Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/NH9dHeDJ6UQd0EWZSm6cSAypHUA.roa
File: NH9dHeDJ6UQd0EWZSm6cSAypHUA.roa (raw, json)
Hash identifier: ahmkFrWzodhOI+Ie9x2BjIu7gO79uQNQW7MyJxZIibM=
Subject key identifier: 34:7F:5D:1D:E0:C9:E9:44:1D:D0:45:99:4A:6E:9C:48:0C:A9:1D:40
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260E88F618E6D16859800DD8461C9F
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/NH9dHeDJ6UQd0EWZSm6cSAypHUA.roa
Signing time: Thu 02 Jan 2025 17:52:50 +0000
ROA not before: Thu 02 Jan 2025 17:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.227.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 07:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0e:88:f6:18:e6:d1:68:59:80:0d:d8:46:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347f5d1de0c9e9441dd045994a6e9c480ca91d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:cb:df:44:06:0f:db:ab:da:f7:54:19:98:
f9:b9:a8:27:6e:78:a6:fd:2a:fc:4b:48:49:79:27:
5a:0d:7b:ab:b1:61:ef:95:e6:88:bc:eb:f2:cf:75:
ea:c3:87:05:99:e4:4b:af:99:77:e8:27:93:c8:bc:
b4:5d:68:3a:99:58:f9:05:27:66:c3:bf:1f:f5:90:
29:5b:63:1b:bd:65:88:6c:67:9f:9b:22:89:cb:bc:
53:b4:39:e7:78:58:99:9d:32:b2:1f:c0:38:04:35:
25:81:e8:c1:da:56:44:68:b2:57:06:73:e9:59:5e:
1f:da:ff:44:8e:50:c1:f0:c9:83:68:01:9b:f7:f7:
0d:33:e6:6b:15:aa:59:01:65:4a:2b:44:7c:04:a9:
61:fd:0a:8c:35:b2:59:e8:04:28:57:f3:59:f6:6e:
ba:d0:9a:e6:ca:bc:11:a1:8c:4b:c9:19:9b:11:63:
02:2f:ba:56:5e:7c:3c:a7:05:23:37:67:3e:32:5f:
29:c4:3c:e9:a5:b0:7f:13:5a:47:cf:af:fa:cc:50:
8e:cb:bc:d6:a5:f8:f9:8a:b2:db:a1:80:7c:8a:a2:
37:93:d0:f0:3d:28:78:8c:54:17:41:0a:18:dd:f5:
12:a4:c1:5a:e5:3e:02:37:13:a9:24:0d:ce:67:b9:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:5D:1D:E0:C9:E9:44:1D:D0:45:99:4A:6E:9C:48:0C:A9:1D:40
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/NH9dHeDJ6UQd0EWZSm6cSAypHUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.7.0/24
Signature Algorithm: sha256WithRSAEncryption
83:81:2a:1e:19:01:d5:7e:a8:d7:82:07:3f:a0:fc:2d:cd:01:
c6:5a:72:ae:43:2d:a1:1f:27:8d:9b:00:85:5d:dc:a6:89:b3:
20:6a:80:e3:ad:8e:3e:67:ea:0c:28:eb:f6:c2:7e:2c:30:17:
02:61:0a:20:99:d5:c9:20:06:1e:a5:32:fb:2e:a3:46:14:22:
3a:36:4c:5c:12:63:42:cd:c8:48:09:b0:81:f4:67:6d:ae:44:
c1:e6:59:95:a7:f4:29:0b:e6:fa:dd:43:59:10:b7:96:c1:11:
ac:39:db:97:b5:ea:a0:8c:c3:ed:4d:b8:2f:b1:e1:89:6c:63:
99:17:b7:94:14:f4:bb:b5:f5:94:52:50:91:f2:35:ee:61:a7:
b6:aa:29:ac:50:08:23:e1:c5:90:f0:88:0b:4f:ab:02:5c:8f:
73:10:fa:85:59:08:42:b2:9d:71:c3:29:64:07:d0:94:3a:87:
24:d4:73:18:0c:0b:9f:7e:5d:3e:ac:5c:66:2f:b9:b1:ab:8e:
ff:85:88:5c:81:34:31:15:05:04:61:c9:dd:02:c1:79:bb:47:
a0:3f:9f:82:ae:88:8a:2a:f0:88:5f:e4:81:35:ca:72:c4:50:
3d:1e:32:50:6a:30:12:4b:6b:e4:50:16:61:0a:f4:e2:e0:f6:
2b:c9:b3:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJg6I9hjm0WhZgA3YRhyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjUwMTAyMTc1MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDdmNWQxZGUwYzllOTQ0MWRkMDQ1OTk0YTZlOWM0ODBjYTkxZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKDL30QGD9ur2vdUGZj5uagnbnim
/Sr8S0hJeSdaDXursWHvleaIvOvyz3Xqw4cFmeRLr5l36CeTyLy0XWg6mVj5BSdm
w78f9ZApW2MbvWWIbGefmyKJy7xTtDnneFiZnTKyH8A4BDUlgejB2lZEaLJXBnPp
WV4f2v9EjlDB8MmDaAGb9/cNM+ZrFapZAWVKK0R8BKlh/QqMNbJZ6AQoV/NZ9m66
0JrmyrwRoYxLyRmbEWMCL7pWXnw8pwUjN2c+Ml8pxDzppbB/E1pHz6/6zFCOy7zW
pfj5irLboYB8iqI3k9DwPSh4jFQXQQoY3fUSpMFa5T4CNxOpJA3OZ7kfXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDR/XR3gyelEHdBFmUpunEgMqR1AMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvTkg5ZEhlREo2VVFkMEVXWlNtNmNTQXlwSFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueMHMA0G
CSqGSIb3DQEBCwUAA4IBAQCDgSoeGQHVfqjXggc/oPwtzQHGWnKuQy2hHyeNmwCF
XdymibMgaoDjrY4+Z+oMKOv2wn4sMBcCYQogmdXJIAYepTL7LqNGFCI6NkxcEmNC
zchICbCB9GdtrkTB5lmVp/QpC+b63UNZELeWwRGsOduXteqgjMPtTbgvseGJbGOZ
F7eUFPS7tfWUUlCR8jXuYae2qimsUAgj4cWQ8IgLT6sCXI9zEPqFWQhCsp1xwylk
B9CUOock1HMYDAuffl0+rFxmL7mxq47/hYhcgTQxFQUEYcndAsF5u0egP5+CroiK
KvCIX+SBNcpyxFA9HjJQajASS2vkUBZhCvTi4PYrybOk
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:31:59 2025 by rpki-client