Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/InpYHl2lYM1dT-UuqtwhYwgcJUI.roa
File: InpYHl2lYM1dT-UuqtwhYwgcJUI.roa (raw, json)
Hash identifier: Za31mstMCWC5GgPi9JWjTlrrhKXD0x7lf6m+5iOxpt8=
Subject key identifier: 22:7A:58:1E:5D:A5:60:CD:5D:4F:E5:2E:AA:DC:21:63:08:1C:25:42
Certificate issuer: /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Certificate serial: 019423D6E3F729DDBD51397EB49E9FFB6C5A
Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/InpYHl2lYM1dT-UuqtwhYwgcJUI.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 185.237.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 01:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e3:f7:29:dd:bd:51:39:7e:b4:9e:9f:fb:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=227a581e5da560cd5d4fe52eaadc2163081c2542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:f2:c0:0a:cf:f5:3b:c8:97:e4:9b:81:d7:
4d:08:01:44:db:38:d8:5e:b3:77:6b:75:ff:77:7d:
e2:77:37:4a:76:6d:ac:ff:5d:24:57:fc:83:81:ef:
68:da:ef:72:4a:15:c4:d0:26:b0:82:49:87:cf:b5:
cb:c6:a3:75:7c:a5:9f:99:ec:c6:72:4b:43:ad:72:
eb:09:24:df:34:ac:2e:5f:06:8d:79:3d:5d:58:6c:
12:2c:6c:07:18:c6:ab:63:02:90:3a:56:90:8f:b5:
2d:f4:ad:99:a1:ec:4e:bf:51:0d:a4:00:31:65:b1:
6f:43:68:c7:44:f2:94:a5:7c:19:8f:99:8e:86:97:
f7:19:b4:09:b2:4a:78:d4:de:ab:b3:6f:fb:e1:09:
72:79:7e:80:6c:13:cc:22:2e:2f:87:bc:56:49:0a:
1c:7b:82:7f:ec:56:4b:b9:c9:dc:d1:f2:94:d2:5f:
1b:6f:65:47:9d:84:41:a2:7d:e3:1b:7b:22:44:34:
09:c7:be:40:c4:98:93:47:ab:cd:4d:1f:3f:c1:8f:
66:48:b2:08:a1:89:37:3c:e5:d8:c7:6e:1a:18:18:
24:39:23:33:d9:8e:02:65:14:a3:f4:cf:5f:04:2b:
ee:59:b7:27:82:87:00:4a:59:d9:f0:c9:e0:c2:cc:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:58:1E:5D:A5:60:CD:5D:4F:E5:2E:AA:DC:21:63:08:1C:25:42
X509v3 Authority Key Identifier:
keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/InpYHl2lYM1dT-UuqtwhYwgcJUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.95.0/24
Signature Algorithm: sha256WithRSAEncryption
42:67:a3:5c:f2:89:a3:a0:a0:bf:6c:1e:1e:83:a6:5f:be:38:
8d:09:4f:5f:89:a5:a5:64:33:db:3b:0e:11:e0:91:70:94:56:
9a:1b:07:34:8e:4b:0b:a2:af:97:b2:fe:a2:b4:ed:8d:57:90:
b1:2d:27:65:e9:8f:10:0c:e6:8a:2b:d7:cd:81:33:53:33:a1:
31:d9:bf:0e:12:cb:22:b0:8b:aa:f0:ef:5d:dd:21:1d:f1:6f:
7c:48:57:e4:bb:9e:f3:59:19:0e:1e:7c:26:a5:f7:37:8f:26:
1a:ee:5e:26:d2:c2:d3:41:16:4c:78:fe:20:12:01:2a:06:00:
70:2a:fc:31:8e:fa:c7:03:2f:ba:0f:d8:24:f3:f3:f6:9b:de:
11:be:36:fd:43:3d:82:46:4d:21:b1:e4:d7:47:65:04:55:a7:
f6:1b:68:2c:78:96:49:4d:15:2e:a2:19:08:d6:51:fe:b7:f9:
d4:b3:bb:39:6e:de:77:7d:50:a7:49:9b:e0:fb:bf:fe:56:63:
d8:dc:e1:24:11:57:ad:89:a5:bb:46:78:49:56:a5:67:ee:a8:
bf:ad:eb:5f:fe:7d:31:91:01:3a:61:74:05:03:b8:15:66:ae:
9f:2c:d6:48:28:16:e3:8e:bb:6e:09:46:ef:da:a9:0c:51:7d:
e7:35:25:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1uP3Kd29UTl+tJ6f+2xaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODNmM2YxOTU5NzRmMGU5MDA4NGUwZTMyN2ZmNWI2Njdl
NmZkOTAwHhcNMjUwMTAxMjE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjdhNTgxZTVkYTU2MGNkNWQ0ZmU1MmVhYWRjMjE2MzA4MWMyNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxrywArP9TvIl+SbgddNCAFE2zjY
XrN3a3X/d33idzdKdm2s/10kV/yDge9o2u9yShXE0CawgkmHz7XLxqN1fKWfmezG
cktDrXLrCSTfNKwuXwaNeT1dWGwSLGwHGMarYwKQOlaQj7Ut9K2ZoexOv1ENpAAx
ZbFvQ2jHRPKUpXwZj5mOhpf3GbQJskp41N6rs2/74QlyeX6AbBPMIi4vh7xWSQoc
e4J/7FZLucnc0fKU0l8bb2VHnYRBon3jG3siRDQJx75AxJiTR6vNTR8/wY9mSLII
oYk3POXYx24aGBgkOSMz2Y4CZRSj9M9fBCvuWbcngocASlnZ8MngwszSVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJ6WB5dpWDNXU/lLqrcIWMIHCVCMB8GA1UdIwQY
MBaAFBCD8/GVl08OkAhODjJ/9bZn5v2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUt
M2IxYzU1ZTNkZTk3LzEvSW5wWUhsMmxZTTFkVC1VdXF0d2hZd2djSlVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUtM2IxYzU1ZTNkZTk3
LzEvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue1fMA0G
CSqGSIb3DQEBCwUAA4IBAQBCZ6Nc8omjoKC/bB4eg6ZfvjiNCU9fiaWlZDPbOw4R
4JFwlFaaGwc0jksLoq+Xsv6itO2NV5CxLSdl6Y8QDOaKK9fNgTNTM6Ex2b8OEssi
sIuq8O9d3SEd8W98SFfku57zWRkOHnwmpfc3jyYa7l4m0sLTQRZMeP4gEgEqBgBw
KvwxjvrHAy+6D9gk8/P2m94Rvjb9Qz2CRk0hseTXR2UEVaf2G2gseJZJTRUuohkI
1lH+t/nUs7s5bt53fVCnSZvg+7/+VmPY3OEkEVetiaW7RnhJVqVn7qi/retf/n0x
kQE6YXQFA7gVZq6fLNZIKBbjjrtuCUbv2qkMUX3nNSVR
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:10:10 2025 by rpki-client