Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/i4YyEzcOIE9Fp_euqI5NMURsgMc.roa
File: i4YyEzcOIE9Fp_euqI5NMURsgMc.roa (raw, json)
Hash identifier: jMC0HKGFcahjWKDlQll2f0WKBuqKUKNmwTUstRDw84o=
Subject key identifier: 8B:86:32:13:37:0E:20:4F:45:A7:F7:AE:A8:8E:4D:31:44:6C:80:C7
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 0193E52B996BF0BBDBB38C9CD425D45BB865
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/i4YyEzcOIE9Fp_euqI5NMURsgMc.roa
Signing time: Fri 20 Dec 2024 17:44:19 +0000
ROA not before: Fri 20 Dec 2024 17:44:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e5:2b:99:6b:f0:bb:db:b3:8c:9c:d4:25:d4:5b:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Dec 20 17:44:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b863213370e204f45a7f7aea88e4d31446c80c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:be:69:f1:4c:ba:3d:19:9e:8a:95:c6:bc:
66:0c:e0:29:40:ae:fa:d0:f3:ce:87:eb:92:a7:33:
71:59:26:9a:6a:a0:b1:de:d3:da:a5:fe:2d:8d:2a:
4e:17:a2:db:c8:6b:93:1f:32:cf:7b:80:29:20:a3:
36:b5:52:fa:42:95:93:e6:37:a1:7e:dd:96:eb:57:
1e:52:bd:c8:d1:d4:2e:62:ff:80:9f:d5:79:73:15:
72:e1:af:66:24:70:7b:2a:f1:03:29:c9:ec:4a:5d:
15:e2:62:3a:43:5a:ae:74:59:e5:b5:42:29:35:93:
39:f3:43:87:aa:6c:ee:c6:27:f3:40:11:89:d0:13:
af:a6:12:10:23:86:c4:98:3c:99:5d:18:84:98:e5:
2b:c0:06:bc:de:9f:81:67:c5:a5:b7:ef:4a:3b:e1:
7a:d8:23:a0:1d:e3:90:1e:f0:62:b7:0c:8a:74:b9:
d3:43:78:34:c6:e3:e5:28:5b:70:a8:cb:83:08:59:
c5:7e:e4:97:42:54:19:ba:a3:0b:e7:64:3a:28:05:
d1:0b:ba:ed:e5:be:5a:5c:29:67:cf:b9:14:d5:89:
27:6b:ab:a2:3c:f2:e6:42:a3:c2:77:a2:0e:e7:71:
be:6f:17:27:40:26:61:53:b5:a0:4e:15:fe:41:14:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:86:32:13:37:0E:20:4F:45:A7:F7:AE:A8:8E:4D:31:44:6C:80:C7
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/i4YyEzcOIE9Fp_euqI5NMURsgMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:dc:c1:cd:c6:13:7c:3c:20:2c:c6:2b:90:e3:51:89:56:9a:
1e:d2:9e:cd:a1:d5:07:bc:6d:61:cf:8a:83:97:9c:e1:61:2d:
82:52:0c:29:f9:bd:e0:b8:05:9f:a8:d5:c7:9a:4f:58:56:78:
9d:c6:43:4f:42:87:75:01:50:d6:a4:a4:08:c8:e0:4f:b6:09:
2a:e2:4e:c9:6f:7e:9c:2e:97:a6:fb:99:ef:41:1a:cc:78:7d:
7e:f8:b6:ad:ca:45:c9:99:f5:4b:0c:53:fa:a5:f0:fb:15:e2:
1f:26:98:f6:96:0f:54:75:14:f5:dc:da:c6:a5:04:e3:96:0f:
cf:53:de:bc:7a:45:5b:a1:ed:c0:a0:d4:28:30:0c:cd:fb:38:
bc:de:5a:be:e3:ff:93:b8:63:e2:6b:56:59:f9:5c:3f:3b:09:
01:d8:8b:fd:69:12:5c:a3:24:5c:95:c8:bb:c3:dc:92:87:1d:
85:2b:43:47:84:89:cb:e1:f6:1b:1c:ff:d0:42:74:a1:40:ec:
9f:0a:39:5c:26:b3:f0:11:06:fb:54:8a:a1:8d:db:fa:ca:22:
c4:e2:27:72:4e:59:89:96:24:34:43:28:c6:48:0a:98:a9:09:
b4:79:92:39:4d:d0:9d:5b:ca:9d:5e:c4:ab:fe:6f:49:a6:8e:
e6:c1:db:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPlK5lr8Lvbs4yc1CXUW7hlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx
NGRiMzkwHhcNMjQxMjIwMTc0NDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yjg2MzIxMzM3MGUyMDRmNDVhN2Y3YWVhODhlNGQzMTQ0NmM4MGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryi+afFMuj0ZnoqVxrxmDOApQK76
0PPOh+uSpzNxWSaaaqCx3tPapf4tjSpOF6LbyGuTHzLPe4ApIKM2tVL6QpWT5jeh
ft2W61ceUr3I0dQuYv+An9V5cxVy4a9mJHB7KvEDKcnsSl0V4mI6Q1qudFnltUIp
NZM580OHqmzuxifzQBGJ0BOvphIQI4bEmDyZXRiEmOUrwAa83p+BZ8Wlt+9KO+F6
2COgHeOQHvBitwyKdLnTQ3g0xuPlKFtwqMuDCFnFfuSXQlQZuqML52Q6KAXRC7rt
5b5aXClnz7kU1Ykna6uiPPLmQqPCd6IO53G+bxcnQCZhU7WgThX+QRSxgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuGMhM3DiBPRaf3rqiOTTFEbIDHMB8GA1UdIwQY
MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt
ZWQzMGI5YmIxMmQ1LzEvaTRZeUV6Y09JRTlGcF9ldXFJNU5NVVJzZ01jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1
LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf0BMA0G
CSqGSIb3DQEBCwUAA4IBAQAN3MHNxhN8PCAsxiuQ41GJVpoe0p7NodUHvG1hz4qD
l5zhYS2CUgwp+b3guAWfqNXHmk9YVnidxkNPQod1AVDWpKQIyOBPtgkq4k7Jb36c
Lpem+5nvQRrMeH1++LatykXJmfVLDFP6pfD7FeIfJpj2lg9UdRT13NrGpQTjlg/P
U968ekVboe3AoNQoMAzN+zi83lq+4/+TuGPia1ZZ+Vw/OwkB2Iv9aRJcoyRclci7
w9yShx2FK0NHhInL4fYbHP/QQnShQOyfCjlcJrPwEQb7VIqhjdv6yiLE4idyTlmJ
liQ0QyjGSAqYqQm0eZI5TdCdW8qdXsSr/m9Jpo7mwdsb
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:18 2025 by rpki-client