Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/CwUXwRQp3LqLq0H5nwhk6AgF5gY.roa
File: CwUXwRQp3LqLq0H5nwhk6AgF5gY.roa (raw, json)
Hash identifier: KS+mDlPZx2iCThaSLoFNiAloCX3MFnCfcYKJA3pzFK8=
Subject key identifier: 0B:05:17:C1:14:29:DC:BA:8B:AB:41:F9:9F:08:64:E8:08:05:E6:06
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0194228DDF612C2C27562A2557713F4A6067
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/CwUXwRQp3LqLq0H5nwhk6AgF5gY.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212552
IP address blocks: 146.19.130.0/24 maxlen: 24
185.110.191.0/24 maxlen: 24
185.221.237.0/24 maxlen: 24
185.231.59.0/24 maxlen: 24
193.163.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 10:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:df:61:2c:2c:27:56:2a:25:57:71:3f:4a:60:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b0517c11429dcba8bab41f99f0864e80805e606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:d7:20:5f:53:25:17:ed:c3:35:43:7a:6d:
68:19:82:70:97:f8:55:f7:0c:ac:b5:19:e9:9f:4c:
51:d3:4a:b5:1c:ba:bb:88:92:a7:0e:6e:a8:0c:3f:
c7:7d:43:67:16:70:0e:7e:b7:e3:d5:9b:47:66:a4:
9b:c6:56:c6:e0:7e:14:e7:15:66:be:b6:a6:81:64:
eb:7b:32:df:da:80:6a:db:8d:81:65:97:a3:93:0c:
81:56:f2:5b:3d:ac:5c:52:34:a2:55:6e:3d:b7:72:
24:a6:92:07:ff:48:e4:97:e4:d3:62:dd:d5:33:91:
14:7d:af:a2:ea:b2:1c:b2:0a:d0:38:12:66:da:c7:
e1:72:36:2c:46:26:75:82:e7:66:3c:aa:d6:9f:a7:
35:35:c4:dc:5a:9c:9f:8c:5e:38:6e:b8:18:d7:76:
96:8f:e6:52:14:a1:f7:20:32:cc:32:5d:58:1a:c9:
ab:f2:35:27:9d:dd:84:d5:72:51:3a:df:81:dd:2b:
55:ee:94:c8:13:1f:a8:df:21:db:d4:bc:9c:43:8a:
1d:f6:8c:d5:63:63:8a:da:74:1d:55:8a:be:f1:5f:
2c:08:35:5e:84:45:da:aa:96:fe:0d:7b:86:42:02:
ac:bd:0e:8f:90:e5:fa:91:22:58:56:82:24:09:2c:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:05:17:C1:14:29:DC:BA:8B:AB:41:F9:9F:08:64:E8:08:05:E6:06
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/CwUXwRQp3LqLq0H5nwhk6AgF5gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.130.0/24
185.110.191.0/24
185.221.237.0/24
185.231.59.0/24
193.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:84:36:03:31:b8:92:cd:2a:c5:63:cc:c0:84:f7:25:aa:1d:
31:05:26:31:e7:85:7e:52:15:6d:72:42:b1:ae:a8:af:f6:fd:
91:aa:c3:20:a3:f1:2c:80:fc:b4:c0:75:6d:3a:39:1e:5f:f6:
b2:34:8f:52:b2:3a:06:4f:e4:e1:cb:42:42:96:6b:c9:5f:aa:
75:60:3b:10:96:22:14:c1:9c:2e:f5:2c:66:7e:41:a1:11:da:
91:02:3c:75:7d:b5:4f:91:1c:a6:10:7d:d2:d6:b4:9d:02:5a:
cd:0d:74:8d:71:0b:3d:51:1c:8d:e6:5b:25:55:6c:2b:c4:55:
a5:36:df:fa:03:37:4c:1e:6f:08:c0:1f:c8:36:bc:ac:54:05:
ad:c9:5f:23:30:96:18:09:29:e6:52:90:12:20:ba:5a:a3:ee:
a8:95:8d:f7:00:d5:63:33:46:67:48:c2:7f:80:6d:8f:aa:c8:
8c:cd:87:a7:81:4b:2f:6c:f2:e0:86:2e:bc:f0:72:0d:8f:0a:
c0:9f:9f:e7:30:34:e0:33:a4:fa:67:41:8c:1b:bf:93:94:b0:
4c:6f:fd:fa:fd:5c:95:e9:bf:3e:49:16:ad:ff:4a:ac:fc:79:
3e:65:09:e3:a5:43:de:de:59:1e:5d:2b:ae:ec:60:a1:4c:00:
35:4d:3d:26
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQijd9hLCwnViolV3E/SmBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4
ZDRiMWEwHhcNMjUwMTAxMTU0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjA1MTdjMTE0MjlkY2JhOGJhYjQxZjk5ZjA4NjRlODA4MDVlNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs63XIF9TJRftwzVDem1oGYJwl/hV
9wystRnpn0xR00q1HLq7iJKnDm6oDD/HfUNnFnAOfrfj1ZtHZqSbxlbG4H4U5xVm
vramgWTrezLf2oBq242BZZejkwyBVvJbPaxcUjSiVW49t3IkppIH/0jkl+TTYt3V
M5EUfa+i6rIcsgrQOBJm2sfhcjYsRiZ1gudmPKrWn6c1NcTcWpyfjF44brgY13aW
j+ZSFKH3IDLMMl1YGsmr8jUnnd2E1XJROt+B3StV7pTIEx+o3yHb1LycQ4od9ozV
Y2OK2nQdVYq+8V8sCDVehEXaqpb+DXuGQgKsvQ6PkOX6kSJYVoIkCSzXbQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAsFF8EUKdy6i6tB+Z8IZOgIBeYGMB8GA1UdIwQY
MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt
MGM2NzIxN2NjOTZiLzEvQ3dVWHdSUXAzTHFMcTBINW53aGs2QWdGNWdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi
LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAkhOCAwQA
uW6/AwQAud3tAwQAuec7AwQAwaPJMA0GCSqGSIb3DQEBCwUAA4IBAQBvhDYDMbiS
zSrFY8zAhPclqh0xBSYx54V+UhVtckKxrqiv9v2RqsMgo/EsgPy0wHVtOjkeX/ay
NI9SsjoGT+Thy0JClmvJX6p1YDsQliIUwZwu9SxmfkGhEdqRAjx1fbVPkRymEH3S
1rSdAlrNDXSNcQs9URyN5lslVWwrxFWlNt/6AzdMHm8IwB/INrysVAWtyV8jMJYY
CSnmUpASILpao+6olY33ANVjM0ZnSMJ/gG2PqsiMzYengUsvbPLghi688HINjwrA
n5/nMDTgM6T6Z0GMG7+TlLBMb/36/VyV6b8+SRat/0qs/Hk+ZQnjpUPe3lkeXSuu
7GChTAA1TT0m
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:17 2025 by rpki-client