Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/S_mBab3RqwWo9UoS5EqKZVjfVFc.roa
File: S_mBab3RqwWo9UoS5EqKZVjfVFc.roa (raw, json)
Hash identifier: HYiPEgFNYO1KY8CgVYAPB8hc8ykiTzbDsKG5Lk/aspk=
Subject key identifier: 4B:F9:81:69:BD:D1:AB:05:A8:F5:4A:12:E4:4A:8A:65:58:DF:54:57
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 0191C6E0BBFFB1E4638DC0394EF63A568EAF
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/S_mBab3RqwWo9UoS5EqKZVjfVFc.roa
Signing time: Fri 06 Sep 2024 10:28:22 +0000
ROA not before: Fri 06 Sep 2024 10:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196954
IP address blocks: 185.210.54.0/26 maxlen: 26
Validation: Failed, certificate revoked on Tue 10 Sep 2024 15:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:e0:bb:ff:b1:e4:63:8d:c0:39:4e:f6:3a:56:8e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Sep 6 10:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bf98169bdd1ab05a8f54a12e44a8a6558df5457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:c1:41:91:1d:14:41:2a:b6:44:f1:54:1b:
08:fd:f1:9a:8a:d3:04:b4:0f:5d:61:f5:9b:c1:1a:
18:9b:9e:76:79:76:4b:a9:d1:b9:95:1c:0a:b1:cd:
ef:d6:bc:e1:30:5e:e9:e9:02:72:0d:08:fb:f3:20:
40:66:bd:44:9b:cb:fc:0c:99:73:ae:11:86:0c:8c:
c7:58:9c:97:bb:be:f3:f5:8e:8e:ad:9d:65:9e:09:
ec:46:b8:28:73:fb:fd:f7:f7:e1:ef:c8:e3:c4:28:
0c:c8:a5:f9:5a:3e:01:43:c4:40:65:99:93:0b:36:
e0:c4:26:15:c5:97:9f:db:b9:2a:e0:77:1b:9e:6b:
3e:b3:b7:63:43:be:24:a5:29:1d:eb:6b:72:e7:f3:
4e:9a:d6:4f:d2:7c:9e:38:4d:47:2c:ee:4f:60:11:
c0:17:51:b3:f1:a9:ae:08:8e:25:3a:6e:8d:ca:1d:
db:fc:77:fd:6a:8a:b5:e8:2a:ff:2b:09:5b:8d:3f:
1f:96:8a:56:9c:5b:8b:fe:d4:34:8c:5b:ab:42:9a:
ee:f1:5c:8c:96:3a:5c:e6:1e:e5:43:68:c6:d7:24:
4c:7f:91:ce:29:84:92:18:e4:24:2b:db:30:07:65:
81:dd:d6:e0:f4:f1:54:9d:c9:8b:ad:bc:3b:f8:ba:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:81:69:BD:D1:AB:05:A8:F5:4A:12:E4:4A:8A:65:58:DF:54:57
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/S_mBab3RqwWo9UoS5EqKZVjfVFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.54.0/26
Signature Algorithm: sha256WithRSAEncryption
2c:91:99:d8:cd:5f:1c:f2:13:3d:ec:be:90:83:1e:f7:f2:22:
5d:3a:ad:71:9e:83:19:2f:3a:63:4d:f1:4c:59:1c:49:3f:4d:
bd:9b:9f:55:b7:df:a6:24:67:11:d0:6c:6d:64:05:ef:1a:8d:
93:3e:68:fa:b5:08:98:a9:ae:22:b7:10:58:7c:e7:8d:8b:9f:
c9:12:c8:85:fd:c8:ae:4a:17:f0:a5:23:ec:0a:91:5d:ed:92:
0e:04:2e:03:b0:5b:87:6c:22:d1:77:16:01:48:a9:d0:01:c6:
82:5b:d7:b1:f4:3c:f5:3b:c8:45:b9:82:f0:76:04:a6:54:ac:
93:9a:e4:b9:c2:be:80:ff:f8:16:75:70:e8:f4:50:fa:dc:f9:
a8:2e:64:93:ed:1d:d7:26:0f:ba:fd:52:5f:a6:aa:ff:d2:8f:
96:be:fe:a2:98:e4:2a:11:d4:c9:ed:af:50:67:06:d2:2d:ce:
a2:6b:00:c3:b2:5c:28:a6:fb:ee:13:79:57:da:49:00:bc:82:
e7:20:ed:d2:08:06:74:d5:2f:fe:0a:0d:93:91:90:0c:f6:aa:
d6:90:34:82:20:28:03:82:20:1d:56:b2:35:45:a3:37:b5:db:
45:a3:53:b3:8b:03:96:9f:4a:24:e1:83:70:52:3a:a7:fc:15:
e8:d8:b9:e0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZHG4Lv/seRjjcA5TvY6Vo6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi
YmM0OWMwHhcNMjQwOTA2MTAyODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmY5ODE2OWJkZDFhYjA1YThmNTRhMTJlNDRhOGE2NTU4ZGY1NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBLBQZEdFEEqtkTxVBsI/fGaitME
tA9dYfWbwRoYm552eXZLqdG5lRwKsc3v1rzhMF7p6QJyDQj78yBAZr1Em8v8DJlz
rhGGDIzHWJyXu77z9Y6OrZ1lngnsRrgoc/v99/fh78jjxCgMyKX5Wj4BQ8RAZZmT
CzbgxCYVxZef27kq4Hcbnms+s7djQ74kpSkd62ty5/NOmtZP0nyeOE1HLO5PYBHA
F1Gz8amuCI4lOm6Nyh3b/Hf9aoq16Cr/KwlbjT8flopWnFuL/tQ0jFurQpru8VyM
ljpc5h7lQ2jG1yRMf5HOKYSSGOQkK9swB2WB3dbg9PFUncmLrbw7+LqVSQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEv5gWm90asFqPVKEuRKimVY31RXMB8GA1UdIwQY
MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvU19tQmFiM1Jxd1dvOVVvUzVFcUtaVmpmVkZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGudI2ADAN
BgkqhkiG9w0BAQsFAAOCAQEALJGZ2M1fHPITPey+kIMe9/IiXTqtcZ6DGS86Y03x
TFkcST9NvZufVbffpiRnEdBsbWQF7xqNkz5o+rUImKmuIrcQWHznjYufyRLIhf3I
rkoX8KUj7AqRXe2SDgQuA7Bbh2wi0XcWAUip0AHGglvXsfQ89TvIRbmC8HYEplSs
k5rkucK+gP/4FnVw6PRQ+tz5qC5kk+0d1yYPuv1SX6aq/9KPlr7+opjkKhHUye2v
UGcG0i3OomsAw7JcKKb77hN5V9pJALyC5yDt0ggGdNUv/goNk5GQDPaq1pA0giAo
A4IgHVayNUWjN7XbRaNTs4sDlp9KJOGDcFI6p/wV6Ni54A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:47 2025 by rpki-client