Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/szpvLROJa2Wi-Rxu8quFHPlqF5s.roa
File: szpvLROJa2Wi-Rxu8quFHPlqF5s.roa (raw, json)
Hash identifier: Hs0rkTRE0P3xi8NllogMFjVYZ6qqofN0WsRqjBo5hOE=
Subject key identifier: B3:3A:6F:2D:13:89:6B:65:A2:F9:1C:6E:F2:AB:85:1C:F9:6A:17:9B
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01947B4E2626CE76BDE706E7917ADED3D759
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/szpvLROJa2Wi-Rxu8quFHPlqF5s.roa
Signing time: Sat 18 Jan 2025 21:25:06 +0000
ROA not before: Sat 18 Jan 2025 21:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 185.84.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7b:4e:26:26:ce:76:bd:e7:06:e7:91:7a:de:d3:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jan 18 21:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b33a6f2d13896b65a2f91c6ef2ab851cf96a179b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:42:fa:f8:db:74:cc:b9:f9:a3:df:aa:34:
9e:17:03:84:2c:3d:a5:a9:b8:dc:87:67:e2:14:2d:
ea:69:d9:ba:64:45:df:04:df:f2:2e:4e:33:f9:a1:
65:bd:4f:a5:4b:b5:f7:52:91:48:89:cf:52:c5:c6:
6f:3b:0c:f8:d6:e2:db:0b:62:67:ed:f3:8b:22:64:
41:55:10:ac:da:51:1c:e4:ab:b6:0a:09:c4:a5:91:
c4:c7:d6:91:2d:a8:62:aa:8b:36:aa:5d:c9:ff:bd:
67:90:69:20:8a:ad:bb:f7:dc:04:06:a0:28:50:81:
3f:6a:70:68:e9:e9:ac:b0:3f:69:a9:39:02:f6:c0:
9a:58:57:26:f6:a5:f3:15:79:af:79:a4:9e:3b:00:
10:cf:5d:bd:cb:8d:fb:e6:f8:3e:de:d9:34:3a:59:
2f:b7:90:9f:dc:95:4d:e5:c5:61:ec:86:91:4f:86:
3f:d8:79:90:82:ae:99:c4:15:12:e1:00:a1:55:d4:
3c:09:b7:30:60:4e:ec:1f:9e:0b:26:db:be:57:b4:
9b:9d:4f:33:f2:86:65:b9:32:6a:d2:ff:3f:62:ed:
6b:66:34:86:95:f4:3d:40:2e:0f:76:48:77:0c:a7:
76:35:12:77:04:97:83:d9:10:ec:16:64:1a:75:19:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3A:6F:2D:13:89:6B:65:A2:F9:1C:6E:F2:AB:85:1C:F9:6A:17:9B
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/szpvLROJa2Wi-Rxu8quFHPlqF5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
10:be:3f:5c:d3:f6:cc:f2:a7:58:c5:a6:7f:98:6b:2d:bd:0c:
43:65:24:d4:f3:cf:50:f4:d5:43:86:53:09:f0:8e:c9:a9:ab:
cb:1b:56:5c:26:0f:a2:8c:f3:47:9f:9a:90:e2:f7:9f:de:07:
fa:f0:24:47:0e:f4:3d:a0:f4:8d:1e:bd:a9:89:03:31:7e:30:
3c:c2:20:a0:85:c5:3f:a7:82:c3:d5:f0:94:68:a5:91:10:f8:
ab:fd:7b:93:da:cf:7f:f7:96:1f:ef:e5:a2:a6:de:43:d8:ad:
25:69:8d:46:fd:a1:a5:47:3c:29:74:35:a0:82:0d:05:ea:fe:
96:a5:af:37:8f:a9:50:6c:1d:f7:15:b7:0d:c2:e8:72:17:03:
df:68:2e:6e:9d:e7:ea:24:05:5c:74:e0:be:26:44:84:b7:46:
1a:21:7c:5a:c6:85:62:5a:52:7e:a7:bc:3c:83:1c:08:d1:37:
2d:26:ca:ae:f4:7c:83:99:cb:16:39:38:8f:04:cc:87:e8:c6:
96:04:40:35:65:e0:26:da:10:38:85:60:eb:f9:2f:72:74:b7:
d8:e5:62:4f:85:d6:de:28:e8:27:30:1e:24:fe:57:8a:5c:2a:
f2:db:44:e9:56:37:f4:e1:c7:c1:aa:64:22:be:01:89:be:46:
b4:bc:d7:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZR7TiYmzna95wbnkXre09dZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjUwMTE4MjEyNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzNhNmYyZDEzODk2YjY1YTJmOTFjNmVmMmFiODUxY2Y5NmExNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S9C+vjbdMy5+aPfqjSeFwOELD2l
qbjch2fiFC3qadm6ZEXfBN/yLk4z+aFlvU+lS7X3UpFIic9SxcZvOwz41uLbC2Jn
7fOLImRBVRCs2lEc5Ku2CgnEpZHEx9aRLahiqos2ql3J/71nkGkgiq2799wEBqAo
UIE/anBo6emssD9pqTkC9sCaWFcm9qXzFXmveaSeOwAQz129y4375vg+3tk0Olkv
t5Cf3JVN5cVh7IaRT4Y/2HmQgq6ZxBUS4QChVdQ8CbcwYE7sH54LJtu+V7SbnU8z
8oZluTJq0v8/Yu1rZjSGlfQ9QC4Pdkh3DKd2NRJ3BJeD2RDsFmQadRnAcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLM6by0TiWtlovkcbvKrhRz5ahebMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvc3pwdkxST0phMldpLVJ4dThxdUZIUGxxRjVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVSfMA0G
CSqGSIb3DQEBCwUAA4IBAQAQvj9c0/bM8qdYxaZ/mGstvQxDZSTU889Q9NVDhlMJ
8I7JqavLG1ZcJg+ijPNHn5qQ4vef3gf68CRHDvQ9oPSNHr2piQMxfjA8wiCghcU/
p4LD1fCUaKWREPir/XuT2s9/95Yf7+Wipt5D2K0laY1G/aGlRzwpdDWggg0F6v6W
pa83j6lQbB33FbcNwuhyFwPfaC5unefqJAVcdOC+JkSEt0YaIXxaxoViWlJ+p7w8
gxwI0TctJsqu9HyDmcsWOTiPBMyH6MaWBEA1ZeAm2hA4hWDr+S9ydLfY5WJPhdbe
KOgnMB4k/leKXCry20TpVjf04cfBqmQivgGJvka0vNct
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:21:04 2025 by rpki-client