Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rUp-unJ4AvOQR7e6DjWqZoOjrDI.roa
File: rUp-unJ4AvOQR7e6DjWqZoOjrDI.roa (raw, json)
Hash identifier: yjovWZZ8xBZs41JGHD0rA3UhsiGggJIg9i/cntTPvmI=
Subject key identifier: AD:4A:7E:BA:72:78:02:F3:90:47:B7:BA:0E:35:AA:66:83:A3:AC:32
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018CC9BC69B251B218ACE03E5A7D48343255
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rUp-unJ4AvOQR7e6DjWqZoOjrDI.roa
Signing time: Tue 02 Jan 2024 10:33:37 +0000
ROA not before: Tue 02 Jan 2024 10:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.160.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:69:b2:51:b2:18:ac:e0:3e:5a:7d:48:34:32:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad4a7eba727802f39047b7ba0e35aa6683a3ac32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:54:6c:78:49:c3:a7:08:bf:1e:a6:9c:06:cb:
10:59:6b:1d:4d:a2:fa:61:76:13:c3:13:0d:e5:11:
62:7f:22:d0:6b:62:22:8d:6b:a4:1a:7d:82:8f:91:
3e:07:55:e1:f6:14:6c:fe:20:cc:8a:0c:fe:83:ad:
cc:ef:e3:f3:3f:a7:88:b7:8a:e2:e0:e8:87:e3:c7:
85:30:e5:d1:e7:f2:0b:8a:95:29:bd:7c:d6:15:c2:
7e:3c:63:63:c3:be:4f:8a:2f:81:8e:50:b0:6c:42:
96:c9:45:dc:d8:d2:80:8f:f9:53:74:2b:b1:07:40:
19:a0:b3:10:57:54:1c:51:fb:20:77:10:18:4a:b5:
8f:85:24:2f:a3:69:52:6f:46:da:b2:6a:ab:7a:84:
ce:ba:89:20:65:a3:a3:3d:65:df:f6:03:93:5e:b1:
13:20:d7:66:c0:ea:fb:15:c4:3b:a6:3a:fb:51:83:
ad:c5:1a:91:98:05:4e:bb:44:f4:98:4b:ec:cf:57:
bd:c9:af:18:c4:0e:49:48:69:e2:95:44:c2:a2:6d:
46:2d:d7:ba:49:8d:4c:48:2c:0c:7c:3e:23:fe:05:
a0:4f:03:08:62:47:24:2d:4d:68:a4:17:86:8e:d7:
89:f3:ae:16:5f:35:92:0c:98:c9:7f:b6:14:4d:dd:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:7E:BA:72:78:02:F3:90:47:B7:BA:0E:35:AA:66:83:A3:AC:32
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/rUp-unJ4AvOQR7e6DjWqZoOjrDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:96:80:c6:a4:62:20:04:8b:7f:12:71:e2:73:7e:ad:89:a5:
ee:e2:e5:9d:10:a0:ff:a8:c2:09:83:ed:bd:4f:af:b4:b4:21:
bb:c8:3a:74:3e:20:d6:21:0b:44:ed:b1:6c:10:a9:11:a3:be:
7d:5b:68:59:b1:57:bd:e1:37:dc:49:86:51:88:84:4e:3b:ab:
98:5f:6a:13:35:a8:cf:39:7b:6c:10:b1:49:2e:8b:da:b8:7c:
aa:c0:83:46:94:c4:b4:27:e9:90:5c:5b:cc:90:12:e2:f1:9e:
41:f8:e7:e9:47:f5:18:09:92:19:81:20:4e:94:42:37:c9:a8:
a6:8e:24:93:67:e7:74:f7:31:71:d5:65:2b:a3:ad:b9:ff:15:
55:a6:25:6d:84:50:bc:bb:49:93:c6:99:f1:7e:8e:85:38:6e:
92:40:3a:ff:f1:3b:66:1c:50:46:8b:62:10:95:69:85:16:c7:
87:9c:06:4f:ce:19:8f:a1:d2:5e:eb:0f:be:52:a0:34:31:df:
7a:b6:a2:f4:da:a1:fe:04:77:4b:52:77:03:08:38:95:2c:5e:
63:7d:d4:7b:a0:a2:2f:71:a9:18:2d:e4:24:31:9a:87:78:ba:
1b:49:3c:b3:e7:e9:7d:2b:23:43:27:74:dd:6e:02:aa:05:2c:
a9:19:c4:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvGmyUbIYrOA+Wn1INDJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjQwMTAyMTAzMzM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDRhN2ViYTcyNzgwMmYzOTA0N2I3YmEwZTM1YWE2NjgzYTNhYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFRseEnDpwi/HqacBssQWWsdTaL6
YXYTwxMN5RFifyLQa2IijWukGn2Cj5E+B1Xh9hRs/iDMigz+g63M7+PzP6eIt4ri
4OiH48eFMOXR5/ILipUpvXzWFcJ+PGNjw75Pii+BjlCwbEKWyUXc2NKAj/lTdCux
B0AZoLMQV1QcUfsgdxAYSrWPhSQvo2lSb0basmqreoTOuokgZaOjPWXf9gOTXrET
INdmwOr7FcQ7pjr7UYOtxRqRmAVOu0T0mEvsz1e9ya8YxA5JSGnilUTCom1GLde6
SY1MSCwMfD4j/gWgTwMIYkckLU1opBeGjteJ864WXzWSDJjJf7YUTd2U5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1KfrpyeALzkEe3ug41qmaDo6wyMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvclVwLXVuSjRBdk9RUjdlNkRqV3Fab09qckRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaDBMA0G
CSqGSIb3DQEBCwUAA4IBAQAbloDGpGIgBIt/EnHic36tiaXu4uWdEKD/qMIJg+29
T6+0tCG7yDp0PiDWIQtE7bFsEKkRo759W2hZsVe94TfcSYZRiIROO6uYX2oTNajP
OXtsELFJLovauHyqwINGlMS0J+mQXFvMkBLi8Z5B+OfpR/UYCZIZgSBOlEI3yaim
jiSTZ+d09zFx1WUro625/xVVpiVthFC8u0mTxpnxfo6FOG6SQDr/8TtmHFBGi2IQ
lWmFFseHnAZPzhmPodJe6w++UqA0Md96tqL02qH+BHdLUncDCDiVLF5jfdR7oKIv
cakYLeQkMZqHeLobSTyz5+l9KyNDJ3TdbgKqBSypGcQc
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:52 2025 by rpki-client