Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vaeBl3IgXe5srF-bwLuPlwgISzk.roa
File: vaeBl3IgXe5srF-bwLuPlwgISzk.roa (raw, json)
Hash identifier: 11JHuW6P0Tg+C06B8/sfPrU56pRUTU1DkLIeI+UFeaw=
Subject key identifier: BD:A7:81:97:72:20:5D:EE:6C:AC:5F:9B:C0:BB:8F:97:08:08:4B:39
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193E01751F40685521EA9033CE19C539217
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vaeBl3IgXe5srF-bwLuPlwgISzk.roa
Signing time: Thu 19 Dec 2024 18:04:04 +0000
ROA not before: Thu 19 Dec 2024 18:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 185.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:17:51:f4:06:85:52:1e:a9:03:3c:e1:9c:53:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 18:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bda7819772205dee6cac5f9bc0bb8f9708084b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:24:26:29:dc:84:07:fe:fe:dc:b0:c0:54:
73:e7:56:5e:db:14:db:94:8a:15:7e:da:a1:23:79:
33:05:35:d7:8c:7e:ef:a5:7d:82:eb:f2:f3:64:c2:
fc:71:85:45:40:8f:30:e7:b1:b9:3f:8d:4b:a8:ec:
31:f3:f6:27:8e:cd:4b:36:36:a7:e1:8e:bf:c1:a8:
8c:89:81:b2:34:26:9d:54:e0:d3:77:6d:bb:c1:80:
53:d0:7e:5c:ae:82:34:90:fd:80:fd:a5:8a:39:1e:
13:8c:e1:6a:74:cc:62:b0:2e:39:d9:b6:6b:54:95:
68:84:00:28:16:24:f6:8f:5d:57:8a:af:e8:08:61:
e1:5d:eb:a8:6f:75:52:41:5e:c5:44:25:21:90:5c:
00:de:97:76:e3:4e:e9:e8:34:cb:b7:1a:3a:45:ba:
e4:9f:ec:2c:fb:99:ca:9e:57:ab:8f:02:d8:2d:68:
f1:0a:be:f9:a3:2a:fb:ba:1d:1a:5b:cb:c0:79:39:
69:4c:fe:e1:82:8e:3f:e2:92:5d:ad:c1:8a:fc:15:
98:4d:37:a7:e2:24:02:6b:56:9f:44:6d:94:fc:86:
98:39:5f:22:20:74:7f:f2:70:c6:ae:70:1a:52:96:
91:fd:0d:64:ef:68:a4:b0:6e:f8:71:a5:34:9e:fb:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:81:97:72:20:5D:EE:6C:AC:5F:9B:C0:BB:8F:97:08:08:4B:39
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vaeBl3IgXe5srF-bwLuPlwgISzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0a:80:1f:d9:57:bd:41:c9:5f:8c:68:98:5f:70:fd:9e:ba:
9b:72:36:19:be:4f:30:f5:38:fa:45:23:39:39:ec:74:bd:eb:
03:a6:5f:36:c4:f5:0e:77:b2:0c:43:1e:ab:d4:b8:42:ef:13:
16:ee:9a:98:16:c7:8e:d9:ed:14:50:31:ff:6a:60:df:43:e7:
f8:7c:a2:e5:7d:c2:e2:15:98:47:2d:ce:c9:44:57:91:be:53:
f7:0e:5a:1c:3b:7b:0c:71:2d:12:55:77:5f:a5:53:7c:ad:f9:
8d:55:b7:e1:fe:0c:4c:e6:29:82:37:9e:88:34:5d:b1:1e:2d:
f2:0f:68:a8:71:c6:cb:14:ef:60:a9:8f:0b:45:56:28:09:89:
61:2d:de:4d:6a:85:ed:19:05:25:90:60:0d:c6:c7:90:6f:2f:
da:d2:dc:84:03:cf:c8:8e:70:21:3e:7a:b1:fc:9e:1e:7a:29:
06:00:66:91:9b:db:07:82:c4:6a:e1:55:d4:f8:ce:6f:3c:15:
1a:86:2d:3a:cb:19:9d:8c:58:00:b0:e7:90:81:4b:97:27:47:
4c:47:62:30:db:02:8a:44:dd:c4:42:5b:b6:98:2e:d8:57:f7:
a1:b7:11:fc:e6:e3:24:fe:fb:a7:60:81:24:95:14:98:fa:fb:
8c:ff:10:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPgF1H0BoVSHqkDPOGcU5IXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjE5MTgwNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGE3ODE5NzcyMjA1ZGVlNmNhYzVmOWJjMGJiOGY5NzA4MDg0YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaokJinchAf+/tywwFRz51Ze2xTb
lIoVftqhI3kzBTXXjH7vpX2C6/LzZML8cYVFQI8w57G5P41LqOwx8/Ynjs1LNjan
4Y6/waiMiYGyNCadVODTd227wYBT0H5croI0kP2A/aWKOR4TjOFqdMxisC452bZr
VJVohAAoFiT2j11Xiq/oCGHhXeuob3VSQV7FRCUhkFwA3pd2407p6DTLtxo6Rbrk
n+ws+5nKnlerjwLYLWjxCr75oyr7uh0aW8vAeTlpTP7hgo4/4pJdrcGK/BWYTTen
4iQCa1afRG2U/IaYOV8iIHR/8nDGrnAaUpaR/Q1k72iksG74caU0nvt+RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2ngZdyIF3ubKxfm8C7j5cICEs5MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdmFlQmwzSWdYZTVzckYtYndMdVBsd2dJU3prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueKtMA0G
CSqGSIb3DQEBCwUAA4IBAQCzCoAf2Ve9QclfjGiYX3D9nrqbcjYZvk8w9Tj6RSM5
Oex0vesDpl82xPUOd7IMQx6r1LhC7xMW7pqYFseO2e0UUDH/amDfQ+f4fKLlfcLi
FZhHLc7JRFeRvlP3DlocO3sMcS0SVXdfpVN8rfmNVbfh/gxM5imCN56INF2xHi3y
D2ioccbLFO9gqY8LRVYoCYlhLd5NaoXtGQUlkGANxseQby/a0tyEA8/IjnAhPnqx
/J4eeikGAGaRm9sHgsRq4VXU+M5vPBUahi06yxmdjFgAsOeQgUuXJ0dMR2Iw2wKK
RN3EQlu2mC7YV/ehtxH85uMk/vunYIEklRSY+vuM/xBm
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:26:37 2025 by rpki-client