Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RFLIVIfw-9YzfnUizJFm3UU5T3U.roa
File: RFLIVIfw-9YzfnUizJFm3UU5T3U.roa (raw, json)
Hash identifier: PRqfqJTPhmJt8XoLHOqTZcKmND+QzxSard/Kh498Lms=
Subject key identifier: 44:52:C8:54:87:F0:FB:D6:33:7E:75:22:CC:91:66:DD:45:39:4F:75
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 018CCA29DCBEF5818EEB0CB4CECEF1384341
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RFLIVIfw-9YzfnUizJFm3UU5T3U.roa
Signing time: Tue 02 Jan 2024 12:33:10 +0000
ROA not before: Tue 02 Jan 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39122
IP address blocks: 185.173.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:dc:be:f5:81:8e:eb:0c:b4:ce:ce:f1:38:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Jan 2 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4452c85487f0fbd6337e7522cc9166dd45394f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:a8:d6:df:66:84:8c:2f:46:f2:5c:7d:55:
25:05:4d:13:0b:15:ba:86:a4:ab:da:1c:68:dc:1a:
dd:0d:47:9a:a6:40:0c:51:e9:62:79:2c:64:d7:a3:
d2:a2:e0:77:0b:10:53:9f:93:d3:8c:08:70:05:f4:
0f:82:c3:60:e5:e1:53:8e:20:d8:57:37:f5:31:4c:
fb:22:5f:1e:22:dd:9a:98:72:74:0f:20:c1:bb:8a:
b8:b9:7e:aa:64:98:7d:65:7d:bb:72:a3:4e:1c:83:
4d:cb:1c:80:70:db:21:f2:47:3a:d5:68:07:7c:66:
1b:78:52:f7:b3:30:82:45:b9:ee:94:e9:79:2b:32:
45:fd:f8:44:de:c9:d2:fe:40:5a:96:35:27:b9:d2:
59:19:6f:bc:16:39:d3:7b:28:1b:86:b9:23:ee:fa:
d2:d3:c4:ba:6b:97:9e:10:0e:e0:83:6c:61:a2:67:
57:2d:b7:c0:9a:12:c8:5b:fc:ed:e7:57:49:0f:42:
03:84:52:89:b6:06:0d:59:ed:32:97:b8:62:22:6d:
e5:e7:8e:b8:ff:83:fd:5c:2e:0b:70:43:f7:8d:a6:
de:fc:6f:c8:d1:70:7c:96:fc:81:f1:04:a7:88:64:
0b:86:b5:45:8e:80:c0:66:32:c7:78:99:17:58:7c:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:52:C8:54:87:F0:FB:D6:33:7E:75:22:CC:91:66:DD:45:39:4F:75
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RFLIVIfw-9YzfnUizJFm3UU5T3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.167.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e8:78:06:f9:d8:25:66:ba:84:5f:0f:7c:24:ef:ca:25:b0:
95:72:9f:72:ef:5a:29:72:4c:3f:81:84:11:bd:d6:99:2b:49:
51:3c:a6:40:80:8a:7d:8e:90:9d:42:b1:8a:a6:bb:fd:80:52:
c6:73:13:1c:e7:f7:18:a6:53:91:72:db:f4:63:51:8e:c1:57:
d7:0b:55:bb:3b:54:bf:4d:5b:02:6c:b6:f7:7d:9a:0d:02:cf:
5b:77:45:c4:07:63:c7:cd:d9:42:fd:fb:74:a8:40:71:3d:3a:
be:d0:b6:52:b9:f5:b5:d6:ce:9f:72:0c:39:5c:d7:6c:dc:78:
36:87:ff:4f:2e:b0:34:b9:6d:d9:33:1d:80:8a:a5:fd:10:8d:
26:8a:2e:00:ef:9b:f5:02:48:f1:f0:c9:d1:12:45:43:bb:db:
5a:e8:f3:f4:05:fc:95:ad:d7:0b:2b:58:28:e3:10:ef:8d:4d:
1e:06:54:89:b8:b7:6b:47:4a:dc:99:26:9c:fa:f0:93:93:cd:
44:2d:b1:f9:bd:33:5d:17:5a:a2:6d:b3:62:42:d6:23:28:fc:
06:61:9f:fa:93:48:ae:a3:52:42:b2:66:cc:5a:eb:ec:7a:01:
6a:f0:0e:e0:34:39:85:fc:b5:57:60:86:fb:3d:d0:5f:64:ee:
69:87:1c:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKdy+9YGO6wy0zs7xOENBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjY5NGQ4YTM5OWEzYTY2ZjQ0MmVjNzIyOTVjNzU0YWNi
YmFkNDEwHhcNMjQwMTAyMTIzMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDUyYzg1NDg3ZjBmYmQ2MzM3ZTc1MjJjYzkxNjZkZDQ1Mzk0Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c6o1t9mhIwvRvJcfVUlBU0TCxW6
hqSr2hxo3BrdDUeapkAMUelieSxk16PSouB3CxBTn5PTjAhwBfQPgsNg5eFTjiDY
Vzf1MUz7Il8eIt2amHJ0DyDBu4q4uX6qZJh9ZX27cqNOHINNyxyAcNsh8kc61WgH
fGYbeFL3szCCRbnulOl5KzJF/fhE3snS/kBaljUnudJZGW+8FjnTeygbhrkj7vrS
08S6a5eeEA7gg2xhomdXLbfAmhLIW/zt51dJD0IDhFKJtgYNWe0yl7hiIm3l5464
/4P9XC4LcEP3jabe/G/I0XB8lvyB8QSniGQLhrVFjoDAZjLHeJkXWHwK2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERSyFSH8PvWM351IsyRZt1FOU91MB8GA1UdIwQY
MBaAFEcmlNijmaOmb0QuxyKVx1Ssu61BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEt
MDYzYTA4ODFhNmQyLzEvUkZMSVZJZnctOVl6Zm5VaXpKRm0zVVU1VDNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEtMDYzYTA4ODFhNmQy
LzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua2nMA0G
CSqGSIb3DQEBCwUAA4IBAQAA6HgG+dglZrqEXw98JO/KJbCVcp9y71opckw/gYQR
vdaZK0lRPKZAgIp9jpCdQrGKprv9gFLGcxMc5/cYplORctv0Y1GOwVfXC1W7O1S/
TVsCbLb3fZoNAs9bd0XEB2PHzdlC/ft0qEBxPTq+0LZSufW11s6fcgw5XNds3Hg2
h/9PLrA0uW3ZMx2AiqX9EI0mii4A75v1Akjx8MnREkVDu9ta6PP0BfyVrdcLK1go
4xDvjU0eBlSJuLdrR0rcmSac+vCTk81ELbH5vTNdF1qibbNiQtYjKPwGYZ/6k0iu
o1JCsmbMWuvsegFq8A7gNDmF/LVXYIb7PdBfZO5phxyX
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:00 2025 by rpki-client