Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/YeL4gYMEP9xlbmlAF16e6uX-s_M.roa
File: YeL4gYMEP9xlbmlAF16e6uX-s_M.roa (raw, json)
Hash identifier: eLQw8RB1zgDT4/d8sODJQrd9oXBnftuJtFn/w5UJ6LE=
Subject key identifier: 61:E2:F8:81:83:04:3F:DC:65:6E:69:40:17:5E:9E:EA:E5:FE:B3:F3
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018CC424F605105C610F1C855DFDB99A65CF
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/YeL4gYMEP9xlbmlAF16e6uX-s_M.roa
Signing time: Mon 01 Jan 2024 08:30:05 +0000
ROA not before: Mon 01 Jan 2024 08:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207582
IP address blocks: 185.185.234.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f6:05:10:5c:61:0f:1c:85:5d:fd:b9:9a:65:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61e2f88183043fdc656e6940175e9eeae5feb3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:07:28:ca:64:93:ce:5d:22:15:e1:6a:26:
cc:07:bd:99:c2:9e:85:12:39:18:23:31:8a:90:c5:
90:e1:42:55:d0:0e:a2:6a:a3:b2:11:be:71:f1:b8:
22:0e:54:82:6b:6b:a2:00:36:93:81:59:07:3d:fd:
78:1a:a2:00:24:42:a9:b3:49:d5:29:89:d8:e0:4c:
89:8a:0c:fa:3e:f6:b2:ee:0c:e3:e1:2d:4e:88:5c:
c0:9e:21:5d:55:97:87:d8:e9:eb:11:80:23:dc:33:
61:2b:6b:44:45:77:6d:de:48:8f:2c:57:a7:31:e3:
81:6a:01:5d:38:d1:8c:a1:70:06:95:01:5d:60:af:
d1:93:6b:c7:d2:74:86:f9:dd:d4:44:73:f4:fc:2e:
45:ba:e2:c5:13:28:45:c8:49:9f:92:a4:ba:15:e9:
ab:d5:6b:a4:ff:07:cf:d4:a9:6f:9a:ac:24:35:19:
2d:e9:f7:ba:fe:ff:2f:2b:27:42:ce:91:91:19:07:
84:22:1f:6d:e2:45:a9:10:57:62:fc:ee:fb:d3:0b:
6b:f0:8a:93:81:1d:45:ab:7e:45:96:1f:55:af:24:
dd:c3:5f:ba:b3:6e:06:b4:37:3f:d0:59:8a:02:f1:
c8:2b:3a:3a:30:a1:93:6f:bd:c6:4b:44:e3:8e:2d:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:F8:81:83:04:3F:DC:65:6E:69:40:17:5E:9E:EA:E5:FE:B3:F3
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/YeL4gYMEP9xlbmlAF16e6uX-s_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.7.0/24
185.86.15.0/24
185.87.120.0/24
185.185.234.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7a:28:c1:2d:a1:00:b9:2c:fc:ee:4d:ac:af:57:9d:e3:80:
7e:a7:7e:17:0b:4d:fd:b4:ea:c6:d4:19:9d:23:2e:6c:b2:32:
96:6a:74:83:9e:a2:aa:27:b0:cd:0e:f7:b9:ca:23:a6:7e:3d:
08:ea:20:f0:ef:cb:5f:6e:eb:da:7d:8d:0e:3e:1f:b8:05:b6:
fb:6c:fa:d8:35:dd:81:a3:46:40:18:11:68:8d:18:c2:07:a3:
40:cd:c8:d4:aa:8f:b1:a3:e7:fa:b2:c2:9d:b7:08:b5:fd:a4:
a5:3c:ff:3d:d0:f6:da:55:cf:53:59:c4:15:e0:df:67:af:ec:
5d:c3:a2:f2:c4:0c:04:f7:60:bb:51:e7:5b:68:16:2c:d7:ab:
6e:25:85:eb:b3:cc:ef:44:fb:f0:9d:2f:4c:51:cf:4c:c5:39:
16:06:8d:6a:9b:da:13:a3:c9:8c:d0:9b:8e:91:d1:1e:94:d3:
7c:da:49:97:7c:e9:1d:68:15:d7:4c:39:4c:1e:28:86:c0:44:
b8:b0:ec:0c:5b:63:07:0b:8f:72:96:e1:e2:d2:ea:61:6e:f9:
7a:65:34:1e:0a:7a:88:2c:8b:92:07:c0:4e:ca:76:b7:36:14:
9a:ee:b9:2c:6e:34:7e:5a:8b:53:e7:9c:e5:ba:8d:4b:f8:e6:
89:01:57:68
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzEJPYFEFxhDxyFXf25mmXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjQwMTAxMDgzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWUyZjg4MTgzMDQzZmRjNjU2ZTY5NDAxNzVlOWVlYWU1ZmViM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZEHKMpkk85dIhXhaibMB72Zwp6F
EjkYIzGKkMWQ4UJV0A6iaqOyEb5x8bgiDlSCa2uiADaTgVkHPf14GqIAJEKps0nV
KYnY4EyJigz6Pvay7gzj4S1OiFzAniFdVZeH2OnrEYAj3DNhK2tERXdt3kiPLFen
MeOBagFdONGMoXAGlQFdYK/Rk2vH0nSG+d3URHP0/C5FuuLFEyhFyEmfkqS6Femr
1Wuk/wfP1KlvmqwkNRkt6fe6/v8vKydCzpGRGQeEIh9t4kWpEFdi/O770wtr8IqT
gR1Fq35Flh9VryTdw1+6s24GtDc/0FmKAvHIKzo6MKGTb73GS0Tjji14OwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGHi+IGDBD/cZW5pQBdenurl/rPzMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvWWVMNGdZTUVQOXhsYm1sQUYxNmU2dVgtc19NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuVYHAwQA
uVYPAwQAuVd4AwQAubnqMA0GCSqGSIb3DQEBCwUAA4IBAQAieijBLaEAuSz87k2s
r1ed44B+p34XC039tOrG1BmdIy5ssjKWanSDnqKqJ7DNDve5yiOmfj0I6iDw78tf
buvafY0OPh+4Bbb7bPrYNd2Bo0ZAGBFojRjCB6NAzcjUqo+xo+f6ssKdtwi1/aSl
PP890PbaVc9TWcQV4N9nr+xdw6LyxAwE92C7UedbaBYs16tuJYXrs8zvRPvwnS9M
Uc9MxTkWBo1qm9oTo8mM0JuOkdEelNN82kmXfOkdaBXXTDlMHiiGwES4sOwMW2MH
C49yluHi0uphbvl6ZTQeCnqILIuSB8BOyna3NhSa7rksbjR+WotT55zluo1L+OaJ
AVdo
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:42 2025 by rpki-client