Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/4slDctSKSvyUD0RzLIYjO_184_g.roa
File: 4slDctSKSvyUD0RzLIYjO_184_g.roa (raw, json)
Hash identifier: VmXzHrlX7cRBLhuGuqfbDYJj2CZmdhB9KZJloLx+T08=
Subject key identifier: E2:C9:43:72:D4:8A:4A:FC:94:0F:44:73:2C:86:23:3B:FD:7C:E3:F8
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 01938D22D35F2223531866EAE66D5D799CFA
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/4slDctSKSvyUD0RzLIYjO_184_g.roa
Signing time: Tue 03 Dec 2024 15:28:09 +0000
ROA not before: Tue 03 Dec 2024 15:28:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51956
IP address blocks: 92.53.236.0/22 maxlen: 22
92.53.236.0/24 maxlen: 24
92.53.237.0/24 maxlen: 24
92.53.238.0/24 maxlen: 24
92.53.239.0/24 maxlen: 24
185.201.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:22:d3:5f:22:23:53:18:66:ea:e6:6d:5d:79:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Dec 3 15:28:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2c94372d48a4afc940f44732c86233bfd7ce3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:eb:44:65:e6:5e:a7:e7:3f:56:e2:6b:ca:
1c:99:69:1b:67:02:f4:c3:f3:a2:3c:92:c6:bc:ae:
b9:75:60:ab:3c:10:80:5c:4f:86:71:d9:f4:0c:2c:
5b:94:24:97:f7:1b:0c:33:de:f9:87:13:f0:31:99:
b1:40:55:f2:d1:a1:f2:92:99:c9:ea:30:02:9a:9d:
73:e3:e9:a8:4f:44:83:68:fa:52:e9:15:c9:04:52:
2f:86:6e:aa:78:3c:6f:2a:9b:77:2a:db:bb:d1:98:
f9:30:b1:82:05:10:30:36:17:4a:b1:28:30:02:62:
40:fe:97:7f:09:4c:0d:21:bb:40:00:a4:a4:12:98:
8f:53:e8:f3:5b:66:b8:bd:ce:59:bb:fb:9e:0c:b7:
64:eb:58:2c:4c:4a:2e:6b:df:f7:0f:a1:f3:aa:0c:
4a:40:3e:b3:97:21:13:82:b1:18:64:d2:32:0f:30:
01:88:32:05:13:d5:69:0d:ad:35:10:b4:5d:20:81:
48:e6:f6:55:33:17:72:12:46:69:31:f8:06:37:a3:
65:db:9d:48:0e:1e:64:22:37:d2:cc:53:98:28:4b:
4c:db:49:57:0b:3a:07:32:70:22:02:f8:bb:f4:e2:
e4:b3:33:f2:e4:8d:44:2e:06:2c:f9:df:74:5c:0a:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:43:72:D4:8A:4A:FC:94:0F:44:73:2C:86:23:3B:FD:7C:E3:F8
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/4slDctSKSvyUD0RzLIYjO_184_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.236.0/22
185.201.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:56:30:b4:c2:bd:07:9a:21:29:3d:fa:8f:f1:c5:d8:e2:c7:
93:28:35:37:22:8e:b2:ea:a1:5f:d9:0c:6e:73:f2:f2:ae:57:
a3:bb:47:6d:bc:2e:f4:9b:43:94:c3:66:2d:45:e5:21:c2:30:
9f:3c:8a:38:2d:3e:dd:bf:cb:90:a9:22:f4:a8:25:ae:dc:b3:
91:89:aa:31:bd:27:82:22:d0:66:57:4a:2b:d3:50:63:09:2f:
05:06:b4:c7:0b:fd:a5:14:7d:4f:6b:3c:db:25:d6:85:b7:33:
16:c0:2e:69:68:da:89:bb:08:70:d8:b9:fa:a7:c2:f4:4b:a8:
49:64:3f:11:7f:61:5d:ad:00:ca:f4:dd:fd:7b:7c:a6:6f:a6:
b3:d3:4b:38:f6:01:b8:b7:89:96:df:d1:57:fa:35:aa:d0:3b:
a2:64:5e:86:65:0f:70:71:49:47:09:a2:9c:a2:6f:89:e5:62:
42:6d:d8:d6:ff:6d:f2:9d:12:5a:15:93:f0:91:ac:e4:2d:c3:
9d:76:31:7f:c4:21:16:80:07:3f:de:25:e8:51:fb:dd:63:bd:
d7:00:73:d1:f2:0c:08:6a:1c:71:8c:89:14:77:1b:c5:0a:0e:
af:99:30:fe:db:37:59:43:a7:14:15:63:7a:9c:cd:39:09:be:
91:41:d1:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZONItNfIiNTGGbq5m1deZz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj
ZTBmNmIwHhcNMjQxMjAzMTUyODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmM5NDM3MmQ0OGE0YWZjOTQwZjQ0NzMyYzg2MjMzYmZkN2NlM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbDrRGXmXqfnP1bia8ocmWkbZwL0
w/OiPJLGvK65dWCrPBCAXE+Gcdn0DCxblCSX9xsMM975hxPwMZmxQFXy0aHykpnJ
6jACmp1z4+moT0SDaPpS6RXJBFIvhm6qeDxvKpt3Ktu70Zj5MLGCBRAwNhdKsSgw
AmJA/pd/CUwNIbtAAKSkEpiPU+jzW2a4vc5Zu/ueDLdk61gsTEoua9/3D6HzqgxK
QD6zlyETgrEYZNIyDzABiDIFE9VpDa01ELRdIIFI5vZVMxdyEkZpMfgGN6Nl251I
Dh5kIjfSzFOYKEtM20lXCzoHMnAiAvi79OLkszPy5I1ELgYs+d90XAppVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOLJQ3LUikr8lA9EcyyGIzv9fOP4MB8GA1UdIwQY
MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt
ODgyYzQ0OGUyZWY2LzEvNHNsRGN0U0tTdnlVRDBSekxJWWpPXzE4NF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2
LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXDXsAwQC
ucmsMA0GCSqGSIb3DQEBCwUAA4IBAQC0VjC0wr0HmiEpPfqP8cXY4seTKDU3Io6y
6qFf2Qxuc/Lyrleju0dtvC70m0OUw2YtReUhwjCfPIo4LT7dv8uQqSL0qCWu3LOR
iaoxvSeCItBmV0or01BjCS8FBrTHC/2lFH1PazzbJdaFtzMWwC5paNqJuwhw2Ln6
p8L0S6hJZD8Rf2FdrQDK9N39e3ymb6az00s49gG4t4mW39FX+jWq0DuiZF6GZQ9w
cUlHCaKcom+J5WJCbdjW/23ynRJaFZPwkazkLcOddjF/xCEWgAc/3iXoUfvdY73X
AHPR8gwIahxxjIkUdxvFCg6vmTD+2zdZQ6cUFWN6nM05Cb6RQdEo
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:57:14 2025 by rpki-client