Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/cUbyw2An2q-fiK0RGCQ81Q170nU.roa
File: cUbyw2An2q-fiK0RGCQ81Q170nU.roa (raw, json)
Hash identifier: strLG4V+ldqXSZbYZH3NEA3552ty9O2PywvkP1Te1io=
Subject key identifier: 71:46:F2:C3:60:27:DA:AF:9F:88:AD:11:18:24:3C:D5:0D:7B:D2:75
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 0192195A1CE185356F64E3A4C227170A444D
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/cUbyw2An2q-fiK0RGCQ81Q170nU.roa
Signing time: Sun 22 Sep 2024 10:49:48 +0000
ROA not before: Sun 22 Sep 2024 10:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62334
IP address blocks: 185.155.73.0/24 maxlen: 24
185.185.16.0/22 maxlen: 22
185.185.16.0/23 maxlen: 23
185.185.16.0/24 maxlen: 24
185.185.17.0/24 maxlen: 24
185.185.18.0/23 maxlen: 23
185.185.18.0/24 maxlen: 24
185.185.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:19:5a:1c:e1:85:35:6f:64:e3:a4:c2:27:17:0a:44:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Sep 22 10:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7146f2c36027daaf9f88ad1118243cd50d7bd275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:5c:e1:a1:24:cb:c0:78:1e:b6:9b:85:3d:
bd:45:b5:85:6a:59:3e:02:71:e0:fe:5d:bc:aa:c8:
e1:23:42:a5:d5:f0:94:84:4c:15:d9:6c:db:c4:65:
bb:ce:cd:3d:65:fa:79:80:a6:87:91:21:3e:4b:f4:
96:19:f1:56:4b:71:3e:69:55:e7:e5:48:3b:4b:fe:
6e:66:87:ac:a0:ec:75:4c:ff:05:72:f3:58:cb:4e:
5c:2d:31:73:26:72:eb:63:33:19:ef:4b:ab:84:84:
59:18:3d:41:7e:7d:97:17:55:03:24:b6:83:ab:0f:
ed:68:4d:8b:d2:71:70:e1:e8:7e:1b:0b:fa:2a:a4:
c5:8c:50:f2:05:71:04:ac:d4:2d:f0:42:10:3c:2b:
74:47:55:c2:d5:e3:a0:11:e6:fa:7d:5f:b7:47:e7:
16:81:88:08:67:01:2c:7a:07:d7:c2:d6:16:63:f3:
eb:73:40:e1:ff:49:4a:06:13:a8:f6:53:d8:ea:2d:
e0:3c:1e:fd:76:9b:0e:cf:c3:b1:dc:ab:e4:df:33:
db:d6:a0:05:e9:33:50:28:55:79:f8:7c:0f:f1:8e:
a1:7c:ff:95:ca:2a:75:4c:64:7e:c2:a2:5d:4c:56:
79:21:e8:40:a9:0d:6b:23:10:af:15:8e:69:17:65:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:F2:C3:60:27:DA:AF:9F:88:AD:11:18:24:3C:D5:0D:7B:D2:75
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/cUbyw2An2q-fiK0RGCQ81Q170nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.73.0/24
185.185.16.0/22
Signature Algorithm: sha256WithRSAEncryption
10:a1:e9:ca:eb:56:8c:cc:09:29:14:8e:87:27:ab:c7:f6:a7:
ce:30:2e:b1:2e:27:b4:3b:d5:ab:8d:41:27:87:4e:9f:ba:35:
da:2c:a7:b9:79:f5:b7:95:d6:55:9d:b3:00:14:b0:cb:34:8e:
6e:69:25:c9:d3:c4:25:50:1b:28:12:b4:bd:ff:37:e6:06:60:
5a:26:7b:80:45:dc:50:66:30:a2:d1:48:f9:c2:b8:62:43:00:
f9:8b:73:ad:46:cf:57:c5:49:51:05:e8:7d:fa:f4:3c:70:c7:
ca:65:5e:54:df:e3:2b:7b:b0:14:76:fc:6e:c1:46:d0:99:d2:
69:50:6e:2a:19:0c:31:92:b4:d6:05:87:d2:14:3b:3b:f1:28:
7f:76:01:93:e7:ea:8f:62:8d:75:25:f3:80:63:37:2b:f2:8c:
f8:72:38:7b:45:78:69:a5:28:c3:88:63:7f:99:d5:0e:82:27:
d1:20:d8:83:cf:d7:b1:34:3a:19:ea:9a:b0:8b:53:c8:53:68:
9a:fc:db:4a:fc:90:65:81:67:c0:33:71:aa:7e:95:f1:28:96:
57:13:f1:0f:94:a2:87:2d:88:a8:bd:bd:2b:7f:44:1a:40:fc:
09:6d:94:de:df:c4:0d:02:5d:5e:73:e7:a7:21:bd:f1:1f:67:
9f:3d:2b:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIZWhzhhTVvZOOkwicXCkRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MWQ3ZTQ0OWNmZWMzMTIwYTk4NTExNjNjNzc5YTYwMjY5
ODYxNzIwHhcNMjQwOTIyMTA0OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTQ2ZjJjMzYwMjdkYWFmOWY4OGFkMTExODI0M2NkNTBkN2JkMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0hc4aEky8B4HrabhT29RbWFalk+
AnHg/l28qsjhI0Kl1fCUhEwV2WzbxGW7zs09Zfp5gKaHkSE+S/SWGfFWS3E+aVXn
5Ug7S/5uZoesoOx1TP8FcvNYy05cLTFzJnLrYzMZ70urhIRZGD1Bfn2XF1UDJLaD
qw/taE2L0nFw4eh+Gwv6KqTFjFDyBXEErNQt8EIQPCt0R1XC1eOgEeb6fV+3R+cW
gYgIZwEsegfXwtYWY/Prc0Dh/0lKBhOo9lPY6i3gPB79dpsOz8Ox3Kvk3zPb1qAF
6TNQKFV5+HwP8Y6hfP+Vyip1TGR+wqJdTFZ5IehAqQ1rIxCvFY5pF2V54wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHFG8sNgJ9qvn4itERgkPNUNe9J1MB8GA1UdIwQY
MBaAFMkdfkSc/sMSCphRFjx3mmAmmGFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZGU5NTQtOTdlOC00YzEzLTgzNGIt
Y2RhNmJiNDA2OTc0LzEvY1VieXcyQW4ycS1maUswUkdDUTgxUTE3MG5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZGU5NTQtOTdlOC00YzEzLTgzNGItY2RhNmJiNDA2OTc0
LzEveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZtJAwQC
ubkQMA0GCSqGSIb3DQEBCwUAA4IBAQAQoenK61aMzAkpFI6HJ6vH9qfOMC6xLie0
O9WrjUEnh06fujXaLKe5efW3ldZVnbMAFLDLNI5uaSXJ08QlUBsoErS9/zfmBmBa
JnuARdxQZjCi0Uj5wrhiQwD5i3OtRs9XxUlRBeh9+vQ8cMfKZV5U3+Mre7AUdvxu
wUbQmdJpUG4qGQwxkrTWBYfSFDs78Sh/dgGT5+qPYo11JfOAYzcr8oz4cjh7RXhp
pSjDiGN/mdUOgifRINiDz9exNDoZ6pqwi1PIU2ia/NtK/JBlgWfAM3GqfpXxKJZX
E/EPlKKHLYiovb0rf0QaQPwJbZTe38QNAl1ec+enIb3xH2efPStc
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:16 2025 by rpki-client