Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/1-VMDVY4yPmA29PjQL1Ns7l3L9co.roa
File: 1-VMDVY4yPmA29PjQL1Ns7l3L9co.roa (raw, json)
Hash identifier: TrDkmA8AqzYN4JyZPcDpZyAQK2rxAVkI0pQsHGJEBno=
Subject key identifier: F9:53:03:55:8E:32:3E:60:36:F4:F8:D0:2F:53:6C:EE:5D:CB:F5:CA
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 018F125B0F4342FAAEA6183384B6675C2EDD
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/1-VMDVY4yPmA29PjQL1Ns7l3L9co.roa
Signing time: Wed 24 Apr 2024 23:05:08 +0000
ROA not before: Wed 24 Apr 2024 23:05:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204986
IP address blocks: 185.233.180.0/22 maxlen: 22
185.233.180.0/23 maxlen: 23
185.233.180.0/24 maxlen: 24
185.233.181.0/24 maxlen: 24
185.233.182.0/23 maxlen: 23
185.233.182.0/24 maxlen: 24
185.233.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:12:5b:0f:43:42:fa:ae:a6:18:33:84:b6:67:5c:2e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Apr 24 23:05:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f95303558e323e6036f4f8d02f536cee5dcbf5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:bc:73:33:c2:d1:54:26:a9:48:32:a2:2e:
8a:ec:3f:0e:a7:79:23:74:5b:43:73:aa:2e:72:59:
4f:4c:c9:e9:bb:7c:2c:8d:29:76:59:33:78:12:d4:
03:c5:29:91:56:f0:4e:5c:2c:b6:61:87:68:15:8e:
d2:79:6f:ba:1f:86:c7:54:c7:23:c6:53:df:c6:b9:
c7:c2:8b:dc:9e:e8:35:95:2f:51:b5:95:b3:2e:f4:
0d:08:47:84:6b:27:aa:35:b5:57:5e:91:23:36:e1:
eb:a4:82:98:3b:70:f7:73:79:1d:0d:06:ae:51:db:
7c:bf:49:a9:59:1f:c9:a2:37:d2:2b:54:01:c7:b7:
4e:82:15:14:94:a3:9f:48:2c:b8:f1:c2:1b:fa:89:
2e:11:e4:28:11:77:e8:5f:f8:61:e3:c5:4e:75:27:
d7:ba:a6:44:f2:10:4e:de:e8:9e:12:8d:a4:d7:53:
43:93:79:82:08:c8:f2:fc:bc:9f:73:95:fe:3d:df:
e9:4f:11:5e:33:7f:5b:9a:60:76:5e:e4:a6:e2:57:
d2:51:03:00:b7:f7:a6:f8:3b:30:3c:1b:03:82:18:
08:91:75:32:5c:a2:52:47:61:25:f5:ef:1d:74:f2:
83:46:b1:39:24:21:ad:fa:05:84:3d:41:af:b9:fd:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:03:55:8E:32:3E:60:36:F4:F8:D0:2F:53:6C:EE:5D:CB:F5:CA
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/1-VMDVY4yPmA29PjQL1Ns7l3L9co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:03:8a:fd:5e:ef:54:4e:f9:3e:05:cc:9b:69:94:89:5f:f7:
85:43:13:c6:40:96:06:25:1e:e0:b5:da:96:e5:86:29:59:af:
48:ad:79:2f:eb:2e:c0:34:4e:0d:dc:d4:85:9e:bc:1a:ee:1c:
ae:a1:73:59:b7:0b:a9:3b:02:69:d0:43:f8:15:40:8f:ee:82:
2c:f2:e3:53:0f:08:a8:73:5d:f7:b4:6b:3d:ff:46:d0:7b:82:
41:24:77:06:6f:a8:fb:88:bf:df:23:fd:45:0c:81:90:f9:c1:
ed:25:2b:97:e5:10:7c:b8:c3:ca:f6:95:a9:f2:97:91:8c:3d:
11:0b:7f:ac:57:20:25:a1:5d:51:aa:97:22:81:d2:73:00:78:
c5:b4:8a:3f:1c:cc:65:76:bf:7e:da:2a:a6:02:72:3e:86:f8:
3a:fe:11:7f:e2:82:3e:c8:c6:99:a9:d3:0c:d0:58:4a:c6:26:
88:65:4e:00:ac:fd:47:b4:86:67:fa:14:20:b8:83:15:5e:9f:
97:1a:62:6d:f9:74:66:93:6a:ee:04:d1:13:db:93:e9:b8:96:
d8:84:95:9c:4e:8d:ed:96:e9:18:57:19:04:40:15:55:18:b2:
d6:97:22:47:98:b5:d9:fd:3d:3d:3c:27:d6:3e:f6:58:10:02:
3d:e7:09:50
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY8SWw9DQvquphgzhLZnXC7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1
YmU3OWIwHhcNMjQwNDI0MjMwNTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTUzMDM1NThlMzIzZTYwMzZmNGY4ZDAyZjUzNmNlZTVkY2JmNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0W8czPC0VQmqUgyoi6K7D8Op3kj
dFtDc6oucllPTMnpu3wsjSl2WTN4EtQDxSmRVvBOXCy2YYdoFY7SeW+6H4bHVMcj
xlPfxrnHwovcnug1lS9RtZWzLvQNCEeEayeqNbVXXpEjNuHrpIKYO3D3c3kdDQau
Udt8v0mpWR/JojfSK1QBx7dOghUUlKOfSCy48cIb+okuEeQoEXfoX/hh48VOdSfX
uqZE8hBO3uieEo2k11NDk3mCCMjy/Lyfc5X+Pd/pTxFeM39bmmB2XuSm4lfSUQMA
t/em+DswPBsDghgIkXUyXKJSR2El9e8ddPKDRrE5JCGt+gWEPUGvuf0UQQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlTA1WOMj5gNvT40C9TbO5dy/XKMB8GA1UdIwQY
MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt
YTI1ZTE0ZDUzOWEyLzEvMS1WTURWWTR5UG1BMjlQalFMMU5zN2wzTDljby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMzNmMWFiLTZhMzUtNGU2My04YmRjLWEyNWUxNGQ1Mzlh
Mi8xL2h5ajBBTmc5U2FxbTZUSU1vc3Y2azlwYjU1cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnptDAN
BgkqhkiG9w0BAQsFAAOCAQEAfAOK/V7vVE75PgXMm2mUiV/3hUMTxkCWBiUe4LXa
luWGKVmvSK15L+suwDRODdzUhZ68Gu4crqFzWbcLqTsCadBD+BVAj+6CLPLjUw8I
qHNd97RrPf9G0HuCQSR3Bm+o+4i/3yP9RQyBkPnB7SUrl+UQfLjDyvaVqfKXkYw9
EQt/rFcgJaFdUaqXIoHScwB4xbSKPxzMZXa/ftoqpgJyPob4Ov4Rf+KCPsjGmanT
DNBYSsYmiGVOAKz9R7SGZ/oUILiDFV6flxpibfl0ZpNq7gTRE9uT6biW2ISVnE6N
7ZbpGFcZBEAVVRiy1pciR5i12f09PTwn1j72WBACPecJUA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:07 2025 by rpki-client