Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/nip39Msco-TsQkKqgBTkypNbyZs.roa
File: nip39Msco-TsQkKqgBTkypNbyZs.roa (raw, json)
Hash identifier: /FBsbMMSaLJTRRstDDKRHG1bapU+wS4ANGurNZ1hMfk=
Subject key identifier: 9E:2A:77:F4:CB:1C:A3:E4:EC:42:42:AA:80:14:E4:CA:93:5B:C9:9B
Certificate issuer: /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial: 018CC56DF84E688070446685DC6F662A5BF7
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/nip39Msco-TsQkKqgBTkypNbyZs.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47866
IP address blocks: 185.85.244.0/24 maxlen: 24
185.85.244.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:4e:68:80:70:44:66:85:dc:6f:66:2a:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e2a77f4cb1ca3e4ec4242aa8014e4ca935bc99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:6a:fb:e9:9e:13:4d:92:00:95:d3:12:dc:
6e:a6:9c:df:3c:98:4a:85:07:94:e0:08:9a:62:12:
54:41:9e:a9:11:cb:16:14:0c:f2:f8:92:89:7a:be:
7c:f2:f3:89:57:d9:87:89:56:cb:b4:4f:5f:a3:dd:
7f:9d:f4:69:1e:a2:02:19:b3:80:96:d7:36:38:2c:
2c:d2:44:3b:3f:5b:4f:70:78:4c:92:1b:e3:cf:cb:
11:0c:fb:7c:9e:14:f1:74:00:d9:64:67:14:2c:3e:
f6:7a:5d:60:70:05:fd:30:19:81:03:ff:06:21:70:
ac:85:22:d8:45:81:d0:82:fd:ab:af:73:70:3f:ea:
7c:6b:4b:de:ad:93:d3:c6:eb:a7:0c:e2:7d:25:3f:
c9:89:6b:55:69:2d:ce:1d:2e:36:47:6d:5f:d1:2d:
97:0c:ca:c1:27:d1:77:e6:57:02:9d:9b:b1:d5:77:
4c:9f:eb:9d:45:a2:54:88:8c:a8:15:6e:a7:c8:f1:
51:73:56:c4:19:aa:5b:e2:d0:fb:43:73:b7:c3:79:
00:e2:38:f8:9a:7c:cb:f4:d1:0b:9c:eb:00:a2:4b:
2e:19:56:87:55:82:65:9e:b9:62:f1:a7:7a:99:b5:
e3:28:43:1a:07:2c:eb:c8:bf:5f:0e:bf:ec:a5:3f:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2A:77:F4:CB:1C:A3:E4:EC:42:42:AA:80:14:E4:CA:93:5B:C9:9B
X509v3 Authority Key Identifier:
keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/nip39Msco-TsQkKqgBTkypNbyZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.244.0/22
Signature Algorithm: sha256WithRSAEncryption
90:49:78:d8:e8:b3:c8:ce:44:6f:4f:82:85:1d:a1:4a:06:b9:
19:61:0c:ee:7e:54:1b:f3:df:1b:12:59:0c:9b:ee:4f:88:72:
4e:46:b8:47:26:b4:15:56:43:fa:2d:55:c8:f7:45:35:b1:b3:
83:36:05:6c:14:5f:f8:c3:4f:fc:88:45:13:a9:07:d9:a1:a6:
04:43:e2:17:57:42:5c:ff:7b:7c:74:77:ff:c9:bf:57:9e:2b:
06:9a:eb:c4:ad:7c:4a:58:31:9f:fe:76:3d:bf:2d:83:ae:67:
05:1e:5a:f1:5e:07:17:e8:ec:e5:78:dd:d9:96:36:7f:be:49:
cb:fd:e3:23:2e:a6:f8:25:55:05:f4:85:11:49:20:41:ca:44:
d0:02:c5:ce:83:30:c7:ab:c1:dd:bd:70:c1:34:0f:43:30:42:
9e:22:42:79:d6:31:80:15:8d:1a:e4:74:42:e5:1e:62:7d:49:
1b:16:e3:66:1a:02:23:46:fe:5a:b0:c6:41:72:ce:58:37:d5:
ae:c1:06:da:2b:0a:98:55:22:ee:0f:5b:96:4b:91:86:ee:80:
54:97:de:84:c2:e3:a0:ee:e7:03:99:59:04:f3:7a:3b:33:f7:
35:7d:91:4a:67:19:62:0c:f1:9d:73:36:d0:38:3f:80:aa:ee:
45:09:ce:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfhOaIBwRGaF3G9mKlv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjFkNTI1ZDllMWM4ZmVlN2Y1MWM5Mjk5ODQzMjE5MTJm
ZmYzNGMwHhcNMjQwMTAxMTQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJhNzdmNGNiMWNhM2U0ZWM0MjQyYWE4MDE0ZTRjYTkzNWJjOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP5q++meE02SAJXTEtxuppzfPJhK
hQeU4AiaYhJUQZ6pEcsWFAzy+JKJer588vOJV9mHiVbLtE9fo91/nfRpHqICGbOA
ltc2OCws0kQ7P1tPcHhMkhvjz8sRDPt8nhTxdADZZGcULD72el1gcAX9MBmBA/8G
IXCshSLYRYHQgv2rr3NwP+p8a0verZPTxuunDOJ9JT/JiWtVaS3OHS42R21f0S2X
DMrBJ9F35lcCnZux1XdMn+udRaJUiIyoFW6nyPFRc1bEGapb4tD7Q3O3w3kA4jj4
mnzL9NELnOsAoksuGVaHVYJlnrli8ad6mbXjKEMaByzryL9fDr/spT+smQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4qd/TLHKPk7EJCqoAU5MqTW8mbMB8GA1UdIwQY
MBaAFFrx1SXZ4cj+5/UckpmEMhkS//NMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZIVkpkbmh5UDduOVJ5U21ZUXlHUkxfODB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQt
YTExNDkzOWNkYWE1LzEvbmlwMzlNc2NvLVRzUWtLcWdCVGt5cE5ieVpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQtYTExNDkzOWNkYWE1
LzEvV3ZIVkpkbmh5UDduOVJ5U21ZUXlHUkxfODB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVX0MA0G
CSqGSIb3DQEBCwUAA4IBAQCQSXjY6LPIzkRvT4KFHaFKBrkZYQzuflQb898bElkM
m+5PiHJORrhHJrQVVkP6LVXI90U1sbODNgVsFF/4w0/8iEUTqQfZoaYEQ+IXV0Jc
/3t8dHf/yb9XnisGmuvErXxKWDGf/nY9vy2DrmcFHlrxXgcX6OzleN3ZljZ/vknL
/eMjLqb4JVUF9IURSSBBykTQAsXOgzDHq8HdvXDBNA9DMEKeIkJ51jGAFY0a5HRC
5R5ifUkbFuNmGgIjRv5asMZBcs5YN9WuwQbaKwqYVSLuD1uWS5GG7oBUl96EwuOg
7ucDmVkE83o7M/c1fZFKZxliDPGdczbQOD+Aqu5FCc4E
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:04 2025 by rpki-client