Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/h2etzdQ5va704BHw1vj73FzoLug.roa
File: h2etzdQ5va704BHw1vj73FzoLug.roa (raw, json)
Hash identifier: IkWnyIvstpPFfemMcPD5R8iCsjk78nh+HnGYxPmpm20=
Subject key identifier: 87:67:AD:CD:D4:39:BD:AE:F4:E0:11:F0:D6:F8:FB:DC:5C:E8:2E:E8
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 01922415C27C042A26121B6ABAC1EB238914
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/h2etzdQ5va704BHw1vj73FzoLug.roa
Signing time: Tue 24 Sep 2024 12:50:58 +0000
ROA not before: Tue 24 Sep 2024 12:50:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 263702
IP address blocks: 185.9.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:15:c2:7c:04:2a:26:12:1b:6a:ba:c1:eb:23:89:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Sep 24 12:50:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8767adcdd439bdaef4e011f0d6f8fbdc5ce82ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:1c:bb:ab:9d:76:e8:a4:34:c8:35:f3:a2:
b5:ba:c0:72:be:c9:6c:46:73:86:7e:47:41:4b:77:
89:c3:6f:28:d1:39:df:34:f4:bc:e2:7c:e5:23:c3:
0a:d9:4a:7d:6c:80:ef:e0:3b:12:1e:e5:b1:b0:51:
9f:49:6c:00:03:16:c4:56:21:cf:5a:94:16:9e:b0:
40:0e:a8:71:34:c0:34:7f:ed:fa:cf:8a:74:9f:40:
08:8a:5c:0c:7b:e0:84:6d:48:79:2f:44:7e:63:02:
bf:ed:47:f0:b0:90:3d:f3:fa:b3:7d:16:ab:ae:ab:
19:83:3c:df:f4:2b:d7:e6:4e:08:ed:53:f5:fc:3e:
ae:55:90:69:dd:92:ea:b3:46:2a:bb:39:57:6b:99:
92:c2:14:99:53:9a:f3:29:8e:7f:9f:92:90:b5:d5:
12:42:45:f1:93:bc:48:f0:b6:97:08:c4:cb:ba:44:
21:70:3f:1e:88:fd:0d:88:a7:de:2c:77:d4:08:85:
99:57:64:b6:3c:a1:f5:cd:3f:bc:f4:be:94:5c:6d:
5f:48:4e:5b:9d:9a:47:18:bd:07:ea:6a:68:8b:7f:
be:b3:3d:36:8d:5a:c6:6d:21:41:6b:ac:90:7d:1b:
81:e0:a0:06:8c:b2:db:de:42:88:0b:ad:67:7e:e1:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:AD:CD:D4:39:BD:AE:F4:E0:11:F0:D6:F8:FB:DC:5C:E8:2E:E8
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/h2etzdQ5va704BHw1vj73FzoLug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
83:82:f5:5a:f2:5d:dd:de:b1:02:34:d5:cb:2c:86:2d:9b:e8:
b6:c9:f5:26:4f:78:4a:99:b9:7a:bd:71:1c:3c:3d:a6:e4:5d:
54:18:09:9c:f0:89:42:71:29:55:48:6a:4b:da:8a:42:a3:93:
c6:24:87:d3:9a:d3:bd:b4:44:c7:1a:61:53:5f:f6:8b:f5:da:
51:37:61:7c:2b:84:f7:e9:e0:ed:c3:4a:04:6e:19:e5:c3:82:
d1:3a:2d:43:a1:8c:04:7f:35:14:e9:6f:df:d5:59:cc:1c:50:
36:68:76:af:57:16:45:24:f5:a2:b1:d6:08:23:06:3d:54:05:
ad:8d:5b:5c:75:73:9b:b0:2d:03:77:48:96:c3:54:aa:bf:90:
73:7d:12:76:35:d2:82:0c:b2:b4:c5:55:65:4a:b5:4e:c6:5e:
90:8c:16:4c:6a:53:86:e8:49:d9:68:1f:91:51:30:dc:58:0b:
a8:09:fe:17:7f:f7:72:0e:f4:c2:19:52:b5:36:26:6f:2e:1a:
36:10:63:2f:d5:c5:bc:a7:3b:9a:f1:f4:d1:c1:f8:e7:de:b6:
e9:d4:f9:44:2f:6a:e7:03:43:f9:32:74:cc:6f:4b:12:5a:38:
85:87:90:7e:36:e8:7b:83:65:95:78:c0:af:fa:85:9a:f6:3d:
9b:8b:f7:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIkFcJ8BComEhtqusHrI4kUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjQwOTI0MTI1MDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzY3YWRjZGQ0MzliZGFlZjRlMDExZjBkNmY4ZmJkYzVjZTgyZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSwcu6udduikNMg186K1usByvsls
RnOGfkdBS3eJw28o0TnfNPS84nzlI8MK2Up9bIDv4DsSHuWxsFGfSWwAAxbEViHP
WpQWnrBADqhxNMA0f+36z4p0n0AIilwMe+CEbUh5L0R+YwK/7UfwsJA98/qzfRar
rqsZgzzf9CvX5k4I7VP1/D6uVZBp3ZLqs0YquzlXa5mSwhSZU5rzKY5/n5KQtdUS
QkXxk7xI8LaXCMTLukQhcD8eiP0NiKfeLHfUCIWZV2S2PKH1zT+89L6UXG1fSE5b
nZpHGL0H6mpoi3++sz02jVrGbSFBa6yQfRuB4KAGjLLb3kKIC61nfuEKbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdnrc3UOb2u9OAR8Nb4+9xc6C7oMB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvaDJldHpkUTV2YTcwNEJIdzF2ajczRnpvTHVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQkDMA0G
CSqGSIb3DQEBCwUAA4IBAQCDgvVa8l3d3rECNNXLLIYtm+i2yfUmT3hKmbl6vXEc
PD2m5F1UGAmc8IlCcSlVSGpL2opCo5PGJIfTmtO9tETHGmFTX/aL9dpRN2F8K4T3
6eDtw0oEbhnlw4LROi1DoYwEfzUU6W/f1VnMHFA2aHavVxZFJPWisdYIIwY9VAWt
jVtcdXObsC0Dd0iWw1Sqv5BzfRJ2NdKCDLK0xVVlSrVOxl6QjBZMalOG6EnZaB+R
UTDcWAuoCf4Xf/dyDvTCGVK1NiZvLho2EGMv1cW8pzua8fTRwfjn3rbp1PlEL2rn
A0P5MnTMb0sSWjiFh5B+Nuh7g2WVeMCv+oWa9j2bi/f5
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:25 2025 by rpki-client