Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ML1xZFo3UkFRbrXm6QA951WcN1s.roa
File: ML1xZFo3UkFRbrXm6QA951WcN1s.roa (raw, json)
Hash identifier: PKfL3FwYAGQwuaYMK2sF3qkcfUMiIAVEmnXyss3F33E=
Subject key identifier: 30:BD:71:64:5A:37:52:41:51:6E:B5:E6:E9:00:3D:E7:55:9C:37:5B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019299D5C885DB58F90FEADC6ACCD1409063
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ML1xZFo3UkFRbrXm6QA951WcN1s.roa
Signing time: Thu 17 Oct 2024 09:36:17 +0000
ROA not before: Thu 17 Oct 2024 09:36:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.216.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:d5:c8:85:db:58:f9:0f:ea:dc:6a:cc:d1:40:90:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 17 09:36:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30bd71645a375241516eb5e6e9003de7559c375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:0d:eb:30:98:c9:b7:07:6e:ce:83:4e:19:
f4:80:6b:e6:f1:b5:10:aa:53:5a:5e:5e:1a:4e:9b:
86:73:9d:ac:92:f6:16:0b:b3:ca:57:3e:8b:5b:98:
42:4f:97:33:4d:35:39:11:78:0c:45:0e:79:4f:93:
91:ee:6c:f0:9e:08:8a:de:74:8e:eb:42:67:99:97:
0b:80:bc:21:54:c5:1f:06:71:e6:57:cf:1f:3f:f2:
93:df:c2:84:24:6c:f7:96:74:c2:1e:fb:9d:3f:b0:
38:ab:53:0f:95:bf:37:38:c3:58:5b:2c:dc:bb:9d:
14:5c:c5:fb:46:f6:ee:be:4b:a7:63:12:5e:c7:6c:
a1:bd:36:4e:8d:db:d2:67:7a:c1:e7:a0:ee:84:6c:
26:85:cd:f5:08:a5:6c:d2:16:a7:6f:86:0a:bf:bc:
bc:80:42:5d:f0:d0:5f:a3:9e:b4:41:58:45:2b:98:
64:ce:21:c7:83:2f:50:a2:fa:37:5f:ac:53:d2:38:
07:53:dc:c8:63:2c:cd:da:49:f7:f2:84:55:98:8e:
b4:a0:1f:ac:ca:fb:3c:26:01:59:18:2f:c0:25:23:
95:46:3f:01:3a:83:32:33:ac:d4:da:37:b8:1d:df:
11:4c:15:66:be:70:77:24:3e:11:8e:e5:97:ae:87:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BD:71:64:5A:37:52:41:51:6E:B5:E6:E9:00:3D:E7:55:9C:37:5B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ML1xZFo3UkFRbrXm6QA951WcN1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cf:f6:c0:1f:4c:d6:ec:93:a4:bb:d0:9c:37:2e:d3:25:b6:
dc:02:b6:b5:b4:2c:62:ff:22:e9:01:fc:02:7d:5f:ec:01:c9:
de:28:90:4a:08:c8:91:dd:01:35:6d:bb:28:31:bc:f5:d6:41:
2a:85:98:8e:48:49:43:65:4c:2a:01:3f:fc:d7:56:bb:55:19:
3b:91:fd:ee:4f:e6:14:c7:d2:45:5b:54:81:25:39:39:5d:d9:
57:f8:01:e3:34:f7:4e:98:e6:9b:6a:6d:e7:98:a3:bc:1c:0d:
45:ed:55:15:55:5c:53:cd:a0:ef:51:26:67:e3:58:1e:c2:84:
27:80:d4:52:49:95:37:b5:e1:ef:9d:0a:16:05:7f:fb:e7:ff:
c3:e1:f5:4d:5b:e1:f5:a0:3c:ca:a7:f0:ed:19:a8:f4:3c:3d:
e3:cb:8c:2c:aa:84:70:03:18:e2:8a:5c:55:ee:a7:c3:cb:41:
08:66:b7:56:89:43:78:37:dd:96:75:3e:3e:e7:f1:e2:d4:53:
3c:62:c2:d2:c3:91:fb:30:9c:77:6e:51:5c:09:2a:1b:a0:32:
64:cf:54:23:33:5b:59:9a:6c:d3:bd:fc:35:e1:31:3d:48:c9:
fd:39:66:16:91:64:74:0e:35:82:ec:89:58:a6:d7:87:c6:d5:
8d:b6:19:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKZ1ciF21j5D+rcaszRQJBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDE3MDkzNjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGJkNzE2NDVhMzc1MjQxNTE2ZWI1ZTZlOTAwM2RlNzU1OWMzNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmQN6zCYybcHbs6DThn0gGvm8bUQ
qlNaXl4aTpuGc52skvYWC7PKVz6LW5hCT5czTTU5EXgMRQ55T5OR7mzwngiK3nSO
60JnmZcLgLwhVMUfBnHmV88fP/KT38KEJGz3lnTCHvudP7A4q1MPlb83OMNYWyzc
u50UXMX7RvbuvkunYxJex2yhvTZOjdvSZ3rB56DuhGwmhc31CKVs0hanb4YKv7y8
gEJd8NBfo560QVhFK5hkziHHgy9Qovo3X6xT0jgHU9zIYyzN2kn38oRVmI60oB+s
yvs8JgFZGC/AJSOVRj8BOoMyM6zU2je4Hd8RTBVmvnB3JD4RjuWXrodzeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDC9cWRaN1JBUW615ukAPedVnDdbMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTUwxeFpGbzNVa0ZSYnJYbTZRQTk1MVdjTjFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudhGMA0G
CSqGSIb3DQEBCwUAA4IBAQBKz/bAH0zW7JOku9CcNy7TJbbcAra1tCxi/yLpAfwC
fV/sAcneKJBKCMiR3QE1bbsoMbz11kEqhZiOSElDZUwqAT/811a7VRk7kf3uT+YU
x9JFW1SBJTk5XdlX+AHjNPdOmOabam3nmKO8HA1F7VUVVVxTzaDvUSZn41gewoQn
gNRSSZU3teHvnQoWBX/75//D4fVNW+H1oDzKp/DtGaj0PD3jy4wsqoRwAxjiilxV
7qfDy0EIZrdWiUN4N92WdT4+5/Hi1FM8YsLSw5H7MJx3blFcCSoboDJkz1QjM1tZ
mmzTvfw14TE9SMn9OWYWkWR0DjWC7IlYpteHxtWNthnF
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:49 2025 by rpki-client