Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/t7X6569NCqrBaAlxNjaGyl_QjTo.roa
File: t7X6569NCqrBaAlxNjaGyl_QjTo.roa (raw, json)
Hash identifier: H4IbqxDMWYfXnipBc+assYJfB1mhDBajYjMyM6+9OGY=
Subject key identifier: B7:B5:FA:E7:AF:4D:0A:AA:C1:68:09:71:36:36:86:CA:5F:D0:8D:3A
Certificate issuer: /CN=06656c5ad9738372d54c037e397f35be9aa924db
Certificate serial: 0194D38575FAAC303C24D6920FF71BECA9B2
Authority key identifier: 06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/t7X6569NCqrBaAlxNjaGyl_QjTo.roa
Signing time: Wed 05 Feb 2025 00:32:06 +0000
ROA not before: Wed 05 Feb 2025 00:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59787
IP address blocks: 185.42.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d3:85:75:fa:ac:30:3c:24:d6:92:0f:f7:1b:ec:a9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06656c5ad9738372d54c037e397f35be9aa924db
Validity
Not Before: Feb 5 00:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b5fae7af4d0aaac1680971363686ca5fd08d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:a6:5d:fe:bb:1d:18:de:69:fa:d7:88:48:
f8:e0:47:77:42:fb:bc:ef:ec:bb:ac:db:a5:3a:f4:
db:f6:ee:2c:21:72:12:e8:c9:0d:bb:54:95:f2:3d:
8b:09:73:17:5f:8b:7c:46:53:81:61:76:f1:e8:fc:
9e:32:66:b9:8e:9d:f6:6f:42:61:5a:cc:55:e1:c5:
6e:b8:33:f6:a2:ba:a9:07:75:05:4a:2a:33:f9:4c:
b5:c4:27:ec:71:7d:e0:02:e6:a6:ac:c2:df:d8:79:
9b:78:fd:cd:40:fe:37:10:1a:b7:79:eb:f1:2e:53:
28:05:a8:9d:60:12:a2:5f:7f:0d:3e:d9:11:f0:9c:
9f:5b:f3:7f:1a:0a:4e:47:63:ac:95:dc:fc:3a:5c:
4c:74:35:26:50:78:d2:cf:64:52:ae:a5:7f:da:36:
ee:c6:96:a3:63:b7:1f:83:fa:10:5b:3d:07:16:53:
ca:cd:df:5c:81:4e:61:f7:78:72:fd:29:68:46:23:
36:0c:cf:22:1f:64:47:ee:b2:28:94:0c:41:be:a0:
5f:9a:b3:3a:3b:35:fb:1b:31:bc:37:6f:9b:e8:60:
57:81:84:c4:5f:53:5d:fe:61:c6:d6:13:d7:a0:f0:
3b:f3:87:13:4a:06:5f:07:f8:ae:6d:f5:fb:95:99:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:FA:E7:AF:4D:0A:AA:C1:68:09:71:36:36:86:CA:5F:D0:8D:3A
X509v3 Authority Key Identifier:
keyid:06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/t7X6569NCqrBaAlxNjaGyl_QjTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.162.0/24
Signature Algorithm: sha256WithRSAEncryption
67:07:e2:ef:c2:16:24:10:22:15:dd:b0:d3:a3:b1:c7:b5:aa:
b0:0d:ff:b0:65:ae:e8:2f:f1:4a:ef:78:ba:70:3d:8e:b3:ab:
9f:ea:5a:15:a8:ab:24:f6:4a:1f:ca:40:d6:90:5e:ff:b8:c7:
f1:64:80:c3:2e:4c:06:99:73:29:c1:a1:79:c4:50:66:78:85:
37:08:ab:55:a0:a5:69:56:58:7b:e2:8b:61:f8:91:88:8b:5a:
a5:62:d5:8c:32:f7:a9:3e:2b:77:76:98:1c:a4:cc:00:c5:86:
e1:c0:f6:9f:51:55:15:ea:20:bf:c5:42:4f:ca:81:03:4c:d5:
7e:08:5c:6f:d3:f1:67:52:0f:8f:fe:fe:5c:80:3d:c2:4b:85:
94:f5:b8:6a:7d:80:b5:3a:79:91:53:c8:3a:ce:7f:3e:d8:e6:
91:1e:76:ff:b4:02:94:ea:92:f7:c1:4f:2c:34:83:c4:1d:c1:
7d:f3:fc:7d:c9:2b:0a:1e:3c:09:f1:3b:d6:ed:38:c3:ee:92:
72:70:3e:31:fe:0d:29:57:f5:2d:56:e6:0d:f4:99:b7:62:fe:
3e:8c:f9:9a:7e:fa:de:25:2d:f5:83:1e:82:9c:58:54:a7:df:
6b:f1:3d:37:d6:ab:93:c3:20:7d:98:8e:f9:4e:c7:88:ad:39:
53:ef:de:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTThXX6rDA8JNaSD/cb7KmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjU2YzVhZDk3MzgzNzJkNTRjMDM3ZTM5N2YzNWJlOWFh
OTI0ZGIwHhcNMjUwMjA1MDAzMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2I1ZmFlN2FmNGQwYWFhYzE2ODA5NzEzNjM2ODZjYTVmZDA4ZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq2mXf67HRjeafrXiEj44Ed3Qvu8
7+y7rNulOvTb9u4sIXIS6MkNu1SV8j2LCXMXX4t8RlOBYXbx6PyeMma5jp32b0Jh
WsxV4cVuuDP2orqpB3UFSioz+Uy1xCfscX3gAuamrMLf2HmbeP3NQP43EBq3eevx
LlMoBaidYBKiX38NPtkR8JyfW/N/GgpOR2Osldz8OlxMdDUmUHjSz2RSrqV/2jbu
xpajY7cfg/oQWz0HFlPKzd9cgU5h93hy/SloRiM2DM8iH2RH7rIolAxBvqBfmrM6
OzX7GzG8N2+b6GBXgYTEX1Nd/mHG1hPXoPA784cTSgZfB/iubfX7lZk0NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLe1+uevTQqqwWgJcTY2hspf0I06MB8GA1UdIwQY
MBaAFAZlbFrZc4Ny1UwDfjl/Nb6aqSTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1Wc1d0bHpnM0xWVEFOLU9YODF2cHFwSk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zYjlkMjctN2JhNC00MDllLTg4OGMt
OGIwNzYyNTZmMzlkLzEvdDdYNjU2OU5DcXJCYUFseE5qYUd5bF9RalRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zYjlkMjctN2JhNC00MDllLTg4OGMtOGIwNzYyNTZmMzlk
LzEvQm1Wc1d0bHpnM0xWVEFOLU9YODF2cHFwSk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSqiMA0G
CSqGSIb3DQEBCwUAA4IBAQBnB+LvwhYkECIV3bDTo7HHtaqwDf+wZa7oL/FK73i6
cD2Os6uf6loVqKsk9kofykDWkF7/uMfxZIDDLkwGmXMpwaF5xFBmeIU3CKtVoKVp
Vlh74oth+JGIi1qlYtWMMvepPit3dpgcpMwAxYbhwPafUVUV6iC/xUJPyoEDTNV+
CFxv0/FnUg+P/v5cgD3CS4WU9bhqfYC1OnmRU8g6zn8+2OaRHnb/tAKU6pL3wU8s
NIPEHcF98/x9ySsKHjwJ8TvW7TjD7pJycD4x/g0pV/UtVuYN9Jm3Yv4+jPmafvre
JS31gx6CnFhUp99r8T031quTwyB9mI75TseIrTlT797t
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:39 2025 by rpki-client