Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y6AYCiK_mn1h_ag9RyOTyEZvxWk.roa
File: y6AYCiK_mn1h_ag9RyOTyEZvxWk.roa (raw, json)
Hash identifier: iy9ZS5wcSGtE7a3q6TQn7TBGk0coodAsaB+01Q8JW0k=
Subject key identifier: CB:A0:18:0A:22:BF:9A:7D:61:FD:A8:3D:47:23:93:C8:46:6F:C5:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194FFBCFB619F342A98763008D6DB22C74C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y6AYCiK_mn1h_ag9RyOTyEZvxWk.roa
Signing time: Thu 13 Feb 2025 14:36:02 +0000
ROA not before: Thu 13 Feb 2025 14:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 85.93.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 07:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:bc:fb:61:9f:34:2a:98:76:30:08:d6:db:22:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 13 14:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cba0180a22bf9a7d61fda83d472393c8466fc569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:a3:00:9c:ea:fc:81:2b:a2:1a:df:59:ed:
77:90:08:88:e9:b0:d8:f3:5f:75:39:94:39:0a:2c:
1e:fb:0b:dc:f4:ca:eb:a9:df:d5:53:08:b2:7b:6d:
f3:8a:81:4f:0f:0f:9f:08:84:f4:84:85:20:91:a6:
71:b3:8b:4e:ec:bf:89:f5:ab:5b:4d:0c:2c:91:06:
d7:95:46:6b:5a:90:44:e1:63:13:db:2e:c5:b3:e2:
ec:8d:d5:5d:19:6b:a2:5a:69:04:9d:73:46:59:21:
60:c9:93:25:f8:d8:a0:47:f2:dd:da:e5:c3:ea:80:
56:a2:73:88:6b:63:03:49:b2:d1:dc:05:c8:ff:24:
90:75:01:a0:a5:cd:71:99:d1:49:5f:e1:25:09:6a:
59:0d:f2:cc:47:9f:92:9b:aa:c8:2b:d4:88:dd:1a:
b4:70:fe:f2:0b:0d:8c:e6:c9:94:96:88:8a:d5:d4:
c6:39:24:d6:ea:17:ad:76:4f:fa:5f:8f:cd:74:bf:
b5:89:e3:93:31:99:7e:02:7f:c9:48:c9:7c:82:1b:
89:c0:89:8d:72:d3:9f:fe:aa:38:57:e1:e5:3e:d0:
7c:8e:37:7f:e7:a2:5f:ed:a7:1f:58:27:4f:b9:36:
71:c1:d8:09:9a:ff:7b:59:1e:84:e9:91:e7:bb:68:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:18:0A:22:BF:9A:7D:61:FD:A8:3D:47:23:93:C8:46:6F:C5:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y6AYCiK_mn1h_ag9RyOTyEZvxWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:50:12:a0:f9:a4:62:4e:d0:14:0e:8c:7b:77:b7:41:b0:d1:
31:61:28:5a:fe:39:b5:d3:3e:34:52:21:8b:1c:f4:ce:27:75:
d3:7c:fc:87:7b:12:7a:a8:37:9f:1b:64:bb:08:9a:1f:0f:47:
0e:27:26:96:87:62:0b:0c:8c:00:f1:37:40:fe:ed:fa:e5:de:
c3:87:61:f6:11:20:49:66:80:28:91:48:5c:a6:2b:15:2e:f3:
94:1d:dd:94:9f:71:33:df:f6:f1:b0:07:d9:bd:eb:36:df:11:
fa:a1:21:27:d9:99:00:45:c6:e5:e8:ae:26:e2:e2:70:4d:6e:
61:e6:51:a6:30:a0:9a:f6:69:64:e1:9b:be:6c:7e:10:b3:5e:
8d:24:a6:34:7b:25:db:33:63:69:d0:81:d9:b1:09:88:92:e3:
f7:9b:0b:69:41:3b:4d:64:2d:d1:8a:8d:a8:f9:4d:b2:47:d0:
33:1b:4e:85:0d:9a:ad:58:fe:7a:0f:d6:a7:56:b9:76:3b:f1:
27:23:1c:64:16:98:74:7a:35:13:7f:2f:13:5c:13:d0:fe:0d:
8d:e1:73:bb:e0:e9:76:81:60:b8:75:88:7f:a0:80:80:79:18:
25:32:f2:d8:a1:37:a1:3a:6e:91:0d:4b:63:8e:70:8f:57:79:
c8:fb:95:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT/vPthnzQqmHYwCNbbIsdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjEzMTQzNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmEwMTgwYTIyYmY5YTdkNjFmZGE4M2Q0NzIzOTNjODQ2NmZjNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTyjAJzq/IErohrfWe13kAiI6bDY
8191OZQ5Ciwe+wvc9Mrrqd/VUwiye23zioFPDw+fCIT0hIUgkaZxs4tO7L+J9atb
TQwskQbXlUZrWpBE4WMT2y7Fs+LsjdVdGWuiWmkEnXNGWSFgyZMl+NigR/Ld2uXD
6oBWonOIa2MDSbLR3AXI/ySQdQGgpc1xmdFJX+ElCWpZDfLMR5+Sm6rIK9SI3Rq0
cP7yCw2M5smUloiK1dTGOSTW6hetdk/6X4/NdL+1ieOTMZl+An/JSMl8ghuJwImN
ctOf/qo4V+HlPtB8jjd/56Jf7acfWCdPuTZxwdgJmv97WR6E6ZHnu2i76wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMugGAoiv5p9Yf2oPUcjk8hGb8VpMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEveTZBWUNpS19tbjFoX2FnOVJ5T1R5RVp2eFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0fMA0G
CSqGSIb3DQEBCwUAA4IBAQA8UBKg+aRiTtAUDox7d7dBsNExYSha/jm10z40UiGL
HPTOJ3XTfPyHexJ6qDefG2S7CJofD0cOJyaWh2ILDIwA8TdA/u365d7Dh2H2ESBJ
ZoAokUhcpisVLvOUHd2Un3Ez3/bxsAfZves23xH6oSEn2ZkARcbl6K4m4uJwTW5h
5lGmMKCa9mlk4Zu+bH4Qs16NJKY0eyXbM2Np0IHZsQmIkuP3mwtpQTtNZC3Rio2o
+U2yR9AzG06FDZqtWP56D9anVrl2O/EnIxxkFph0ejUTfy8TXBPQ/g2N4XO74Ol2
gWC4dYh/oICAeRglMvLYoTehOm6RDUtjjnCPV3nI+5Uc
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:51 2025 by rpki-client