Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/a5WCtR0buMSlpqyOl35-siFWfgo.roa
File: a5WCtR0buMSlpqyOl35-siFWfgo.roa (raw, json)
Hash identifier: ua2wttFR3UuyQX6BN0ECktskwSX2ARebTWNUK3atA6Q=
Subject key identifier: 6B:95:82:B5:1D:1B:B8:C4:A5:A6:AC:8E:97:7E:7E:B2:21:56:7E:0A
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 018CC26D41169ACA9B3721CA55F4230FE7E6
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/a5WCtR0buMSlpqyOl35-siFWfgo.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205389
IP address blocks: 185.192.83.0/24 maxlen: 24
185.192.80.0/24 maxlen: 24
185.192.82.0/24 maxlen: 24
185.192.80.0/22 maxlen: 22
185.192.81.0/24 maxlen: 24
2a0c:1a00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:41:16:9a:ca:9b:37:21:ca:55:f4:23:0f:e7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b9582b51d1bb8c4a5a6ac8e977e7eb221567e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:ca:71:a0:2c:d7:b2:5b:12:39:b2:df:8a:
d4:95:72:98:7e:61:f3:a3:7c:7b:ab:5c:ca:dd:47:
65:c6:00:9c:b1:fb:08:56:c1:6f:ce:1e:ac:b2:53:
e9:ba:22:2d:51:ae:92:8a:63:e8:97:09:40:51:87:
0a:a1:b5:36:c7:5d:87:92:ef:a9:da:5b:a6:e2:cf:
ab:da:4a:34:43:23:45:4d:b4:ab:c5:c0:a8:ff:f4:
4f:9e:09:ad:2b:e0:15:01:96:90:36:d8:e2:f2:18:
21:ab:5b:d6:b8:f3:be:07:7d:00:4d:aa:08:fd:a8:
cf:db:57:12:c5:1c:fe:21:f0:49:9e:6c:96:b0:76:
8b:3a:db:b7:36:0a:34:81:00:d3:86:e2:9a:2a:9e:
55:2c:84:4a:e0:cb:70:24:dc:80:11:96:d2:e9:16:
57:da:b6:9a:f9:06:3d:63:1b:e7:6e:25:2c:56:1b:
fc:1f:ad:94:20:1c:99:46:b0:31:a6:3c:85:a8:73:
7f:8b:79:6a:4c:4e:7c:52:a1:cd:69:03:91:d9:14:
2b:dc:6d:10:38:17:07:5b:66:0f:36:91:85:e5:3c:
50:3c:42:80:16:fc:75:fb:97:1f:82:20:67:0e:61:
45:8f:ed:14:44:47:3d:1f:e8:af:b9:13:68:bc:83:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:82:B5:1D:1B:B8:C4:A5:A6:AC:8E:97:7E:7E:B2:21:56:7E:0A
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/a5WCtR0buMSlpqyOl35-siFWfgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.80.0/22
IPv6:
2a0c:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
2a:51:91:15:17:cb:c9:e4:f2:46:7b:18:71:ef:91:1d:a7:3e:
1b:18:d3:ec:2c:a5:64:0e:64:87:6a:4b:ab:b2:76:dd:c0:0a:
af:8a:24:98:a7:b0:a5:cf:0d:e9:66:2a:39:25:0c:e9:6e:d2:
3b:a9:c7:0f:ea:4f:51:3c:51:2c:5d:9b:b5:7b:f2:c2:50:00:
02:85:d0:e3:f8:9e:d3:6d:2f:e5:40:22:35:72:9d:b1:15:4d:
ca:62:9a:d4:9d:53:6a:3f:de:aa:c4:dd:8c:03:b3:4f:b4:37:
23:ac:02:9e:9c:51:d7:27:dd:a1:52:73:41:7a:71:d0:bf:2a:
19:e4:43:f7:74:eb:dd:f1:34:aa:bf:db:39:44:89:d7:d3:9d:
79:70:d0:c3:0d:bd:b0:74:7f:fe:2b:6a:1d:68:31:20:ae:bf:
be:51:27:52:54:9f:13:57:e5:07:fe:97:28:5f:c5:39:e7:57:
11:e2:1c:f1:18:02:d3:f7:d8:e7:99:9a:8c:16:d5:d9:b7:eb:
9b:49:0c:77:15:06:72:41:2d:57:1c:f6:fb:19:0b:b5:b7:5b:
a5:3b:02:8f:57:0d:8d:27:fa:6f:bd:80:16:0e:16:49:38:6e:
d8:86:51:15:aa:63:5d:92:46:81:82:20:34:d4:95:b9:9f:4d:
8e:bb:ba:0a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzCbUEWmsqbNyHKVfQjD+fmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmY2ZGY0NDgyNmY5ZjEwNjQ5YzU3OGVhYzQxNjE2NzA1
Mjk0MjcwHhcNMjQwMTAxMDAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjk1ODJiNTFkMWJiOGM0YTVhNmFjOGU5NzdlN2ViMjIxNTY3ZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2bKcaAs17JbEjmy34rUlXKYfmHz
o3x7q1zK3UdlxgCcsfsIVsFvzh6sslPpuiItUa6SimPolwlAUYcKobU2x12Hku+p
2lum4s+r2ko0QyNFTbSrxcCo//RPngmtK+AVAZaQNtji8hghq1vWuPO+B30ATaoI
/ajP21cSxRz+IfBJnmyWsHaLOtu3Ngo0gQDThuKaKp5VLIRK4MtwJNyAEZbS6RZX
2raa+QY9YxvnbiUsVhv8H62UIByZRrAxpjyFqHN/i3lqTE58UqHNaQOR2RQr3G0Q
OBcHW2YPNpGF5TxQPEKAFvx1+5cfgiBnDmFFj+0UREc9H+ivuRNovIND7wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGuVgrUdG7jEpaasjpd+frIhVn4KMB8GA1UdIwQY
MBaAFGD/bfRIJvnxBknFeOrEFhZwUpQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZWEyNGItOTg0Yy00NWYyLTgwNDUt
OWE5NWNmODIzZjliLzEvYTVXQ3RSMGJ1TVNscHF5T2wzNS1zaUZXZmdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mZWEyNGItOTg0Yy00NWYyLTgwNDUtOWE5NWNmODIzZjli
LzEvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucBQMA0E
AgACMAcDBQAqDBoAMA0GCSqGSIb3DQEBCwUAA4IBAQAqUZEVF8vJ5PJGexhx75Ed
pz4bGNPsLKVkDmSHakursnbdwAqviiSYp7Clzw3pZio5JQzpbtI7qccP6k9RPFEs
XZu1e/LCUAAChdDj+J7TbS/lQCI1cp2xFU3KYprUnVNqP96qxN2MA7NPtDcjrAKe
nFHXJ92hUnNBenHQvyoZ5EP3dOvd8TSqv9s5RInX0515cNDDDb2wdH/+K2odaDEg
rr++USdSVJ8TV+UH/pcoX8U551cR4hzxGALT99jnmZqMFtXZt+ubSQx3FQZyQS1X
HPb7GQu1t1ulOwKPVw2NJ/pvvYAWDhZJOG7YhlEVqmNdkkaBgiA01JW5n02Ou7oK
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:59 2025 by rpki-client