Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/R8gbOhRKMeb-OyuQYs9mEyx7AqA.roa
File: R8gbOhRKMeb-OyuQYs9mEyx7AqA.roa (raw, json)
Hash identifier: ZBgT6SmJXiFcbrUhpOoMXEuF1s/IEDEF3UHj8FuCFlU=
Subject key identifier: 47:C8:1B:3A:14:4A:31:E6:FE:3B:2B:90:62:CF:66:13:2C:7B:02:A0
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 018CC94CB0C89A1B0F54AC7045FECB9C083D
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/R8gbOhRKMeb-OyuQYs9mEyx7AqA.roa
Signing time: Tue 02 Jan 2024 08:31:35 +0000
ROA not before: Tue 02 Jan 2024 08:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60887
IP address blocks: 185.196.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 04:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b0:c8:9a:1b:0f:54:ac:70:45:fe:cb:9c:08:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Jan 2 08:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c81b3a144a31e6fe3b2b9062cf66132c7b02a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:22:a5:b6:0b:66:90:a9:97:ca:44:92:b4:
e9:83:b6:49:f9:f4:f3:cd:fb:47:66:ad:df:fc:2b:
1e:37:ee:04:6f:0d:b1:1b:ec:64:9e:71:e8:70:71:
5e:c9:4d:ce:bb:dd:82:14:fa:7b:49:3f:e4:ff:ea:
71:0a:0f:79:74:6f:24:80:e0:d0:96:22:a1:38:3a:
67:c2:a4:43:af:fa:cd:18:ff:a7:a5:80:aa:a5:2e:
99:f1:71:78:9a:ef:db:0e:ed:25:87:f0:3d:17:3f:
05:8d:49:1e:05:a2:76:81:a2:c7:db:30:1c:07:42:
77:9f:a4:e2:21:35:cc:a5:78:8f:7f:20:34:27:b4:
a5:0f:ef:96:c1:5b:23:c7:5c:9f:7d:cb:a4:db:fa:
23:11:a0:47:d2:27:81:c2:23:82:04:eb:23:99:d3:
7a:94:f5:c5:11:e3:11:63:97:47:8e:ef:ad:bf:d4:
fa:b3:46:dc:9f:19:f2:86:3e:0d:15:ba:25:9a:e8:
c2:01:37:1f:e4:3d:55:a8:a6:25:e3:17:1c:6c:b5:
54:5a:7d:be:69:fc:8c:9a:10:8a:e2:68:95:ad:ac:
15:2a:45:4c:a1:78:9c:2c:df:6c:d5:0f:bb:e3:9c:
c3:d5:7e:e8:d0:df:1b:7c:d9:06:ab:8a:c5:ab:1d:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:1B:3A:14:4A:31:E6:FE:3B:2B:90:62:CF:66:13:2C:7B:02:A0
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/R8gbOhRKMeb-OyuQYs9mEyx7AqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.148.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f5:f1:a5:c3:f2:ab:f3:df:24:4f:92:fc:70:05:e2:31:a1:
e3:83:d3:42:23:2f:6b:05:e3:b0:b6:46:4e:ba:52:41:3c:b3:
0e:97:70:ba:ac:04:ec:ba:3b:60:aa:f7:ca:6d:cf:f6:da:58:
bc:d9:17:8d:6e:c1:90:2c:16:00:62:09:ce:11:60:b5:34:ac:
8a:a7:c1:79:ae:4b:f1:54:18:fd:4b:8c:fe:0d:8e:f5:b2:a4:
a0:13:e1:66:bb:65:78:b8:e0:da:18:10:d3:1e:ee:4a:9f:43:
dd:89:d8:06:dc:ea:43:d0:c7:0e:5d:cf:f2:b5:fa:a6:10:6a:
15:51:3c:72:20:f9:52:d0:95:a6:f3:c7:c7:04:31:d4:04:a5:
c9:a3:31:7b:c2:de:76:b7:e3:38:3f:44:f0:1f:29:b7:23:a4:
af:2a:11:e2:ee:02:f2:20:6b:30:86:7e:58:14:83:fe:c8:ab:
1d:b9:3e:8c:a3:3f:7c:36:a2:dd:32:8d:51:64:f5:18:7b:01:
de:58:cf:07:3e:0b:01:ca:05:48:82:82:60:f8:df:f7:86:96:
c5:9b:16:ad:2b:1e:7e:29:94:9c:ca:4c:74:cf:1b:b7:7c:8b:
67:1d:55:86:6a:bf:e3:a0:7d:d4:b9:65:8e:82:e5:79:9a:23:
e5:ec:72:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTLDImhsPVKxwRf7LnAg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3
MTJjNzIwHhcNMjQwMTAyMDgzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2M4MWIzYTE0NGEzMWU2ZmUzYjJiOTA2MmNmNjYxMzJjN2IwMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wsipbYLZpCpl8pEkrTpg7ZJ+fTz
zftHZq3f/CseN+4Ebw2xG+xknnHocHFeyU3Ou92CFPp7ST/k/+pxCg95dG8kgODQ
liKhODpnwqRDr/rNGP+npYCqpS6Z8XF4mu/bDu0lh/A9Fz8FjUkeBaJ2gaLH2zAc
B0J3n6TiITXMpXiPfyA0J7SlD++WwVsjx1yffcuk2/ojEaBH0ieBwiOCBOsjmdN6
lPXFEeMRY5dHju+tv9T6s0bcnxnyhj4NFbolmujCATcf5D1VqKYl4xccbLVUWn2+
afyMmhCK4miVrawVKkVMoXicLN9s1Q+745zD1X7o0N8bfNkGq4rFqx3vIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfIGzoUSjHm/jsrkGLPZhMsewKgMB8GA1UdIwQY
MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt
MDFiYjVmZDUzNGY1LzEvUjhnYk9oUktNZWItT3l1UVlzOW1FeXg3QXFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAtMDFiYjVmZDUzNGY1
LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucSUMA0G
CSqGSIb3DQEBCwUAA4IBAQCX9fGlw/Kr898kT5L8cAXiMaHjg9NCIy9rBeOwtkZO
ulJBPLMOl3C6rATsujtgqvfKbc/22li82ReNbsGQLBYAYgnOEWC1NKyKp8F5rkvx
VBj9S4z+DY71sqSgE+Fmu2V4uODaGBDTHu5Kn0PdidgG3OpD0McOXc/ytfqmEGoV
UTxyIPlS0JWm88fHBDHUBKXJozF7wt52t+M4P0TwHym3I6SvKhHi7gLyIGswhn5Y
FIP+yKsduT6Moz98NqLdMo1RZPUYewHeWM8HPgsBygVIgoJg+N/3hpbFmxatKx5+
KZScykx0zxu3fItnHVWGar/joH3UuWWOguV5miPl7HKv
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:29 2025 by rpki-client