Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7JPTAAFmzO9sortQR6T06bcHip4.roa
File: 7JPTAAFmzO9sortQR6T06bcHip4.roa (raw, json)
Hash identifier: wPTeRuqLwGElKkMr7o3OLovdk4aQpZc9FAP0Vh6FhvA=
Subject key identifier: EC:93:D3:00:01:66:CC:EF:6C:A2:BB:50:47:A4:F4:E9:B7:07:8A:9E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193B9F1ABAED508C357C0615C964E618CC9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7JPTAAFmzO9sortQR6T06bcHip4.roa
Signing time: Thu 12 Dec 2024 08:17:23 +0000
ROA not before: Thu 12 Dec 2024 08:17:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 185.232.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:f1:ab:ae:d5:08:c3:57:c0:61:5c:96:4e:61:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 12 08:17:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec93d3000166ccef6ca2bb5047a4f4e9b7078a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:2e:a5:c2:b6:38:70:ac:e5:b4:3e:ad:d1:
93:62:51:0b:bb:de:74:c6:5a:f4:74:86:46:72:ef:
b5:6d:78:a2:6c:68:7c:f1:f3:0b:c7:4a:07:fa:5f:
6c:a6:29:36:cb:e1:c7:83:f8:28:12:2a:4f:0e:14:
57:07:47:81:c1:54:ac:8b:9d:0d:3d:bc:3a:f1:6f:
9b:fe:88:1f:3f:90:6a:77:ad:d3:5b:27:32:6e:ef:
87:b4:76:72:ba:ec:23:30:af:9d:75:52:1d:cd:03:
68:60:7f:81:f0:cc:4a:24:05:5b:bf:23:6b:93:67:
8f:cc:9f:72:19:66:61:ad:91:78:9c:18:bf:ea:ce:
dc:7b:df:65:2a:ef:01:4d:07:65:ea:1f:44:05:c6:
53:c1:c5:43:04:f6:1a:d5:b1:b0:55:7d:46:63:d9:
74:d7:70:8f:e9:08:ce:0b:69:34:18:2e:68:7f:0c:
04:90:0d:2a:33:9e:d9:97:f7:b6:5a:0b:50:6b:7a:
33:5f:29:f4:12:4e:55:f6:62:0c:14:8a:cd:ef:84:
09:e0:8f:5a:d2:40:85:6d:1b:c2:6c:23:fb:e4:51:
84:54:bf:67:b5:8d:1a:26:04:35:c5:f4:1d:d6:69:
81:dd:80:5c:7f:07:e2:b5:74:99:62:47:a6:90:65:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:D3:00:01:66:CC:EF:6C:A2:BB:50:47:A4:F4:E9:B7:07:8A:9E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7JPTAAFmzO9sortQR6T06bcHip4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9f:f2:1e:31:2e:32:7b:77:a2:98:07:20:77:b7:53:7f:b4:
e6:7b:50:d1:40:b9:5b:54:71:7c:0a:e2:c2:d1:c5:6b:ef:41:
e9:38:99:14:a5:a7:33:e8:c9:9e:d0:f7:58:68:67:04:66:d5:
d9:0d:40:13:5e:20:31:db:82:18:c4:7b:34:da:3d:a4:1b:25:
23:a8:4d:c4:84:87:d8:3a:1a:12:65:77:ef:93:c0:ef:2f:6d:
e4:2c:ce:dd:15:73:40:0a:f2:30:e5:01:7e:76:49:b3:3b:a9:
0c:12:9c:36:d2:64:d8:3f:a4:45:47:eb:37:b1:3d:2d:27:99:
08:9b:18:6c:57:44:a1:42:cc:5b:ee:7b:93:e3:69:45:87:58:
f2:c0:4c:8c:5e:6e:c4:88:23:15:76:30:85:ba:f2:23:d3:8d:
fc:43:65:8c:ab:cc:7e:91:db:25:ce:60:d8:ab:59:0b:31:71:
35:5a:5b:1e:4c:87:02:03:f2:4d:3e:d8:24:24:5b:c4:95:41:
ec:3e:6f:93:60:4b:bf:7c:36:32:ff:3d:9b:b0:b3:9d:c1:5d:
be:b8:31:3b:80:65:86:27:d2:17:cb:82:bc:78:bc:28:c0:24:
e4:60:27:2c:7e:7f:04:a0:66:13:47:62:10:70:19:30:45:dc:
8f:48:33:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO58auu1QjDV8BhXJZOYYzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMjEyMDgxNzIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzkzZDMwMDAxNjZjY2VmNmNhMmJiNTA0N2E0ZjRlOWI3MDc4YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB0upcK2OHCs5bQ+rdGTYlELu950
xlr0dIZGcu+1bXiibGh88fMLx0oH+l9spik2y+HHg/goEipPDhRXB0eBwVSsi50N
Pbw68W+b/ogfP5Bqd63TWycybu+HtHZyuuwjMK+ddVIdzQNoYH+B8MxKJAVbvyNr
k2ePzJ9yGWZhrZF4nBi/6s7ce99lKu8BTQdl6h9EBcZTwcVDBPYa1bGwVX1GY9l0
13CP6QjOC2k0GC5ofwwEkA0qM57Zl/e2WgtQa3ozXyn0Ek5V9mIMFIrN74QJ4I9a
0kCFbRvCbCP75FGEVL9ntY0aJgQ1xfQd1mmB3YBcfwfitXSZYkemkGXJEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyT0wABZszvbKK7UEek9Om3B4qeMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvN0pQVEFBRm16Tzlzb3J0UVI2VDA2YmNIaXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueh1MA0G
CSqGSIb3DQEBCwUAA4IBAQBOn/IeMS4ye3eimAcgd7dTf7Tme1DRQLlbVHF8CuLC
0cVr70HpOJkUpacz6Mme0PdYaGcEZtXZDUATXiAx24IYxHs02j2kGyUjqE3EhIfY
OhoSZXfvk8DvL23kLM7dFXNACvIw5QF+dkmzO6kMEpw20mTYP6RFR+s3sT0tJ5kI
mxhsV0ShQsxb7nuT42lFh1jywEyMXm7EiCMVdjCFuvIj0438Q2WMq8x+kdslzmDY
q1kLMXE1WlseTIcCA/JNPtgkJFvElUHsPm+TYEu/fDYy/z2bsLOdwV2+uDE7gGWG
J9IXy4K8eLwowCTkYCcsfn8EoGYTR2IQcBkwRdyPSDNR
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:48:52 2025 by rpki-client