Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/sydj1g8aOyHHcpl-cnS6urwiH9Y.roa
File: sydj1g8aOyHHcpl-cnS6urwiH9Y.roa (raw, json)
Hash identifier: qOa0H9HFeUGIIe/u3q65rYJvj02XaObiuj8+wJwZbro=
Subject key identifier: B3:27:63:D6:0F:1A:3B:21:C7:72:99:7E:72:74:BA:BA:BC:22:1F:D6
Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial: 018CC3B7244A4C2678D6196A127FEB8D9B22
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/sydj1g8aOyHHcpl-cnS6urwiH9Y.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197060
IP address blocks: 185.155.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:24:4a:4c:26:78:d6:19:6a:12:7f:eb:8d:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b32763d60f1a3b21c772997e7274bababc221fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:20:c2:31:33:00:de:7f:33:0c:8d:ee:0b:
86:50:3c:02:a7:e1:10:ea:cc:c7:7d:b9:d7:73:d0:
e6:7c:ea:fe:2c:b7:5a:bd:2f:34:46:a4:64:a9:6e:
92:cf:d9:b2:f7:56:0f:3f:0d:3a:4f:12:74:d4:c5:
74:5d:3c:b5:c9:19:00:8b:84:12:9d:01:9a:1e:44:
43:37:a3:a3:68:17:c7:21:93:da:d9:b1:f8:a7:37:
c6:59:4c:3e:e6:64:e2:3b:ae:59:2d:8c:44:80:4c:
97:a5:e3:5b:8a:7f:3e:d6:22:3d:3c:8d:f8:44:88:
f2:c0:ee:8c:1e:93:bc:cd:3f:3d:4e:14:ba:3d:19:
48:11:00:ca:be:0f:11:7f:a5:74:13:e3:9f:31:0c:
9a:30:ed:ae:1c:21:1c:76:b6:ca:7a:59:7e:a4:5b:
5f:7f:da:1d:8d:a5:76:ca:7f:6a:13:58:b8:21:0d:
e7:70:93:6e:e1:74:30:64:93:cc:68:54:65:ff:23:
27:4e:af:f3:0b:ba:51:69:1d:15:b2:dc:0e:59:5f:
95:f6:70:7b:f2:b9:5a:0f:2b:39:f4:d4:76:12:94:
af:24:12:64:f7:b5:07:89:92:f4:9f:70:3d:da:8f:
21:7a:38:7f:e3:be:c3:15:d2:98:01:8c:22:5d:62:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:63:D6:0F:1A:3B:21:C7:72:99:7E:72:74:BA:BA:BC:22:1F:D6
X509v3 Authority Key Identifier:
keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/sydj1g8aOyHHcpl-cnS6urwiH9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.252.0/22
Signature Algorithm: sha256WithRSAEncryption
10:58:93:16:87:7e:fa:79:1f:ee:44:be:01:d0:26:55:ae:e9:
24:b9:90:ff:35:27:b7:61:cd:bc:2c:ac:d9:55:da:07:d1:a3:
05:90:83:23:6f:a9:48:b6:76:28:59:12:f7:42:c2:95:61:b4:
d2:f0:3e:53:e8:41:7c:db:eb:59:de:de:04:60:c0:84:33:95:
db:59:2d:4f:38:76:98:d2:fe:93:4c:f3:ec:bb:80:d5:9f:0b:
f1:55:a4:10:ee:e3:29:ee:d0:c1:11:d1:45:f9:cd:dc:d6:bf:
03:74:59:c5:2f:9b:1b:6c:24:3c:2e:4b:ff:ad:93:f0:f7:b7:
d2:02:05:eb:53:00:02:4f:df:62:b7:80:41:ab:9a:23:17:21:
21:33:0a:1e:64:f7:fd:e2:b0:b3:14:15:c7:ab:17:fb:59:cc:
14:3a:54:bb:b8:00:d6:85:8a:23:66:cd:f8:aa:f3:89:cb:09:
56:41:21:42:21:c3:37:cb:99:ab:c4:5b:e5:59:05:dc:0c:af:
0e:a2:fd:71:c9:8d:06:3b:ba:f4:b5:12:df:64:d0:10:ff:ef:
0b:7c:be:31:c0:a5:d4:33:9d:d0:dc:7b:cc:f2:83:28:5c:c5:
f1:ad:1a:91:bb:52:03:ea:de:b7:36:88:da:2e:b0:90:98:0b:
ef:19:49:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtyRKTCZ41hlqEn/rjZsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NGM2ZjczYjNjODM4ODFmZmM4ZTY2MDNhNmI2NGY0NTM2
NWFjZjEwHhcNMjQwMTAxMDYzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzI3NjNkNjBmMWEzYjIxYzc3Mjk5N2U3Mjc0YmFiYWJjMjIxZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJogwjEzAN5/MwyN7guGUDwCp+EQ
6szHfbnXc9DmfOr+LLdavS80RqRkqW6Sz9my91YPPw06TxJ01MV0XTy1yRkAi4QS
nQGaHkRDN6OjaBfHIZPa2bH4pzfGWUw+5mTiO65ZLYxEgEyXpeNbin8+1iI9PI34
RIjywO6MHpO8zT89ThS6PRlIEQDKvg8Rf6V0E+OfMQyaMO2uHCEcdrbKell+pFtf
f9odjaV2yn9qE1i4IQ3ncJNu4XQwZJPMaFRl/yMnTq/zC7pRaR0VstwOWV+V9nB7
8rlaDys59NR2EpSvJBJk97UHiZL0n3A92o8hejh/477DFdKYAYwiXWI2GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMnY9YPGjshx3KZfnJ0urq8Ih/WMB8GA1UdIwQY
MBaAFDlMb3OzyDiB/8jmYDprZPRTZazxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEt
Njk2OGUyZDgxODI2LzEvc3lkajFnOGFPeUhIY3BsLWNuUzZ1cndpSDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEtNjk2OGUyZDgxODI2
LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZv8MA0G
CSqGSIb3DQEBCwUAA4IBAQAQWJMWh376eR/uRL4B0CZVrukkuZD/NSe3Yc28LKzZ
VdoH0aMFkIMjb6lItnYoWRL3QsKVYbTS8D5T6EF82+tZ3t4EYMCEM5XbWS1POHaY
0v6TTPPsu4DVnwvxVaQQ7uMp7tDBEdFF+c3c1r8DdFnFL5sbbCQ8Lkv/rZPw97fS
AgXrUwACT99it4BBq5ojFyEhMwoeZPf94rCzFBXHqxf7WcwUOlS7uADWhYojZs34
qvOJywlWQSFCIcM3y5mrxFvlWQXcDK8Oov1xyY0GO7r0tRLfZNAQ/+8LfL4xwKXU
M53Q3HvM8oMoXMXxrRqRu1ID6t63NojaLrCQmAvvGUke
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:17 2025 by rpki-client