Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/24Xtj82MoJxp0aEZFrrRegm92ZU.roa
File: 24Xtj82MoJxp0aEZFrrRegm92ZU.roa (raw, json)
Hash identifier: 3/QDHrSxStwG6QfaOzDcSokjG1RzxuZHy1oiV3jnYcE=
Subject key identifier: DB:85:ED:8F:CD:8C:A0:9C:69:D1:A1:19:16:BA:D1:7A:09:BD:D9:95
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019395B298DE088FBE8861E5189595D6513C
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/24Xtj82MoJxp0aEZFrrRegm92ZU.roa
Signing time: Thu 05 Dec 2024 07:22:09 +0000
ROA not before: Thu 05 Dec 2024 07:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201953
IP address blocks: 91.212.25.0/24 maxlen: 24
185.253.228.0/22 maxlen: 22
2001:67c:5c8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:b2:98:de:08:8f:be:88:61:e5:18:95:95:d6:51:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Dec 5 07:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db85ed8fcd8ca09c69d1a11916bad17a09bdd995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:f0:0a:e0:45:aa:20:9b:1b:9d:54:69:57:
ef:36:bc:50:1c:f0:bb:90:5b:02:64:bc:06:f6:ab:
94:76:e3:9d:5e:c4:98:22:44:75:d2:34:0a:69:6a:
d0:67:90:1e:d9:86:ee:1f:92:77:a3:56:fb:c9:ee:
ab:77:fc:cd:8a:11:5a:b8:de:fd:6b:35:a5:58:d9:
e1:59:4d:0b:6f:25:76:67:af:08:98:27:f2:e1:55:
8c:7c:71:8f:9f:bd:de:d4:b2:a4:f1:78:2b:0f:9a:
7c:fa:ab:f3:76:40:69:aa:aa:bd:12:6d:3f:71:77:
7c:86:8b:6f:8d:fb:48:66:8e:31:82:ff:2d:9e:db:
c9:2d:d7:68:f2:41:8c:7e:a0:f8:ed:3c:40:ac:05:
02:a8:b8:5c:f9:dc:e5:e5:00:3e:ae:53:e4:13:f3:
0b:82:cf:48:4f:bb:82:06:17:37:c4:be:7c:5d:18:
32:29:4b:c6:08:0f:2d:76:f5:56:be:d8:97:c5:38:
e6:4a:25:b6:fa:cd:9d:e7:60:25:75:7c:d3:a3:f4:
1c:0b:3f:8e:57:4c:9f:24:4b:f1:01:cb:c2:35:b2:
0a:27:3f:73:26:00:32:78:51:b4:4c:75:d5:a2:19:
e4:ab:a3:c1:81:35:a6:94:48:e7:6e:1e:63:1a:d1:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:85:ED:8F:CD:8C:A0:9C:69:D1:A1:19:16:BA:D1:7A:09:BD:D9:95
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/24Xtj82MoJxp0aEZFrrRegm92ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.25.0/24
185.253.228.0/22
IPv6:
2001:67c:5c8::/48
Signature Algorithm: sha256WithRSAEncryption
64:39:d7:0b:59:96:85:d4:7a:9d:eb:fb:08:79:8d:f8:5e:25:
ca:3b:f6:32:ff:a7:a2:64:17:99:c1:18:55:af:7b:9f:a7:cd:
07:7a:25:57:2b:72:6a:ce:3d:30:d5:09:3d:78:53:ec:ff:b2:
5b:66:af:c8:e0:5e:23:ca:5a:57:1e:d2:f4:1f:7c:4f:f2:cb:
53:87:58:af:53:93:93:4a:c2:c5:75:58:93:81:d7:e4:ea:66:
32:84:70:3e:7e:50:6d:66:59:77:3c:a7:5f:6c:46:50:cd:b5:
3e:ef:dc:ea:69:96:69:10:f1:a5:f2:5e:d4:a0:35:30:4b:c7:
c5:c6:1d:ac:eb:92:ef:79:1b:9f:ed:f7:00:b0:a4:79:f0:29:
0c:47:2f:74:81:ef:0d:11:03:af:cb:8d:9f:2a:3a:88:26:f7:
54:3c:b5:21:10:d4:9f:d4:09:60:43:0c:63:5c:b5:88:70:46:
cd:27:26:2c:92:69:52:0f:fa:fa:87:09:81:8c:0c:87:78:80:
85:c8:6f:cc:65:48:0a:fd:34:57:1f:27:85:7d:d0:08:b0:e9:
cc:41:6b:da:0c:b9:e3:35:16:65:3e:f2:a4:8d:59:8e:9e:c7:
a7:42:33:15:85:35:3d:c9:9c:09:d9:87:79:c7:1a:56:d1:af:
c8:91:df:05
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZOVspjeCI++iGHlGJWV1lE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjQxMjA1MDcyMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjg1ZWQ4ZmNkOGNhMDljNjlkMWExMTkxNmJhZDE3YTA5YmRkOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/rwCuBFqiCbG51UaVfvNrxQHPC7
kFsCZLwG9quUduOdXsSYIkR10jQKaWrQZ5Ae2YbuH5J3o1b7ye6rd/zNihFauN79
azWlWNnhWU0LbyV2Z68ImCfy4VWMfHGPn73e1LKk8XgrD5p8+qvzdkBpqqq9Em0/
cXd8hotvjftIZo4xgv8tntvJLddo8kGMfqD47TxArAUCqLhc+dzl5QA+rlPkE/ML
gs9IT7uCBhc3xL58XRgyKUvGCA8tdvVWvtiXxTjmSiW2+s2d52AldXzTo/QcCz+O
V0yfJEvxAcvCNbIKJz9zJgAyeFG0THXVohnkq6PBgTWmlEjnbh5jGtFRKQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFNuF7Y/NjKCcadGhGRa60XoJvdmVMB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMjRYdGo4Mk1vSnhwMGFFWkZyclJlZ205MlpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9QZAwQC
uf3kMA8EAgACMAkDBwAgAQZ8BcgwDQYJKoZIhvcNAQELBQADggEBAGQ51wtZloXU
ep3r+wh5jfheJco79jL/p6JkF5nBGFWve5+nzQd6JVcrcmrOPTDVCT14U+z/sltm
r8jgXiPKWlce0vQffE/yy1OHWK9Tk5NKwsV1WJOB1+TqZjKEcD5+UG1mWXc8p19s
RlDNtT7v3OpplmkQ8aXyXtSgNTBLx8XGHazrku95G5/t9wCwpHnwKQxHL3SB7w0R
A6/LjZ8qOogm91Q8tSEQ1J/UCWBDDGNctYhwRs0nJiySaVIP+vqHCYGMDId4gIXI
b8xlSAr9NFcfJ4V90Aiw6cxBa9oMueM1FmU+8qSNWY6ex6dCMxWFNT3JnAnZh3nH
GlbRr8iR3wU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:45 2025 by rpki-client