Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/s6ugiEUjlpOcyPtKjaRArWkzBic.roa
File: s6ugiEUjlpOcyPtKjaRArWkzBic.roa (raw, json)
Hash identifier: p2MaXcMh6MuKm0Pud0Vsz2FPPLEaxND2pgu0cC7jsnY=
Subject key identifier: B3:AB:A0:88:45:23:96:93:9C:C8:FB:4A:8D:A4:40:AD:69:33:06:27
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01938DE22CBB67EFAEF159F01916F188CDAA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/s6ugiEUjlpOcyPtKjaRArWkzBic.roa
Signing time: Tue 03 Dec 2024 18:57:10 +0000
ROA not before: Tue 03 Dec 2024 18:57:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Dec 2024 23:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:e2:2c:bb:67:ef:ae:f1:59:f0:19:16:f1:88:cd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Dec 3 18:57:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3aba088452396939cc8fb4a8da440ad69330627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:7b:84:32:1f:09:f4:10:5b:6e:b5:41:4f:
cf:e5:b2:c3:9d:d8:a2:cc:2a:95:18:2f:93:2a:f0:
5a:1d:a8:ad:fe:b7:7a:be:36:37:c2:dd:7b:f0:0f:
e7:82:9c:c5:f5:4c:9c:ca:74:c2:0c:d6:6f:46:4e:
26:9c:79:69:20:b8:c7:c9:0c:db:3d:3f:f0:7a:00:
cb:31:2c:63:bb:38:0d:0e:09:94:3e:a0:6f:0c:ec:
98:40:c5:9c:4e:33:95:41:73:c0:38:aa:8f:2f:98:
06:ce:4a:77:91:ae:8d:77:fa:2c:54:44:a7:60:af:
32:d0:fc:b1:5d:81:d6:fb:d6:27:7b:03:5a:a9:80:
7a:a0:b9:a3:89:41:44:51:61:ec:2e:2a:3d:8e:f3:
3b:19:77:9f:8e:cf:79:f0:05:f2:d6:fc:c9:e9:7b:
1c:1a:17:6b:43:03:7b:f5:12:69:eb:69:4f:d1:3f:
56:ed:d7:1a:0c:30:8a:9f:e8:d4:da:b0:ff:ef:2d:
8a:b7:2a:e8:90:f0:20:5d:92:f8:55:5c:ac:d4:51:
6c:8b:57:d0:d6:8e:ac:73:e8:fa:5a:65:57:17:b2:
df:92:c6:6b:88:c9:8b:e4:1f:af:98:e6:9e:b3:37:
72:a5:d5:37:d0:e4:cf:f0:33:6d:ed:c7:66:72:cd:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:A0:88:45:23:96:93:9C:C8:FB:4A:8D:A4:40:AD:69:33:06:27
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/s6ugiEUjlpOcyPtKjaRArWkzBic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
185.221.26.0/24
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a3:77:a6:da:89:4b:1a:f7:ba:9c:40:90:3e:5e:a2:3a:fe:
0b:0e:89:0e:ef:b2:ea:ea:15:9f:8c:f4:84:d1:11:4a:fb:94:
86:99:9a:07:66:e9:97:a9:a2:0b:0a:be:a3:4d:75:b1:f5:3b:
75:98:5e:f4:8c:fa:46:0b:4e:1e:d1:8a:e9:54:15:7e:a4:39:
e2:ee:f3:5a:62:41:b0:a0:b0:75:dc:dd:61:25:da:29:8c:46:
b6:22:05:db:19:60:ef:bf:eb:21:04:18:19:92:e3:f3:fd:4f:
89:74:4e:09:48:b9:7b:fc:18:58:5f:c2:54:80:2e:37:a8:fd:
a2:31:e6:58:1e:03:18:00:e4:e2:f6:ce:d3:0d:6a:28:4a:5a:
bd:b9:c7:7c:77:e2:ee:6a:4f:e8:10:e8:0e:85:01:92:46:79:
d5:78:d4:f3:28:2f:72:5a:9f:9b:b6:39:f7:20:ad:14:77:5b:
28:58:b7:99:1a:80:a0:9c:01:14:d3:02:1a:2c:e2:4a:cf:13:
4b:58:62:1a:7a:6c:5b:75:a6:76:c1:60:ac:64:5f:ff:2f:9c:
58:e4:c3:d7:c3:3d:16:0a:97:e2:a9:9c:ab:de:79:b1:45:fe:
bb:87:30:15:59:75:a9:9c:aa:35:01:f3:4e:32:e2:3c:b0:6c:
e4:77:ef:1c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZON4iy7Z++u8VnwGRbxiM2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQxMjAzMTg1NzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2FiYTA4ODQ1MjM5NjkzOWNjOGZiNGE4ZGE0NDBhZDY5MzMwNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yl7hDIfCfQQW261QU/P5bLDndii
zCqVGC+TKvBaHait/rd6vjY3wt178A/ngpzF9UycynTCDNZvRk4mnHlpILjHyQzb
PT/wegDLMSxjuzgNDgmUPqBvDOyYQMWcTjOVQXPAOKqPL5gGzkp3ka6Nd/osVESn
YK8y0PyxXYHW+9YnewNaqYB6oLmjiUFEUWHsLio9jvM7GXefjs958AXy1vzJ6Xsc
GhdrQwN79RJp62lP0T9W7dcaDDCKn+jU2rD/7y2KtyrokPAgXZL4VVys1FFsi1fQ
1o6sc+j6WmVXF7LfksZriMmL5B+vmOaeszdypdU30OTP8DNt7cdmcs2EBQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLOroIhFI5aTnMj7So2kQK1pMwYnMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvczZ1Z2lFVWpscE9jeVB0S2phUkFyV2t6QmljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAucfVAwQA
ud0aAwQAufobMA0GCSqGSIb3DQEBCwUAA4IBAQAko3em2olLGve6nECQPl6iOv4L
DokO77Lq6hWfjPSE0RFK+5SGmZoHZumXqaILCr6jTXWx9Tt1mF70jPpGC04e0Yrp
VBV+pDni7vNaYkGwoLB13N1hJdopjEa2IgXbGWDvv+shBBgZkuPz/U+JdE4JSLl7
/BhYX8JUgC43qP2iMeZYHgMYAOTi9s7TDWooSlq9ucd8d+Luak/oEOgOhQGSRnnV
eNTzKC9yWp+btjn3IK0Ud1soWLeZGoCgnAEU0wIaLOJKzxNLWGIaemxbdaZ2wWCs
ZF//L5xY5MPXwz0WCpfiqZyr3nmxRf67hzAVWXWpnKo1AfNOMuI8sGzkd+8c
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:27 2025 by rpki-client