Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gi1SoFf8aFX6cLyKwf0rCVVkynk.roa
File: gi1SoFf8aFX6cLyKwf0rCVVkynk.roa (raw, json)
Hash identifier: imIOoK0MYb5XE1jtIiVmGKQXqBLWRzbhDR7cV2C1SQE=
Subject key identifier: 82:2D:52:A0:57:FC:68:55:FA:70:BC:8A:C1:FD:2B:09:55:64:CA:79
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01944A610231F38A75116D864C5410222212
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gi1SoFf8aFX6cLyKwf0rCVVkynk.roa
Signing time: Thu 09 Jan 2025 09:24:19 +0000
ROA not before: Thu 09 Jan 2025 09:24:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.244.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 14:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:61:02:31:f3:8a:75:11:6d:86:4c:54:10:22:22:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 9 09:24:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=822d52a057fc6855fa70bc8ac1fd2b095564ca79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:3d:16:67:e4:ba:81:dc:f4:ba:02:f1:b5:
38:45:db:73:78:07:36:a4:7e:3d:5c:65:0c:ad:ca:
6b:01:f3:56:53:e7:dc:58:17:8e:2f:43:53:d8:e8:
da:79:30:89:65:33:be:5d:7b:69:15:81:90:76:a4:
d2:02:50:66:d3:c9:8b:eb:b5:25:4e:7b:6a:7a:3b:
e9:50:39:1d:39:ac:1d:13:63:78:ce:28:23:22:79:
9c:91:58:32:7f:3e:83:ad:18:15:9a:2f:98:79:06:
97:dd:ac:fa:f5:43:ce:a8:b7:78:3a:4a:7f:85:d5:
5b:8e:4e:fd:7f:6e:5a:73:8e:47:2c:61:5a:65:34:
97:4d:cd:de:96:ae:9a:a9:0d:22:bd:ab:50:f7:96:
44:68:75:c4:fb:33:3c:da:2b:01:7d:72:a8:c6:88:
d1:41:60:1d:1f:34:c1:72:db:b4:21:00:1f:d6:6f:
51:0f:3c:87:81:cd:db:c1:3a:18:58:1f:6a:1c:ab:
4e:58:7d:2b:23:fe:ff:31:38:8f:e4:21:94:2e:7d:
be:e4:80:fa:4e:d8:f1:c8:65:c2:ce:5a:a8:f7:6d:
56:e4:52:b2:b5:2d:70:8e:38:3e:58:b9:8d:87:cc:
d7:7e:bf:40:fb:ab:2f:44:51:9f:33:9a:dc:e9:07:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2D:52:A0:57:FC:68:55:FA:70:BC:8A:C1:FD:2B:09:55:64:CA:79
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gi1SoFf8aFX6cLyKwf0rCVVkynk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:71:90:b5:72:15:ed:bc:b6:ed:ea:fe:d2:6e:9c:8e:68:32:
3c:ba:ad:39:0c:e3:8a:11:2e:26:b3:d5:c4:42:6c:be:5c:b8:
2c:ad:c8:f9:d1:27:69:b1:c0:0a:14:84:6b:02:17:f3:fe:e9:
c2:05:8b:d3:e4:fc:89:b2:65:12:45:7a:f4:37:b4:12:f9:d4:
eb:ef:a6:7f:47:25:77:43:27:26:06:da:71:0f:af:94:46:8f:
a6:93:6b:78:c9:88:50:5e:22:01:01:26:d7:4e:73:b5:68:f9:
d1:a4:81:6d:ad:d4:a2:f7:86:5a:74:15:b3:35:19:64:6c:93:
84:8b:a8:bf:eb:62:46:cb:e7:ce:14:d3:95:5d:c6:5d:cc:db:
81:8b:0e:77:99:3c:04:2c:dd:9d:51:5f:b0:6f:77:3b:eb:a3:
bd:8c:5f:65:1b:33:61:3e:ea:b7:68:57:66:eb:4f:53:73:e3:
52:78:1e:fc:6e:99:a8:84:42:bb:e1:05:e1:d9:c3:83:31:da:
00:22:2d:e5:eb:64:b4:d9:31:94:db:25:c9:eb:5c:44:fa:6b:
a1:6b:b6:30:f3:7f:a2:a3:8c:bf:47:7e:d2:98:da:4b:f8:d4:
d8:e6:b6:5b:25:9b:63:82:e7:78:8f:e0:60:02:e4:27:1e:30:
2a:be:5e:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRKYQIx84p1EW2GTFQQIiISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMTA5MDkyNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjJkNTJhMDU3ZmM2ODU1ZmE3MGJjOGFjMWZkMmIwOTU1NjRjYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Q9FmfkuoHc9LoC8bU4RdtzeAc2
pH49XGUMrcprAfNWU+fcWBeOL0NT2OjaeTCJZTO+XXtpFYGQdqTSAlBm08mL67Ul
TntqejvpUDkdOawdE2N4zigjInmckVgyfz6DrRgVmi+YeQaX3az69UPOqLd4Okp/
hdVbjk79f25ac45HLGFaZTSXTc3elq6aqQ0ivatQ95ZEaHXE+zM82isBfXKoxojR
QWAdHzTBctu0IQAf1m9RDzyHgc3bwToYWB9qHKtOWH0rI/7/MTiP5CGULn2+5ID6
TtjxyGXCzlqo921W5FKytS1wjjg+WLmNh8zXfr9A+6svRFGfM5rc6QeGEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIItUqBX/GhV+nC8isH9KwlVZMp5MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZ2kxU29GZjhhRlg2Y0x5S3dmMHJDVlZreW5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufRqMA0G
CSqGSIb3DQEBCwUAA4IBAQBqcZC1chXtvLbt6v7SbpyOaDI8uq05DOOKES4ms9XE
Qmy+XLgsrcj50SdpscAKFIRrAhfz/unCBYvT5PyJsmUSRXr0N7QS+dTr76Z/RyV3
QycmBtpxD6+URo+mk2t4yYhQXiIBASbXTnO1aPnRpIFtrdSi94ZadBWzNRlkbJOE
i6i/62JGy+fOFNOVXcZdzNuBiw53mTwELN2dUV+wb3c766O9jF9lGzNhPuq3aFdm
609Tc+NSeB78bpmohEK74QXh2cODMdoAIi3l62S02TGU2yXJ61xE+muha7Yw83+i
o4y/R37SmNpL+NTY5rZbJZtjgud4j+BgAuQnHjAqvl7e
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:20 2025 by rpki-client