Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/2AAGoqEavfmPj0K-foc4nXhm3Kc.roa
File: 2AAGoqEavfmPj0K-foc4nXhm3Kc.roa (raw, json)
Hash identifier: ypqX2OPRtpLLv/ElE3sx0WIrLb6V8rc/Njg7FWSjcxM=
Subject key identifier: D8:00:06:A2:A1:1A:BD:F9:8F:8F:42:BE:7E:87:38:9D:78:66:DC:A7
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 01911262B64241B59FCA2E0D8B5667285516
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/2AAGoqEavfmPj0K-foc4nXhm3Kc.roa
Signing time: Fri 02 Aug 2024 09:19:04 +0000
ROA not before: Fri 02 Aug 2024 09:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.90.154.0/24 maxlen: 24
2a05:e100:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Aug 2024 11:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:62:b6:42:41:b5:9f:ca:2e:0d:8b:56:67:28:55:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Aug 2 09:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d80006a2a11abdf98f8f42be7e87389d7866dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:80:5c:72:2c:c8:61:c9:b9:38:f3:af:8f:
9c:b1:ee:f6:91:32:ea:00:9e:1b:88:b5:e2:c6:e8:
a4:89:70:a1:b1:c3:20:42:eb:68:63:ed:b2:49:88:
59:26:52:68:42:a5:1d:e7:c8:bd:cc:d9:e6:2e:31:
a5:41:06:b7:0f:a1:4d:ce:16:3c:3b:37:9d:37:9a:
e7:09:c9:52:62:ba:c8:4f:fe:86:9e:47:52:ed:cb:
93:8d:5d:1a:e2:ec:9b:97:d0:08:ec:d8:32:b7:09:
6a:a2:c1:aa:e0:dc:71:95:bd:01:ad:cd:37:35:3b:
78:2a:56:28:18:d7:96:77:39:a8:07:fc:14:1a:bd:
24:ea:a8:48:bb:e7:4b:73:75:34:18:72:db:91:a7:
09:54:99:b3:34:08:38:a0:1c:59:42:3a:5d:ea:ff:
00:97:ea:9b:1a:ee:f4:1e:4e:e2:28:1a:f8:9d:41:
2e:ba:5f:9e:6b:92:2c:8e:97:77:81:bb:55:96:f1:
af:58:cf:59:75:9d:15:84:5e:92:2d:92:e9:fd:9a:
c8:10:c2:5b:e4:1e:87:bf:65:dc:03:cd:8b:62:52:
5b:2e:6b:25:89:6a:e7:00:69:63:cd:bc:12:60:a5:
72:c9:10:33:b8:2f:23:f9:11:0a:7c:e6:eb:c1:b3:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:06:A2:A1:1A:BD:F9:8F:8F:42:BE:7E:87:38:9D:78:66:DC:A7
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/2AAGoqEavfmPj0K-foc4nXhm3Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.154.0/24
IPv6:
2a05:e100:a::/48
Signature Algorithm: sha256WithRSAEncryption
15:bb:ab:93:cb:0f:d4:17:1a:4f:b2:3a:c5:88:5e:e9:cf:3d:
3f:6a:3f:03:e7:54:2e:71:f6:a9:04:8d:e2:64:84:76:be:50:
7b:d8:52:58:bf:e1:41:dd:61:38:79:20:b4:cb:6f:c6:6e:de:
eb:33:18:4c:1b:c4:16:b2:70:46:12:20:c5:75:d1:77:6a:f9:
df:cb:7e:d5:bd:cc:d1:79:e8:85:46:75:dc:2b:ac:8c:5b:2f:
04:ab:c8:d9:78:ee:8d:60:92:5f:7d:86:c6:a5:8a:29:ec:f0:
f8:89:88:4d:fe:1e:58:b2:0d:5a:3b:83:e7:81:34:dc:ff:64:
2e:73:65:6f:12:a0:8f:f6:ba:f7:0e:f3:5f:7b:27:4c:9c:c6:
69:ce:4c:9a:db:9f:35:77:1b:2d:f1:ed:a3:64:71:e8:7c:c2:
20:93:8b:cb:2b:82:7f:35:6d:2f:ca:0d:27:c4:7c:4f:49:44:
ad:6b:00:34:6f:ab:be:cd:6d:8d:ac:d7:e6:b1:82:96:11:08:
e1:d2:68:c2:28:21:ff:4e:f3:13:3c:62:08:3b:50:cf:34:6e:
64:b6:77:1a:39:65:9b:8d:e2:e8:3e:3c:04:f9:29:bb:5d:f6:
b7:5f:47:db:f4:30:de:c2:14:29:bc:69:1c:ae:60:66:b1:e1:
08:91:65:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZESYrZCQbWfyi4Ni1ZnKFUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy
YjcyM2IwHhcNMjQwODAyMDkxOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODAwMDZhMmExMWFiZGY5OGY4ZjQyYmU3ZTg3Mzg5ZDc4NjZkY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPyAXHIsyGHJuTjzr4+cse72kTLq
AJ4biLXixuikiXChscMgQutoY+2ySYhZJlJoQqUd58i9zNnmLjGlQQa3D6FNzhY8
OzedN5rnCclSYrrIT/6GnkdS7cuTjV0a4uybl9AI7NgytwlqosGq4Nxxlb0Brc03
NTt4KlYoGNeWdzmoB/wUGr0k6qhIu+dLc3U0GHLbkacJVJmzNAg4oBxZQjpd6v8A
l+qbGu70Hk7iKBr4nUEuul+ea5Isjpd3gbtVlvGvWM9ZdZ0VhF6SLZLp/ZrIEMJb
5B6Hv2XcA82LYlJbLmsliWrnAGljzbwSYKVyyRAzuC8j+REKfObrwbNpiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNgABqKhGr35j49Cvn6HOJ14ZtynMB8GA1UdIwQY
MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt
OGVjNjhlNzg4NmUyLzEvMkFBR29xRWF2Zm1QajBLLWZvYzRuWGhtM0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy
LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVqaMA8E
AgACMAkDBwAqBeEAAAowDQYJKoZIhvcNAQELBQADggEBABW7q5PLD9QXGk+yOsWI
XunPPT9qPwPnVC5x9qkEjeJkhHa+UHvYUli/4UHdYTh5ILTLb8Zu3uszGEwbxBay
cEYSIMV10Xdq+d/LftW9zNF56IVGddwrrIxbLwSryNl47o1gkl99hsaliins8PiJ
iE3+HliyDVo7g+eBNNz/ZC5zZW8SoI/2uvcO8197J0ycxmnOTJrbnzV3Gy3x7aNk
ceh8wiCTi8srgn81bS/KDSfEfE9JRK1rADRvq77NbY2s1+axgpYRCOHSaMIoIf9O
8xM8Ygg7UM80bmS2dxo5ZZuN4ug+PAT5Kbtd9rdfR9v0MN7CFCm8aRyuYGax4QiR
ZfQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:58 2025 by rpki-client