Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/tDatTntml7xHkZP2xoYdKu5QMLc.roa
File: tDatTntml7xHkZP2xoYdKu5QMLc.roa (raw, json)
Hash identifier: FtgW8YHa+ihTVP2yRrD6uaA1Y6uXjbhYGzrjJ60+Gh0=
Subject key identifier: B4:36:AD:4E:7B:66:97:BC:47:91:93:F6:C6:86:1D:2A:EE:50:30:B7
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 018CC4939EF5A8F6F98BF1A1BB41B3C53593
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/tDatTntml7xHkZP2xoYdKu5QMLc.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61025
IP address blocks: 185.17.236.0/23 maxlen: 24
2a03:dd40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Jan 2024 18:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9e:f5:a8:f6:f9:8b:f1:a1:bb:41:b3:c5:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b436ad4e7b6697bc479193f6c6861d2aee5030b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:e4:46:c4:2b:99:9f:7d:62:54:2a:55:97:
93:5a:05:e8:7a:00:3f:62:06:e5:2b:2b:2c:89:ca:
3b:bc:d4:ba:e4:e1:25:39:1d:db:90:45:5d:d3:17:
da:42:2e:a8:ee:7a:9e:5b:dc:00:ad:71:3b:75:e2:
69:9c:52:f9:31:b3:31:0e:ea:57:8a:27:67:3b:a5:
d8:9c:d8:24:7e:74:2c:3a:2f:14:ac:e0:e6:aa:d6:
3c:5d:fa:85:99:22:69:e3:12:f2:e1:22:82:9f:2c:
5e:28:b3:1c:3c:ca:b5:78:b4:e4:65:a0:ed:09:4f:
64:c6:59:24:35:ec:e7:dc:3d:b4:45:db:f6:ae:8d:
47:22:78:9c:39:c9:cb:95:7d:f9:58:ff:1e:fd:c8:
32:62:05:31:6f:b0:45:70:ed:2b:88:36:c3:e9:a2:
2f:94:50:06:a1:7c:79:6b:9a:f0:78:b8:40:23:2c:
9b:95:2a:33:47:75:72:74:c6:ad:39:dc:6f:7b:21:
91:43:e8:99:cd:cc:e8:ff:c5:e1:ed:97:8c:17:d0:
39:c1:7c:4f:36:af:61:22:e6:a0:1c:e0:f1:62:1e:
e1:4c:c8:65:61:b6:83:71:92:e0:c3:88:1a:ff:33:
4e:97:f1:2c:51:c4:72:a1:bc:a4:e3:70:07:53:f0:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:AD:4E:7B:66:97:BC:47:91:93:F6:C6:86:1D:2A:EE:50:30:B7
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/tDatTntml7xHkZP2xoYdKu5QMLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.236.0/23
IPv6:
2a03:dd40::/32
Signature Algorithm: sha256WithRSAEncryption
c2:dc:33:4d:09:dc:00:69:09:99:9a:93:bb:4c:75:d6:be:0b:
c7:e4:01:6e:37:d2:20:03:42:43:d6:fc:f9:26:91:37:08:91:
08:47:62:fd:b2:17:a7:bd:db:b5:6b:04:80:34:f2:82:a4:d4:
d9:2e:7b:36:1f:cb:a4:f0:3f:a8:fa:d2:6c:82:d4:ca:76:7a:
5f:de:54:aa:84:2b:d2:85:0c:56:04:ff:44:4a:90:2c:31:1c:
3e:57:56:50:19:65:a1:6a:1f:e9:b8:df:ae:97:57:d7:f1:0c:
bb:e2:60:e3:8d:dc:18:4d:5b:c6:ce:33:74:9e:8e:d8:18:35:
e1:43:c3:00:3c:19:f5:10:ad:64:0b:87:9d:de:6d:80:56:5b:
a0:2a:ff:a6:6b:d6:55:5e:2d:21:81:fa:96:07:68:62:19:55:
f8:4b:f2:0d:7c:7f:ba:b6:86:57:72:6f:a9:67:57:e8:b6:37:
e3:e4:58:52:2a:82:77:9d:f7:13:4b:cd:d9:ae:f7:0d:6a:1e:
58:b8:95:a4:bc:84:80:b6:4b:1f:eb:97:08:0a:b3:d4:15:79:
b7:7d:9f:85:59:82:8d:b7:09:09:6d:63:71:6d:86:26:72:4c:
02:c1:b2:02:9c:e0:14:f4:e8:53:83:f2:8d:95:7c:0a:7d:dd:
9a:8a:c1:bf
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzEk571qPb5i/Ghu0GzxTWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh
N2RlYmMwHhcNMjQwMTAxMTAzMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDM2YWQ0ZTdiNjY5N2JjNDc5MTkzZjZjNjg2MWQyYWVlNTAzMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DjkRsQrmZ99YlQqVZeTWgXoegA/
YgblKyssico7vNS65OElOR3bkEVd0xfaQi6o7nqeW9wArXE7deJpnFL5MbMxDupX
iidnO6XYnNgkfnQsOi8UrODmqtY8XfqFmSJp4xLy4SKCnyxeKLMcPMq1eLTkZaDt
CU9kxlkkNezn3D20Rdv2ro1HInicOcnLlX35WP8e/cgyYgUxb7BFcO0riDbD6aIv
lFAGoXx5a5rweLhAIyyblSozR3VydMatOdxveyGRQ+iZzczo/8Xh7ZeMF9A5wXxP
Nq9hIuagHODxYh7hTMhlYbaDcZLgw4ga/zNOl/EsUcRyobyk43AHU/ByZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLQ2rU57Zpe8R5GT9saGHSruUDC3MB8GA1UdIwQY
MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt
NGM5ZjQzZjg3OGFiLzEvdERhdFRudG1sN3hIa1pQMnhvWWRLdTVRTUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi
LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuRHsMA0E
AgACMAcDBQAqA91AMA0GCSqGSIb3DQEBCwUAA4IBAQDC3DNNCdwAaQmZmpO7THXW
vgvH5AFuN9IgA0JD1vz5JpE3CJEIR2L9shenvdu1awSANPKCpNTZLns2H8uk8D+o
+tJsgtTKdnpf3lSqhCvShQxWBP9ESpAsMRw+V1ZQGWWhah/puN+ul1fX8Qy74mDj
jdwYTVvGzjN0no7YGDXhQ8MAPBn1EK1kC4ed3m2AVlugKv+ma9ZVXi0hgfqWB2hi
GVX4S/INfH+6toZXcm+pZ1fotjfj5FhSKoJ3nfcTS83ZrvcNah5YuJWkvISAtksf
65cICrPUFXm3fZ+FWYKNtwkJbWNxbYYmckwCwbICnOAU9OhTg/KNlXwKfd2aisG/
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:48 2025 by rpki-client