Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/e-SZeILJ5OXqX9HkRanvinh3S40.roa
File: e-SZeILJ5OXqX9HkRanvinh3S40.roa (raw, json)
Hash identifier: v2QpQLis70uolYZivHBfj/ZFmMDSozE48PA7AngyLLU=
Subject key identifier: 7B:E4:99:78:82:C9:E4:E5:EA:5F:D1:E4:45:A9:EF:8A:78:77:4B:8D
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C188A718DB956427537136654E60
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/e-SZeILJ5OXqX9HkRanvinh3S40.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152586
IP address blocks: 185.121.26.0/23 maxlen: 32
Validation: Failed, certificate revoked on Sat 18 Jan 2025 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c1:88:a7:18:db:95:64:27:53:71:36:65:4e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be4997882c9e4e5ea5fd1e445a9ef8a78774b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:1d:70:d0:6c:15:ba:d5:33:99:b8:fd:1b:
ef:db:c6:16:b7:36:cd:0f:34:0e:39:77:a0:95:a1:
0b:f5:eb:9a:a2:a4:f6:2b:e2:72:32:81:a1:78:64:
36:53:3e:9f:7c:6c:2b:2b:ca:54:36:45:c2:d0:36:
c1:5c:fc:f7:3a:d8:7d:f3:e7:52:60:a7:fa:d2:00:
85:23:a0:e2:82:01:27:0d:66:ab:f8:5d:45:54:40:
4d:f7:ab:34:8a:1b:b7:95:77:67:f9:6d:06:82:44:
d0:b3:f9:2a:5b:8b:54:c0:cc:ad:ec:13:bf:c5:c3:
d7:d0:d7:b8:3c:f6:58:08:17:b4:f4:8b:d6:91:66:
80:c1:e3:87:8d:2c:ad:b4:4e:a9:f4:cc:43:2a:ed:
3a:17:b4:5a:1b:0e:e3:a0:79:eb:57:79:8f:29:79:
02:23:9a:fc:41:dc:6e:af:63:b8:50:31:f1:f3:ef:
53:f7:3d:32:d8:4c:c4:2f:f4:ca:12:4f:d1:82:f9:
f6:1c:b4:39:bb:f1:da:67:e4:5f:e2:e3:4e:8c:e0:
a6:b9:e0:5d:3f:44:12:ef:e9:01:c1:54:b7:db:0b:
82:33:d4:c0:14:43:8f:09:6f:e3:52:53:69:a0:46:
f7:51:e1:16:6e:77:5f:e7:fb:30:4d:ff:ef:1f:2d:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:99:78:82:C9:E4:E5:EA:5F:D1:E4:45:A9:EF:8A:78:77:4B:8D
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/e-SZeILJ5OXqX9HkRanvinh3S40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.26.0/23
Signature Algorithm: sha256WithRSAEncryption
19:dd:9f:14:a9:56:33:2d:08:64:f6:28:3d:aa:45:80:8d:87:
28:aa:61:4f:07:69:3d:3a:e1:8d:7d:2d:1f:2e:26:01:28:f4:
f9:8a:fa:ed:62:c2:34:af:af:cc:f7:3f:db:e1:d5:7c:41:5e:
44:ed:c8:3e:ce:8b:0e:11:fa:77:67:1b:35:94:11:8e:22:be:
50:1c:41:aa:cb:eb:e9:a7:dd:d3:eb:9a:f2:6e:25:37:41:66:
bb:49:3c:68:36:3d:f6:ba:43:00:96:00:e6:7b:93:e7:c2:1d:
4c:71:eb:70:82:d8:30:b8:42:94:b1:6e:7d:d7:ea:eb:40:04:
50:27:7b:c2:a0:08:0c:a0:cc:3a:cd:96:df:2e:e3:38:df:36:
98:57:41:06:ed:d7:89:d0:a9:6f:a4:93:73:28:97:25:f1:a0:
8c:d9:16:8a:01:fc:6d:a0:59:05:20:81:37:b1:2a:92:e9:f4:
90:3d:10:58:77:24:1a:78:dd:12:89:41:97:0a:99:1c:43:e6:
b2:71:bd:ac:b3:56:27:3a:74:fc:f6:b5:98:72:ba:27:3c:35:
80:ef:ff:6d:94:d7:72:7f:35:42:94:53:6f:73:61:92:94:87:
32:0b:96:ea:a4:ce:2d:9e:9f:62:7c:78:97:d7:6e:c4:25:16:
3a:ed:cc:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR8GIpxjblWQnU3E2ZU5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjUwMTAyMTM1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmU0OTk3ODgyYzllNGU1ZWE1ZmQxZTQ0NWE5ZWY4YTc4Nzc0YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2wdcNBsFbrVM5m4/Rvv28YWtzbN
DzQOOXeglaEL9euaoqT2K+JyMoGheGQ2Uz6ffGwrK8pUNkXC0DbBXPz3Oth98+dS
YKf60gCFI6DiggEnDWar+F1FVEBN96s0ihu3lXdn+W0GgkTQs/kqW4tUwMyt7BO/
xcPX0Ne4PPZYCBe09IvWkWaAweOHjSyttE6p9MxDKu06F7RaGw7joHnrV3mPKXkC
I5r8Qdxur2O4UDHx8+9T9z0y2EzEL/TKEk/Rgvn2HLQ5u/HaZ+Rf4uNOjOCmueBd
P0QS7+kBwVS32wuCM9TAFEOPCW/jUlNpoEb3UeEWbndf5/swTf/vHy3E2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvkmXiCyeTl6l/R5EWp74p4d0uNMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvZS1TWmVJTEo1T1hxWDlIa1JhbnZpbmgzUzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXkaMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ3Z8UqVYzLQhk9ig9qkWAjYcoqmFPB2k9OuGNfS0f
LiYBKPT5ivrtYsI0r6/M9z/b4dV8QV5E7cg+zosOEfp3Zxs1lBGOIr5QHEGqy+vp
p93T65rybiU3QWa7STxoNj32ukMAlgDme5Pnwh1McetwgtgwuEKUsW591+rrQARQ
J3vCoAgMoMw6zZbfLuM43zaYV0EG7deJ0KlvpJNzKJcl8aCM2RaKAfxtoFkFIIE3
sSqS6fSQPRBYdyQaeN0SiUGXCpkcQ+aycb2ss1YnOnT89rWYcronPDWA7/9tlNdy
fzVClFNvc2GSlIcyC5bqpM4tnp9ifHiX127EJRY67czI
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:24 2025 by rpki-client