Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/wzuqRDQfV-SNhPBtoW0-4nNPako.roa
File: wzuqRDQfV-SNhPBtoW0-4nNPako.roa (raw, json)
Hash identifier: rChmUA9LLsYliutb8ew3n/klm5Ot4m4KgiBtLHcToN0=
Subject key identifier: C3:3B:AA:44:34:1F:57:E4:8D:84:F0:6D:A1:6D:3E:E2:73:4F:6A:4A
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 018CC4938D12A65F1A454F798424109CA9DA
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/wzuqRDQfV-SNhPBtoW0-4nNPako.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59617
IP address blocks: 185.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8d:12:a6:5f:1a:45:4f:79:84:24:10:9c:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c33baa44341f57e48d84f06da16d3ee2734f6a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:1c:91:05:8a:5d:e6:12:33:ad:c1:18:31:
30:11:4d:9f:35:06:78:ff:46:83:7a:29:45:87:6a:
a7:c0:d5:a3:74:16:9c:c9:6b:74:74:39:2b:a7:15:
57:48:b8:9c:c7:5d:5b:e4:58:89:49:62:77:e2:c1:
be:92:e6:4a:fd:79:04:48:46:aa:75:b5:0b:98:55:
a5:e7:63:1f:bb:34:2e:3e:27:5b:ec:82:f2:e6:ed:
b0:01:64:4b:d8:a4:ca:2e:1a:58:68:f8:b7:e0:c9:
fd:1e:ae:00:a9:fc:a3:5a:50:ca:49:51:16:ef:20:
d8:74:12:3b:af:a4:c2:84:01:bc:af:e2:64:8f:e8:
02:dc:47:ab:8e:7e:d8:57:cb:db:57:46:26:c3:5c:
e8:9b:84:85:6c:09:5d:a7:2a:66:ee:cd:65:4b:42:
1a:76:69:64:f8:9e:fe:1d:7c:a4:2c:28:ba:53:91:
e2:35:50:6f:b6:d7:b7:30:95:cf:df:18:89:a5:b4:
00:19:29:b1:f6:6c:35:33:0b:11:aa:52:b6:c2:3c:
fb:4e:63:41:d3:cb:83:49:b4:3c:fb:a7:f5:41:e5:
4a:26:44:48:8b:ef:40:86:75:7d:94:85:d3:b8:b2:
55:84:95:a9:3c:33:a6:ad:f5:bd:c9:ba:b9:e5:7b:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:AA:44:34:1F:57:E4:8D:84:F0:6D:A1:6D:3E:E2:73:4F:6A:4A
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/wzuqRDQfV-SNhPBtoW0-4nNPako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:08:a5:2c:fc:24:86:8c:2f:03:92:47:aa:a8:91:c2:f9:e7:
e8:82:ab:c8:9c:08:d2:7e:63:1f:de:86:6d:65:b7:5e:72:72:
4c:17:68:15:1a:f5:06:fb:4b:d2:00:63:b6:20:27:4e:56:8f:
80:c0:53:57:a1:a0:f4:f2:6b:bb:9f:30:8b:a5:8e:c7:c3:73:
a0:1c:50:32:96:92:c8:b8:e9:58:53:0e:6d:33:b2:e2:da:36:
12:82:21:45:61:23:8f:67:db:7d:e7:3f:cd:51:90:7f:45:bd:
0c:e9:23:86:bf:25:9c:aa:76:8d:ab:1e:d5:90:67:10:62:4e:
aa:a3:e5:6a:2e:cc:93:f2:ef:83:44:90:48:af:ca:03:4b:3c:
f2:36:71:b4:7d:a3:75:a7:44:28:ae:3a:c5:1d:32:87:fa:13:
32:a9:99:c1:79:f2:18:59:15:c3:24:4c:25:08:31:f4:02:b3:
92:bf:2f:10:1d:cd:9b:a1:a7:6f:5e:a1:4c:5d:e0:b2:63:e8:
a5:2b:e0:e2:1e:8c:dd:e8:d4:fd:98:d8:6d:c0:9c:bc:67:2b:
97:38:c0:5c:b1:0c:b7:ea:2e:f2:d0:0b:7c:0d:20:7c:15:19:
f4:7f:95:c6:3b:f8:76:b0:a2:33:f8:a9:93:84:00:26:d2:f1:
93:64:01:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk40Spl8aRU95hCQQnKnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGE5ZDI2ZGJiM2VhNWRmYWFlODNiNjE5MDhhZGQ4ZmM2
ZGQzNmYwHhcNMjQwMTAxMTAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzNiYWE0NDM0MWY1N2U0OGQ4NGYwNmRhMTZkM2VlMjczNGY2YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS8ckQWKXeYSM63BGDEwEU2fNQZ4
/0aDeilFh2qnwNWjdBacyWt0dDkrpxVXSLicx11b5FiJSWJ34sG+kuZK/XkESEaq
dbULmFWl52MfuzQuPidb7ILy5u2wAWRL2KTKLhpYaPi34Mn9Hq4AqfyjWlDKSVEW
7yDYdBI7r6TChAG8r+Jkj+gC3Eerjn7YV8vbV0Ymw1zom4SFbAldpypm7s1lS0Ia
dmlk+J7+HXykLCi6U5HiNVBvtte3MJXP3xiJpbQAGSmx9mw1MwsRqlK2wjz7TmNB
08uDSbQ8+6f1QeVKJkRIi+9AhnV9lIXTuLJVhJWpPDOmrfW9ybq55XvmzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMM7qkQ0H1fkjYTwbaFtPuJzT2pKMB8GA1UdIwQY
MBaAFDYKnSbbs+pd+q6DthkIrdj8bdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMt
MTJlOTZiYTIzNWQ4LzEvd3p1cVJEUWZWLVNOaFBCdG9XMC00bk5QYWtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMtMTJlOTZiYTIzNWQ4
LzEvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWiBMA0G
CSqGSIb3DQEBCwUAA4IBAQAcCKUs/CSGjC8DkkeqqJHC+efogqvInAjSfmMf3oZt
ZbdecnJMF2gVGvUG+0vSAGO2ICdOVo+AwFNXoaD08mu7nzCLpY7Hw3OgHFAylpLI
uOlYUw5tM7Li2jYSgiFFYSOPZ9t95z/NUZB/Rb0M6SOGvyWcqnaNqx7VkGcQYk6q
o+VqLsyT8u+DRJBIr8oDSzzyNnG0faN1p0QorjrFHTKH+hMyqZnBefIYWRXDJEwl
CDH0ArOSvy8QHc2boadvXqFMXeCyY+ilK+DiHozd6NT9mNhtwJy8ZyuXOMBcsQy3
6i7y0At8DSB8FRn0f5XGO/h2sKIz+KmThAAm0vGTZAF6
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:19 2025 by rpki-client