Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/WY7qOJtwQ5sEZwT_8AI6IBrFKkc.roa
File: WY7qOJtwQ5sEZwT_8AI6IBrFKkc.roa (raw, json)
Hash identifier: LRzgJ9Jpo5aurhbQYuDXT8Qoam+h6O+8TBtDFt7RIso=
Subject key identifier: 59:8E:EA:38:9B:70:43:9B:04:67:04:FF:F0:02:3A:20:1A:C5:2A:47
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 018CC56EC8695D891DA1D68E3EFDED1F08E5
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/WY7qOJtwQ5sEZwT_8AI6IBrFKkc.roa
Signing time: Mon 01 Jan 2024 14:30:20 +0000
ROA not before: Mon 01 Jan 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60999
IP address blocks: 185.90.169.0/24 maxlen: 24
185.90.168.0/24 maxlen: 24
185.90.171.0/24 maxlen: 24
185.90.168.0/22 maxlen: 22
185.90.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c8:69:5d:89:1d:a1:d6:8e:3e:fd:ed:1f:08:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=598eea389b70439b046704fff0023a201ac52a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:cc:e6:55:c9:bf:4d:06:b8:0a:96:6a:e5:
1d:0f:9c:54:1a:97:46:95:6f:7e:38:ac:b0:f8:d8:
27:a5:57:8d:6d:c5:d6:86:9b:89:5a:e9:43:57:6b:
d5:d1:ea:d4:ff:0d:b5:63:9b:d2:11:23:2f:4d:32:
38:21:55:b1:38:0a:39:ad:50:39:46:6b:82:b9:a1:
87:f5:93:13:f4:1d:b3:37:f4:46:bf:77:49:ff:a0:
4c:a7:7f:de:63:3d:85:2d:23:17:4d:38:04:b6:0a:
fa:52:fb:c0:02:1b:da:66:9e:06:2c:67:ad:39:5b:
fc:78:89:6f:96:74:ff:d4:a9:8f:39:f8:0c:e9:d5:
08:eb:25:c7:7b:c2:81:83:e2:62:73:15:33:3a:3e:
bf:80:e7:a1:eb:87:c2:54:a5:6e:a7:2b:ff:23:01:
62:d0:4d:63:3c:a1:95:72:62:65:cd:e5:f2:44:d5:
c7:13:1b:35:8d:52:46:55:a1:ce:c5:6c:57:ec:26:
b2:7e:3d:8a:45:93:7d:90:ae:fc:68:e3:f2:9b:e0:
4c:16:d7:55:80:57:c2:63:49:37:19:ce:3a:9b:3c:
2a:cc:2e:98:a8:9e:e5:ab:6c:6d:35:49:d0:24:90:
aa:fb:46:1f:9d:05:5a:b7:56:82:b7:33:d6:2d:b0:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:EA:38:9B:70:43:9B:04:67:04:FF:F0:02:3A:20:1A:C5:2A:47
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/WY7qOJtwQ5sEZwT_8AI6IBrFKkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.168.0/22
Signature Algorithm: sha256WithRSAEncryption
78:0e:43:50:8c:7b:4c:59:0d:2e:d5:b0:0a:8f:76:59:0e:ad:
dd:74:c8:59:5d:97:78:83:ad:eb:f5:11:2e:3a:e2:04:a9:29:
aa:3c:ba:15:f8:76:60:07:e4:ac:e1:c0:03:2c:ba:e3:31:ec:
a7:a9:05:6c:7e:0e:b1:d8:53:6c:a6:2b:d6:c2:d9:32:b8:d7:
4e:82:31:69:ba:d3:f6:d2:16:29:fc:56:38:18:ca:db:3b:9d:
7e:40:72:10:ba:01:15:27:9d:31:ed:e3:e5:6c:22:0f:51:99:
c0:59:7b:95:bb:f2:27:ea:22:87:f5:d9:32:74:9f:ec:d1:4e:
8a:e3:7c:ea:03:3d:4f:97:47:c4:24:ea:a8:7e:9d:d6:72:60:
b0:a1:64:5e:2c:d0:33:e8:82:72:29:b4:b7:bb:5d:f0:79:30:
7c:a9:2a:35:45:2f:1b:1f:e0:7a:9c:bf:3c:50:ab:c1:14:9a:
a4:1b:fe:da:a2:74:6e:94:ef:1e:38:83:24:51:2e:49:39:2d:
4b:b0:26:b3:76:27:87:e2:a4:43:b6:03:9f:3b:56:3e:f5:a7:
7d:89:0a:c2:84:5c:51:9d:12:ba:d7:5a:51:5f:e5:20:85:dd:
cb:7e:73:15:9e:57:26:66:00:be:f0:47:e9:c0:a8:fe:9a:35:
ce:24:00:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbshpXYkdodaOPv3tHwjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2JlOTJkYmZlMzg1NjE1NjQwNmZhNzI1ZTE1ZGY1OTg4
ZTVjMTAwHhcNMjQwMTAxMTQzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OThlZWEzODliNzA0MzliMDQ2NzA0ZmZmMDAyM2EyMDFhYzUyYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTDM5lXJv00GuAqWauUdD5xUGpdG
lW9+OKyw+NgnpVeNbcXWhpuJWulDV2vV0erU/w21Y5vSESMvTTI4IVWxOAo5rVA5
RmuCuaGH9ZMT9B2zN/RGv3dJ/6BMp3/eYz2FLSMXTTgEtgr6UvvAAhvaZp4GLGet
OVv8eIlvlnT/1KmPOfgM6dUI6yXHe8KBg+JicxUzOj6/gOeh64fCVKVupyv/IwFi
0E1jPKGVcmJlzeXyRNXHExs1jVJGVaHOxWxX7Cayfj2KRZN9kK78aOPym+BMFtdV
gFfCY0k3Gc46mzwqzC6YqJ7lq2xtNUnQJJCq+0YfnQVat1aCtzPWLbCZqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFmO6jibcEObBGcE//ACOiAaxSpHMB8GA1UdIwQY
MBaAFKx76S2/44VhVkBvpyXhXfWYjlwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgt
OTlkNzI1MmY1YmUwLzEvV1k3cU9KdHdRNXNFWndUXzhBSTZJQnJGS2tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgtOTlkNzI1MmY1YmUw
LzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVqoMA0G
CSqGSIb3DQEBCwUAA4IBAQB4DkNQjHtMWQ0u1bAKj3ZZDq3ddMhZXZd4g63r9REu
OuIEqSmqPLoV+HZgB+Ss4cADLLrjMeynqQVsfg6x2FNspivWwtkyuNdOgjFputP2
0hYp/FY4GMrbO51+QHIQugEVJ50x7ePlbCIPUZnAWXuVu/In6iKH9dkydJ/s0U6K
43zqAz1Pl0fEJOqofp3WcmCwoWReLNAz6IJyKbS3u13weTB8qSo1RS8bH+B6nL88
UKvBFJqkG/7aonRulO8eOIMkUS5JOS1LsCazdieH4qRDtgOfO1Y+9ad9iQrChFxR
nRK611pRX+Ughd3LfnMVnlcmZgC+8EfpwKj+mjXOJABh
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:41 2025 by rpki-client