Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/42B3mDK3i3VBuXtA28Ww6QmZPzU.roa
File: 42B3mDK3i3VBuXtA28Ww6QmZPzU.roa (raw, json)
Hash identifier: TdwhjuzCL9rV/1TfBa63Ir+vazMc7NNGvaUy6xUMGII=
Subject key identifier: E3:60:77:98:32:B7:8B:75:41:B9:7B:40:DB:C5:B0:E9:09:99:3F:35
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A49EDF17D21788F00844C4F0263FE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/42B3mDK3i3VBuXtA28Ww6QmZPzU.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208538
IP address blocks: 146.120.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 10:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:49:ed:f1:7d:21:78:8f:00:84:4c:4f:02:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e360779832b78b7541b97b40dbc5b0e909993f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:7c:83:de:1e:a5:2b:f8:1c:5f:b8:4c:f2:
75:09:d7:01:45:a2:27:d1:9a:00:b5:86:0a:fa:32:
f5:96:3d:ea:9e:7b:a9:39:14:f3:0d:77:2a:76:cb:
0b:9b:ee:05:f4:7d:83:99:74:c5:ea:cf:5d:66:f2:
43:59:be:cd:7d:3f:7c:12:ba:09:27:90:50:81:5c:
e8:2b:92:4e:45:4c:48:ab:5b:75:5c:34:1d:d2:b8:
ff:54:64:f0:61:b8:5f:15:ed:09:2d:3d:32:59:9b:
ab:ba:21:74:0a:a2:c9:e1:08:fc:cc:54:5e:bc:c0:
b8:dc:bb:6b:4b:44:ca:cd:e1:fc:17:94:c3:72:17:
02:57:97:11:9c:d0:0c:94:94:36:de:01:34:d4:38:
93:fc:88:32:57:d2:93:56:86:f5:13:db:4a:77:f1:
55:0d:d2:a0:a8:d2:10:92:cf:4a:b3:15:b9:9e:4b:
96:7b:cf:5e:e9:ac:a6:c0:67:7f:c7:eb:bb:7a:36:
fb:82:ad:04:cc:d0:95:56:d3:bb:25:49:db:1b:89:
1b:ee:cf:03:3f:7a:11:59:e8:2a:96:0a:9e:d4:a6:
b5:18:f8:33:59:b7:23:8d:fa:71:fd:83:21:c5:03:
db:49:b1:c3:19:d4:68:2f:11:3e:c0:88:08:16:51:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:77:98:32:B7:8B:75:41:B9:7B:40:DB:C5:B0:E9:09:99:3F:35
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/42B3mDK3i3VBuXtA28Ww6QmZPzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.227.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d8:50:51:18:93:dc:ab:7d:7a:c4:fa:49:a8:67:71:4d:02:
d8:2b:2b:23:e4:f7:76:41:e6:6b:9d:d1:0b:ff:51:42:b0:28:
04:89:4a:c6:a8:4a:c4:90:ae:19:d4:78:a0:74:d5:6c:c7:c4:
da:dd:1a:6c:e5:3a:4f:d4:04:4b:60:a1:9b:9e:55:17:4d:fc:
11:29:fd:7c:63:82:74:dd:b3:25:9f:2f:83:c8:fd:9a:83:0a:
5e:4c:d8:d6:80:15:d1:45:c6:ca:85:f8:60:97:db:22:9d:6d:
29:99:07:7a:80:1a:de:0b:51:67:b9:7b:df:79:88:57:65:1f:
cf:32:21:94:af:46:92:a0:ed:79:60:97:40:d0:bd:36:39:71:
5d:f2:c9:51:11:a0:8b:87:e1:f7:bd:04:21:51:9f:2c:4a:4c:
32:90:26:94:f0:06:e5:f2:db:a3:06:3b:b1:9b:44:d5:ed:b3:
26:c8:af:5c:d0:fc:c2:a0:4f:cb:a3:59:db:e8:bf:be:21:a0:
d0:5c:d0:6e:2b:4a:e5:cf:1f:fb:41:a2:17:0e:12:71:03:51:
83:b6:78:c3:ea:bf:21:6f:38:b7:4a:2f:46:9d:c3:7c:d3:1c:
96:98:7e:5d:34:05:78:ce:b5:7d:1c:01:23:c3:aa:2a:4b:d9:
76:e8:88:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKknt8X0heI8AhExPAmP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzYwNzc5ODMyYjc4Yjc1NDFiOTdiNDBkYmM1YjBlOTA5OTkzZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YB8g94epSv4HF+4TPJ1CdcBRaIn
0ZoAtYYK+jL1lj3qnnupORTzDXcqdssLm+4F9H2DmXTF6s9dZvJDWb7NfT98EroJ
J5BQgVzoK5JORUxIq1t1XDQd0rj/VGTwYbhfFe0JLT0yWZuruiF0CqLJ4Qj8zFRe
vMC43LtrS0TKzeH8F5TDchcCV5cRnNAMlJQ23gE01DiT/IgyV9KTVob1E9tKd/FV
DdKgqNIQks9KsxW5nkuWe89e6aymwGd/x+u7ejb7gq0EzNCVVtO7JUnbG4kb7s8D
P3oRWegqlgqe1Ka1GPgzWbcjjfpx/YMhxQPbSbHDGdRoLxE+wIgIFlEt3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONgd5gyt4t1Qbl7QNvFsOkJmT81MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNDJCM21ESzNpM1ZCdVh0QTI4V3c2UW1aUHpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknjjMA0G
CSqGSIb3DQEBCwUAA4IBAQAJ2FBRGJPcq316xPpJqGdxTQLYKysj5Pd2QeZrndEL
/1FCsCgEiUrGqErEkK4Z1HigdNVsx8Ta3Rps5TpP1ARLYKGbnlUXTfwRKf18Y4J0
3bMlny+DyP2agwpeTNjWgBXRRcbKhfhgl9sinW0pmQd6gBreC1FnuXvfeYhXZR/P
MiGUr0aSoO15YJdA0L02OXFd8slREaCLh+H3vQQhUZ8sSkwykCaU8Abl8tujBjux
m0TV7bMmyK9c0PzCoE/Lo1nb6L++IaDQXNBuK0rlzx/7QaIXDhJxA1GDtnjD6r8h
bzi3Si9GncN80xyWmH5dNAV4zrV9HAEjw6oqS9l26Iih
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:12 2025 by rpki-client