Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/ROTI7kd-J2sPzCsT6wQfxWb06F8.roa
File: ROTI7kd-J2sPzCsT6wQfxWb06F8.roa (raw, json)
Hash identifier: MSJyN/0kSaRnxQuvp40bqg16XkJhq4u8WU7wVmpX6Mk=
Subject key identifier: 44:E4:C8:EE:47:7E:27:6B:0F:CC:2B:13:EB:04:1F:C5:66:F4:E8:5F
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 018CC4244AC755609DFF7830ACFC4763B0CA
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/ROTI7kd-J2sPzCsT6wQfxWb06F8.roa
Signing time: Mon 01 Jan 2024 08:29:21 +0000
ROA not before: Mon 01 Jan 2024 08:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204488
IP address blocks: 185.175.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 07:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4a:c7:55:60:9d:ff:78:30:ac:fc:47:63:b0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Jan 1 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44e4c8ee477e276b0fcc2b13eb041fc566f4e85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:67:94:1f:bf:e7:5f:de:24:47:47:30:12:
0d:de:13:d1:6f:9a:3c:19:51:9b:84:f8:de:e0:dd:
1e:4d:34:cf:d1:8c:3b:d1:a4:93:fc:3a:b2:45:05:
67:96:32:9a:cf:5d:1d:af:b5:86:b6:32:c4:5d:49:
4a:9d:ea:5d:85:76:03:b9:12:b5:8a:00:50:c2:99:
9b:1c:48:6b:0d:d5:eb:e9:b9:d8:16:4d:f9:67:4a:
7a:af:66:0b:27:43:a3:7f:22:37:82:6d:a9:f0:6b:
84:07:87:3c:d5:1b:41:54:d0:d3:32:c0:8c:27:25:
bf:46:cf:03:23:a9:81:fd:36:b7:e6:3d:08:02:61:
60:95:ff:28:81:1e:3f:65:54:65:bc:21:b3:aa:63:
08:fe:81:1b:fa:1e:58:35:95:a0:7e:59:c7:f9:d6:
70:5a:fe:11:7a:08:a4:0d:f3:3f:f3:0e:18:90:d9:
eb:4c:78:70:fd:ac:ae:d8:b1:df:63:9b:55:81:ea:
94:cd:3e:6d:1d:53:b6:d4:1b:e9:d2:3f:46:97:df:
96:30:fa:1f:50:17:1f:ae:e2:7c:e5:71:66:cb:d2:
66:25:a5:c5:4d:aa:8e:25:a5:33:0c:73:06:cc:6f:
60:fe:c3:2f:be:51:96:b3:40:17:b5:2d:81:4e:da:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:C8:EE:47:7E:27:6B:0F:CC:2B:13:EB:04:1F:C5:66:F4:E8:5F
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/ROTI7kd-J2sPzCsT6wQfxWb06F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.63.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7d:25:3a:da:05:cf:fc:1b:f4:5e:44:d1:2e:98:12:ca:4b:
f5:09:6e:d7:a8:47:3c:04:f5:6b:2d:b1:5c:cf:70:4e:5e:3a:
e9:e6:7f:d6:2a:c6:d2:36:79:6c:25:6f:66:cb:9b:fa:c3:91:
20:58:c2:46:09:11:69:85:b3:e8:02:28:a8:ad:38:ce:ae:92:
77:f4:26:c3:ca:d0:5d:a4:34:2a:17:85:46:3a:47:a6:7a:9e:
cf:2c:61:3f:ec:79:de:44:2c:c1:92:bc:02:e0:48:3f:2f:9d:
cd:d0:1f:cc:a6:3d:f4:60:66:d7:a0:f4:3a:ff:50:92:75:b3:
d4:31:c5:86:6e:aa:23:40:e1:d9:c0:32:bf:3b:75:8a:cd:fe:
b9:47:a4:16:69:18:08:d5:48:ba:81:d6:f9:5f:b6:d6:1f:5e:
43:4a:9e:59:df:10:4c:47:83:f5:07:3f:fc:bf:40:72:72:91:
3f:39:51:4d:24:d3:a9:6f:50:8e:02:ff:88:4a:dc:54:95:95:
13:fa:4c:ca:e4:85:de:bc:a9:9a:1f:38:72:4b:81:c5:87:f0:
87:95:b8:44:dc:8d:33:18:f3:e5:dc:9d:93:92:92:6f:03:10:
e6:42:95:24:ef:85:cd:f4:ef:c2:a2:ae:e9:f6:a4:74:e5:1b:
67:82:e6:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJErHVWCd/3gwrPxHY7DKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZmJjNjNlZjU2MTRhN2VmOTVhMTA2MTg4ZTNkNzg3NTVj
Njg3YjkwHhcNMjQwMTAxMDgyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGU0YzhlZTQ3N2UyNzZiMGZjYzJiMTNlYjA0MWZjNTY2ZjRlODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWNnlB+/51/eJEdHMBIN3hPRb5o8
GVGbhPje4N0eTTTP0Yw70aST/DqyRQVnljKaz10dr7WGtjLEXUlKnepdhXYDuRK1
igBQwpmbHEhrDdXr6bnYFk35Z0p6r2YLJ0OjfyI3gm2p8GuEB4c81RtBVNDTMsCM
JyW/Rs8DI6mB/Ta35j0IAmFglf8ogR4/ZVRlvCGzqmMI/oEb+h5YNZWgflnH+dZw
Wv4RegikDfM/8w4YkNnrTHhw/ayu2LHfY5tVgeqUzT5tHVO21Bvp0j9Gl9+WMPof
UBcfruJ85XFmy9JmJaXFTaqOJaUzDHMGzG9g/sMvvlGWs0AXtS2BTtp40QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFETkyO5HfidrD8wrE+sEH8Vm9OhfMB8GA1UdIwQY
MBaAFLb7xj71YUp++VoQYYjj14dVxoe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUt
MDgxYTFhZTZlYmQ2LzEvUk9USTdrZC1KMnNQekNzVDZ3UWZ4V2IwNkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUtMDgxYTFhZTZlYmQ2
LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua8/MA0G
CSqGSIb3DQEBCwUAA4IBAQAXfSU62gXP/Bv0XkTRLpgSykv1CW7XqEc8BPVrLbFc
z3BOXjrp5n/WKsbSNnlsJW9my5v6w5EgWMJGCRFphbPoAiiorTjOrpJ39CbDytBd
pDQqF4VGOkemep7PLGE/7HneRCzBkrwC4Eg/L53N0B/Mpj30YGbXoPQ6/1CSdbPU
McWGbqojQOHZwDK/O3WKzf65R6QWaRgI1Ui6gdb5X7bWH15DSp5Z3xBMR4P1Bz/8
v0BycpE/OVFNJNOpb1COAv+IStxUlZUT+kzK5IXevKmaHzhyS4HFh/CHlbhE3I0z
GPPl3J2TkpJvAxDmQpUk74XN9O/Coq7p9qR05RtnguYO
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:22 2025 by rpki-client