Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/cmY_mVpK4OmGDCJqtNq9Y7rj9bI.roa
File: cmY_mVpK4OmGDCJqtNq9Y7rj9bI.roa (raw, json)
Hash identifier: 1JEl5kdrnjOmKgdtg2w1OiFwo1Yl18S1rTk/sNjMWnw=
Subject key identifier: 72:66:3F:99:5A:4A:E0:E9:86:0C:22:6A:B4:DA:BD:63:BA:E3:F5:B2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194C5DDFB0ECB9AC3D1F3A9FD81AE6F5DAE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/cmY_mVpK4OmGDCJqtNq9Y7rj9bI.roa
Signing time: Sun 02 Feb 2025 08:54:06 +0000
ROA not before: Sun 02 Feb 2025 08:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211441
IP address blocks: 185.226.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 08:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:dd:fb:0e:cb:9a:c3:d1:f3:a9:fd:81:ae:6f:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 2 08:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72663f995a4ae0e9860c226ab4dabd63bae3f5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:04:53:6d:f2:ab:24:b1:17:e1:a3:30:f4:
35:68:0f:f4:58:06:c0:95:cc:e5:6d:73:98:cc:3e:
be:3a:d6:24:2c:70:ef:5c:0d:bf:7a:e1:9a:5c:89:
f4:b6:88:74:ef:68:dc:e6:72:3b:b4:a5:c1:eb:d1:
6a:78:d9:23:ba:a4:37:5f:5f:92:43:1d:a4:80:46:
e3:94:b1:10:15:92:ed:a7:5d:30:6f:20:ee:11:01:
cd:a9:b8:ac:b1:0f:36:4f:b0:e3:60:fd:c3:41:73:
d8:ce:e9:70:01:1a:62:62:da:c7:f3:18:9a:c4:f0:
b5:21:ca:94:de:70:44:44:e7:0a:b3:0a:3d:48:7e:
70:10:92:2b:1f:c1:4f:31:a8:29:04:97:b3:50:df:
3e:d0:21:3d:0f:1e:ac:5e:46:36:3a:80:da:ec:3c:
15:06:bb:65:e7:4c:9b:92:1b:87:08:ae:f9:02:48:
0c:b7:df:d4:0e:1d:b7:c1:1f:a6:90:a0:a4:0b:e6:
e5:cc:ee:12:c0:88:8e:99:2f:b2:52:59:4b:78:d1:
45:72:a4:9e:ae:ae:82:90:bd:35:ed:1b:4e:ac:39:
99:9a:da:b0:12:f8:d5:c8:ed:6d:f3:31:f6:9f:ab:
03:a0:99:f1:25:c5:f7:8f:fe:16:bb:54:2c:4b:d1:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:66:3F:99:5A:4A:E0:E9:86:0C:22:6A:B4:DA:BD:63:BA:E3:F5:B2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/cmY_mVpK4OmGDCJqtNq9Y7rj9bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.195.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c4:c3:80:a8:f7:0d:7b:37:34:96:c7:22:af:c4:0c:35:77:
7f:12:b7:22:af:8d:09:fa:b6:96:cf:7b:19:77:18:da:c1:10:
bf:1f:5a:22:ff:db:91:53:41:46:7c:2b:25:e1:1f:c1:7f:75:
5f:f2:56:7f:85:a2:ca:36:44:6c:e2:4a:a6:e7:27:c4:a3:6e:
14:2d:cf:d0:71:71:73:7d:92:6c:e4:af:b8:75:de:70:e0:30:
cb:e4:4b:76:50:b9:8f:9d:92:bd:31:67:8a:18:01:84:f2:bd:
66:a3:eb:70:12:6b:74:84:98:7c:31:34:ec:d5:fb:5e:c4:d4:
a4:5b:94:fc:f1:85:a5:d8:ba:ba:4e:91:96:9c:a5:44:87:96:
d2:7b:e5:32:ad:35:42:7c:fe:69:bf:3d:85:86:1a:50:e9:08:
c2:18:51:99:23:b0:17:e6:43:4c:e5:bc:13:ce:a1:4b:f8:41:
cd:a2:a4:24:0e:75:80:65:4f:e5:ad:06:54:87:5f:cf:95:bc:
38:57:33:a2:93:05:31:af:73:6a:b8:17:44:2c:e0:e7:19:8d:
ce:86:ba:e6:d3:4a:2c:f4:ea:db:34:51:68:2b:43:7d:39:79:
44:2a:e0:6c:87:0c:85:21:f7:6e:d2:60:ed:70:b0:71:c5:38:
5c:71:99:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTF3fsOy5rD0fOp/YGub12uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMjAyMDg1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjY2M2Y5OTVhNGFlMGU5ODYwYzIyNmFiNGRhYmQ2M2JhZTNmNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkoEU23yqySxF+GjMPQ1aA/0WAbA
lczlbXOYzD6+OtYkLHDvXA2/euGaXIn0toh072jc5nI7tKXB69FqeNkjuqQ3X1+S
Qx2kgEbjlLEQFZLtp10wbyDuEQHNqbissQ82T7DjYP3DQXPYzulwARpiYtrH8xia
xPC1IcqU3nBEROcKswo9SH5wEJIrH8FPMagpBJezUN8+0CE9Dx6sXkY2OoDa7DwV
Brtl50ybkhuHCK75AkgMt9/UDh23wR+mkKCkC+blzO4SwIiOmS+yUllLeNFFcqSe
rq6CkL017RtOrDmZmtqwEvjVyO1t8zH2n6sDoJnxJcX3j/4Wu1QsS9GMeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHJmP5laSuDphgwiarTavWO64/WyMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvY21ZX21WcEs0T21HRENKcXROcTlZN3JqOWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueLDMA0G
CSqGSIb3DQEBCwUAA4IBAQA5xMOAqPcNezc0lscir8QMNXd/Ercir40J+raWz3sZ
dxjawRC/H1oi/9uRU0FGfCsl4R/Bf3Vf8lZ/haLKNkRs4kqm5yfEo24ULc/QcXFz
fZJs5K+4dd5w4DDL5Et2ULmPnZK9MWeKGAGE8r1mo+twEmt0hJh8MTTs1ftexNSk
W5T88YWl2Lq6TpGWnKVEh5bSe+UyrTVCfP5pvz2FhhpQ6QjCGFGZI7AX5kNM5bwT
zqFL+EHNoqQkDnWAZU/lrQZUh1/Plbw4VzOikwUxr3NquBdELODnGY3Ohrrm00os
9OrbNFFoK0N9OXlEKuBshwyFIfdu0mDtcLBxxThccZkX
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:44 2025 by rpki-client