:1C:60:94:F3:CC:51:DD:8A:EC:43:36:1D:F3:BD:85:54:06:FD:39
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 0192FFE4DB81A2971538E06FA05D6CCA9E70
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/AxxglPPMUd2K7EM2HfO9hVQG_Tk.roa
Signing time: Wed 06 Nov 2024 05:14:01 +0000
ROA not before: Wed 06 Nov 2024 05:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215892
IP address blocks: 185.151.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ff:e4:db:81:a2:97:15:38:e0:6f:a0:5d:6c:ca:9e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Nov 6 05:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=031c6094f3cc51dd8aec43361df3bd855406fd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:98:42:e1:3c:c7:cc:31:c7:e1:d2:0d:78:
fe:9d:c7:2c:f5:15:a7:74:fb:f6:91:64:8f:cf:6c:
65:6e:b1:5f:39:7a:66:12:2d:17:7e:00:34:34:2f:
91:16:6d:54:29:1d:da:2a:27:4e:16:6f:36:95:2b:
71:98:2b:55:06:16:ce:04:0e:79:b4:26:bc:ae:9b:
c4:30:91:d3:67:09:e0:1d:b8:8f:11:19:4f:1c:20:
78:a1:9b:77:e2:20:27:93:e6:d5:70:1c:f7:1a:57:
67:3c:3b:80:5e:81:83:78:b9:8e:f5:33:8b:7a:79:
29:e3:86:24:62:cc:e8:40:2c:c1:db:5f:f9:d8:70:
73:18:f9:ac:b8:b1:34:cb:ff:c3:4f:72:2f:79:e6:
ab:d3:6b:2f:53:7c:36:94:bf:78:71:1b:73:0f:9e:
06:f4:b7:c3:e6:10:02:66:3e:47:65:e0:41:26:cf:
2d:76:a1:3e:e5:ee:e7:d8:9f:a4:57:71:2f:c8:04:
78:45:2f:7f:22:a1:94:08:62:34:59:91:c1:a9:7e:
0e:56:49:fe:4d:72:d6:89:3e:11:2f:a5:14:d2:88:
cf:87:3a:4d:62:6f:e3:ec:43:14:1d:31:7e:d9:bf:
5f:69:45:f7:a3:79:5b:b9:84:3b:c8:7a:3d:79:2f:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:60:94:F3:CC:51:DD:8A:EC:43:36:1D:F3:BD:85:54:06:FD:39
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/AxxglPPMUd2K7EM2HfO9hVQG_Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:19:05:f7:7a:48:06:07:e8:bb:4c:d6:fc:b4:0f:67:19:7d:
44:7e:83:c9:af:6c:91:12:1c:02:47:67:06:97:59:e4:36:0e:
af:da:37:05:93:91:ad:8e:41:2b:9c:77:25:03:3c:e8:67:d8:
fd:f8:f6:df:75:69:59:b4:b0:d2:d0:8c:91:16:ed:ce:39:e2:
e2:1a:ed:c6:af:a6:5a:df:dc:8b:0a:e3:db:a7:27:37:8e:a2:
51:9f:0a:43:cb:40:1f:f5:30:fa:e8:73:63:35:be:0a:1f:89:
53:70:44:1c:92:78:22:ed:de:75:72:39:f9:c9:55:ae:09:37:
0a:e6:cd:94:f8:d9:32:ef:49:71:d3:82:08:0d:4c:e7:98:5e:
e2:5a:03:2a:34:82:b8:04:7d:f5:81:7e:93:4c:59:af:c3:20:
cc:89:e7:49:91:fd:a1:c6:0b:b6:d6:fb:03:b7:e8:c2:7a:09:
88:5e:d0:e8:71:ab:ac:70:99:50:73:87:ae:94:17:a0:27:c3:
4c:66:d3:ba:66:ea:ea:8e:bb:29:88:86:64:50:8c:44:fc:f7:
18:63:1b:ad:73:cf:b0:10:40:58:34:7c:53:35:22:48:47:42:
78:06:bf:90:6b:2d:77:3c:74:17:99:c5:78:6b:69:c5:15:f0:
53:9b:8d:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZL/5NuBopcVOOBvoF1syp5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YWVmODcxNjc1ODVkMjg5ODMxNWFhMzc1M2YzZmE2OGRh
ZDJjNmQwHhcNMjQxMTA2MDUxNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzFjNjA5NGYzY2M1MWRkOGFlYzQzMzYxZGYzYmQ4NTU0MDZmZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yKYQuE8x8wxx+HSDXj+nccs9RWn
dPv2kWSPz2xlbrFfOXpmEi0XfgA0NC+RFm1UKR3aKidOFm82lStxmCtVBhbOBA55
tCa8rpvEMJHTZwngHbiPERlPHCB4oZt34iAnk+bVcBz3GldnPDuAXoGDeLmO9TOL
enkp44YkYszoQCzB21/52HBzGPmsuLE0y//DT3Iveear02svU3w2lL94cRtzD54G
9LfD5hACZj5HZeBBJs8tdqE+5e7n2J+kV3EvyAR4RS9/IqGUCGI0WZHBqX4OVkn+
TXLWiT4RL6UU0ojPhzpNYm/j7EMUHTF+2b9faUX3o3lbuYQ7yHo9eS/HAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAMcYJTzzFHdiuxDNh3zvYVUBv05MB8GA1UdIwQY
MBaAFMmu+HFnWF0omDFao3U/P6aNrSxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODIt
ZGIxMGRjZmVjNGJmLzEvQXh4Z2xQUE1VZDJLN0VNMkhmTzloVlFHX1RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODItZGIxMGRjZmVjNGJm
LzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZfvMA0G
CSqGSIb3DQEBCwUAA4IBAQA7GQX3ekgGB+i7TNb8tA9nGX1EfoPJr2yREhwCR2cG
l1nkNg6v2jcFk5GtjkErnHclAzzoZ9j9+PbfdWlZtLDS0IyRFu3OOeLiGu3Gr6Za
39yLCuPbpyc3jqJRnwpDy0Af9TD66HNjNb4KH4lTcEQckngi7d51cjn5yVWuCTcK
5s2U+Nky70lx04IIDUznmF7iWgMqNIK4BH31gX6TTFmvwyDMiedJkf2hxgu21vsD
t+jCegmIXtDocauscJlQc4eulBegJ8NMZtO6ZurqjrspiIZkUIxE/PcYYxutc8+w
EEBYNHxTNSJIR0J4Br+Qay13PHQXmcV4a2nFFfBTm42h
-----END CERTIFICATE-----
Generated at Wed Apr 23 12:16:45 2025 by rpki-client