Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/ERr1ZZDuHbuxtlPTw6RFAA8pOTs.roa
File: ERr1ZZDuHbuxtlPTw6RFAA8pOTs.roa (raw, json)
Hash identifier: 6PUJRKW16rOLG1S1gmYbBqFsBemOKKB3IbJPbX3bIY4=
Subject key identifier: 11:1A:F5:65:90:EE:1D:BB:B1:B6:53:D3:C3:A4:45:00:0F:29:39:3B
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 01941F8C38FC62FA327B3BEF92CBF8B0CAB6
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/ERr1ZZDuHbuxtlPTw6RFAA8pOTs.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207040
IP address blocks: 185.163.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 12:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:fc:62:fa:32:7b:3b:ef:92:cb:f8:b0:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=111af56590ee1dbbb1b653d3c3a445000f29393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:ee:1e:84:3e:a7:c0:af:b0:5f:90:14:c6:
a6:1e:84:37:75:a9:6f:57:3f:a3:d3:a1:e8:95:c8:
60:8d:c3:f3:b3:11:a2:c2:27:42:23:d7:27:2a:3e:
9f:4e:40:fd:90:aa:38:96:6b:24:66:ce:ca:47:90:
2f:ed:35:99:0c:f5:9a:b8:88:42:70:85:18:6c:94:
37:1e:13:68:26:7a:8f:f8:e9:47:55:aa:cf:eb:0f:
59:a4:a0:9c:2c:dd:b6:7b:5d:0f:02:0f:8f:f5:49:
6e:44:9a:17:c3:c5:2a:bf:8f:01:6c:40:cb:bd:00:
5f:ef:1e:15:52:b2:9a:f2:79:98:c5:64:d1:a7:fa:
ab:d4:54:d1:d8:6e:87:c1:e9:98:6b:3c:cb:3f:52:
28:29:3b:b4:b1:f7:8e:01:b7:06:2d:e6:4a:df:e0:
62:c1:96:77:ed:3f:16:15:f9:6e:1f:bf:56:98:33:
cb:08:0d:6a:d1:d8:42:aa:b0:b3:19:54:3a:8b:e3:
8f:89:b2:3b:13:28:cb:9a:36:ab:10:e4:86:4f:59:
68:d0:83:8a:98:ef:c4:4b:c6:ae:6f:f6:bb:0a:12:
57:a6:29:4f:a7:7b:ad:56:2f:14:80:db:2b:f7:61:
df:93:ff:32:b8:42:7e:bc:12:c9:e2:25:54:54:0f:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:F5:65:90:EE:1D:BB:B1:B6:53:D3:C3:A4:45:00:0F:29:39:3B
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/ERr1ZZDuHbuxtlPTw6RFAA8pOTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:65:ac:af:f7:75:48:d5:2e:8f:ee:9c:8c:80:f9:fc:10:f8:
ac:fa:d5:ab:c9:ed:c0:e1:a0:52:06:91:85:b6:19:2d:75:36:
5e:dc:03:21:d7:8c:40:f5:89:d7:d1:df:f6:a8:77:60:f2:1b:
a1:e1:f7:04:29:24:81:91:78:53:37:37:cb:89:9c:e1:6a:ae:
69:7c:d1:d0:ae:2d:37:09:8c:c2:d9:f8:6f:a3:41:57:13:82:
95:93:1a:ff:49:23:c3:0e:92:39:03:2c:c0:3d:8d:2e:6a:65:
ac:61:51:44:17:0a:85:f6:a8:e3:42:d6:24:3b:03:a1:cf:5c:
45:29:19:4c:18:62:80:29:9f:65:0a:2c:c2:3b:33:22:0d:ba:
04:9f:54:42:8b:0c:61:56:20:a6:bd:da:6b:33:6e:2f:8f:23:
d6:b7:9e:12:74:01:7b:25:db:89:8e:f3:a7:85:8e:c2:12:ee:
63:6c:4c:0e:ee:68:d1:38:49:dc:1a:1c:36:5c:07:79:f8:d9:
57:cf:22:59:10:29:d2:a5:24:ee:09:96:23:1f:39:45:36:57:
4d:00:14:72:c6:72:f3:4c:79:28:22:2d:a4:f0:dc:68:05:89:
b3:b1:e9:bf:4e:e7:7f:46:b1:f5:81:6f:ef:c7:96:48:4b:56:
e3:bf:d7:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDj8Yvoyezvvksv4sMq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWEyNzQ0NDU4MjZlM2Q3OTVjM2VkMThjMjc3MDBlZWFj
MWNhNjIwHhcNMjUwMTAxMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTFhZjU2NTkwZWUxZGJiYjFiNjUzZDNjM2E0NDUwMDBmMjkzOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RbuHoQ+p8CvsF+QFMamHoQ3dalv
Vz+j06HolchgjcPzsxGiwidCI9cnKj6fTkD9kKo4lmskZs7KR5Av7TWZDPWauIhC
cIUYbJQ3HhNoJnqP+OlHVarP6w9ZpKCcLN22e10PAg+P9UluRJoXw8Uqv48BbEDL
vQBf7x4VUrKa8nmYxWTRp/qr1FTR2G6HwemYazzLP1IoKTu0sfeOAbcGLeZK3+Bi
wZZ37T8WFfluH79WmDPLCA1q0dhCqrCzGVQ6i+OPibI7EyjLmjarEOSGT1lo0IOK
mO/ES8aub/a7ChJXpilPp3utVi8UgNsr92Hfk/8yuEJ+vBLJ4iVUVA9GPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEa9WWQ7h27sbZT08OkRQAPKTk7MB8GA1UdIwQY
MBaAFNyqJ0RFgm49eVw+0YwncA7qwcpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTIt
OWE4MjQzZTg0ZTU0LzEvRVJyMVpaRHVIYnV4dGxQVHc2UkZBQThwT1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTItOWE4MjQzZTg0ZTU0
LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaOEMA0G
CSqGSIb3DQEBCwUAA4IBAQDiZayv93VI1S6P7pyMgPn8EPis+tWrye3A4aBSBpGF
thktdTZe3AMh14xA9YnX0d/2qHdg8huh4fcEKSSBkXhTNzfLiZzhaq5pfNHQri03
CYzC2fhvo0FXE4KVkxr/SSPDDpI5AyzAPY0uamWsYVFEFwqF9qjjQtYkOwOhz1xF
KRlMGGKAKZ9lCizCOzMiDboEn1RCiwxhViCmvdprM24vjyPWt54SdAF7JduJjvOn
hY7CEu5jbEwO7mjROEncGhw2XAd5+NlXzyJZECnSpSTuCZYjHzlFNldNABRyxnLz
THkoIi2k8NxoBYmzsem/Tud/RrH1gW/vx5ZIS1bjv9eA
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:04 2025 by rpki-client