Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/p6_Sh-QOstODIvaoNn-nqI2KXyU.roa
File: p6_Sh-QOstODIvaoNn-nqI2KXyU.roa (raw, json)
Hash identifier: e8c1Y1sRiCgGCgJOkbPVLQf8ZJqifJtiX7I0CZid0f4=
Subject key identifier: A7:AF:D2:87:E4:0E:B2:D3:83:22:F6:A8:36:7F:A7:A8:8D:8A:5F:25
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 018CC4930A51C54BC8FBF8D09935D67CB365
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/p6_Sh-QOstODIvaoNn-nqI2KXyU.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.93.228.0/24 maxlen: 24
193.19.224.0/22 maxlen: 24
2a02:fe80:13::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Feb 2024 17:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0a:51:c5:4b:c8:fb:f8:d0:99:35:d6:7c:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7afd287e40eb2d38322f6a8367fa7a88d8a5f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:41:eb:ce:0a:7e:d0:cd:be:dc:88:ba:3f:7a:
f6:e3:2c:01:74:df:cf:54:15:0e:72:25:2e:a4:d0:
5a:88:bf:b7:80:b0:21:12:25:cb:0a:e1:82:b1:56:
19:7f:8e:58:25:3f:f5:fd:a8:d7:d0:0b:c5:dd:8d:
0e:aa:c2:ab:f4:82:7c:6a:f2:f0:55:35:54:5d:e8:
36:ea:0d:b0:24:0e:1f:40:01:b0:ab:fd:2d:a3:37:
95:50:3d:85:91:66:72:87:4c:af:22:ba:fc:8b:1d:
a9:a8:07:3c:50:bf:6d:a5:ce:19:f9:a2:5f:fa:71:
86:92:b9:8d:f5:31:97:3c:59:44:2d:39:c1:b9:39:
4a:cd:ed:e2:34:4a:27:7e:d4:93:7a:50:36:4a:df:
bd:36:ab:62:d9:42:d9:1d:f8:1f:47:ac:53:a6:49:
87:82:90:35:a4:60:1c:64:74:82:5d:4a:e4:47:31:
fa:77:0a:78:56:59:b5:7e:93:d4:4c:84:91:a7:d3:
b0:6b:07:ee:14:d5:73:13:ed:53:43:fd:24:27:86:
90:8a:b2:15:34:61:ec:7b:0c:b7:f0:66:24:be:29:
df:fc:4d:56:9f:da:4f:e4:69:60:34:3b:0a:3a:c0:
74:7a:ad:60:1f:e3:64:6a:fe:56:d0:4e:f0:7f:41:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:D2:87:E4:0E:B2:D3:83:22:F6:A8:36:7F:A7:A8:8D:8A:5F:25
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/p6_Sh-QOstODIvaoNn-nqI2KXyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.228.0/24
193.19.224.0/22
IPv6:
2a02:fe80:13::/48
Signature Algorithm: sha256WithRSAEncryption
2a:15:a4:7f:b1:e4:fa:f7:18:89:8a:34:df:e5:bc:5b:18:54:
79:e1:5e:09:a9:e5:6a:9e:ad:c5:f0:5e:a5:4c:c8:55:3e:be:
a3:f1:ea:bf:f0:65:47:63:10:50:f0:f5:62:17:dd:d2:5a:c6:
9a:a8:0b:6a:c2:49:08:ee:de:23:97:e5:1d:fa:7c:80:b1:b0:
68:40:9e:9f:a8:0e:29:84:55:b1:4c:da:be:af:cd:71:66:d7:
35:69:f7:bf:c8:14:9c:cc:d8:1b:07:1e:5a:84:8c:21:49:77:
b7:4e:ee:1b:b7:5e:2f:f7:58:2a:4c:6e:55:b8:45:76:7c:57:
0a:29:05:25:5d:6c:6d:80:7f:87:f6:34:bb:03:81:a7:ad:c3:
f9:f7:d8:a0:48:00:93:4e:f6:40:29:a9:40:b7:4c:15:33:91:
95:54:23:4f:f7:d9:e3:81:52:87:eb:50:b2:ba:c5:45:db:fa:
e1:e3:50:91:ce:7d:34:59:b3:d6:8f:61:05:39:e0:ee:af:b0:
cc:0e:d9:e0:66:ad:3e:c8:38:66:72:12:cd:b2:25:d8:23:14:
fd:40:ce:61:aa:db:dd:c8:b8:e4:b5:79:dd:2a:1b:bf:b9:78:
3e:b5:3d:38:3f:e8:73:27:0b:cc:20:a8:d0:12:6d:4d:e9:37:
c3:90:09:a9
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzEkwpRxUvI+/jQmTXWfLNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk
MjYxYzkwHhcNMjQwMTAxMTAzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2FmZDI4N2U0MGViMmQzODMyMmY2YTgzNjdmYTdhODhkOGE1ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEHrzgp+0M2+3Ii6P3r24ywBdN/P
VBUOciUupNBaiL+3gLAhEiXLCuGCsVYZf45YJT/1/ajX0AvF3Y0OqsKr9IJ8avLw
VTVUXeg26g2wJA4fQAGwq/0tozeVUD2FkWZyh0yvIrr8ix2pqAc8UL9tpc4Z+aJf
+nGGkrmN9TGXPFlELTnBuTlKze3iNEonftSTelA2St+9Nqti2ULZHfgfR6xTpkmH
gpA1pGAcZHSCXUrkRzH6dwp4Vlm1fpPUTISRp9OwawfuFNVzE+1TQ/0kJ4aQirIV
NGHsewy38GYkvinf/E1Wn9pP5GlgNDsKOsB0eq1gH+Nkav5W0E7wf0FW9QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKev0ofkDrLTgyL2qDZ/p6iNil8lMB8GA1UdIwQY
MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt
MmE2MzcyZTA1NGQyLzEvcDZfU2gtUU9zdE9ESXZhb05uLW5xSTJLWHlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy
LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuV3kAwQC
wRPgMA8EAgACMAkDBwAqAv6AABMwDQYJKoZIhvcNAQELBQADggEBACoVpH+x5Pr3
GImKNN/lvFsYVHnhXgmp5WqercXwXqVMyFU+vqPx6r/wZUdjEFDw9WIX3dJaxpqo
C2rCSQju3iOX5R36fICxsGhAnp+oDimEVbFM2r6vzXFm1zVp97/IFJzM2BsHHlqE
jCFJd7dO7hu3Xi/3WCpMblW4RXZ8VwopBSVdbG2Af4f2NLsDgaetw/n32KBIAJNO
9kApqUC3TBUzkZVUI0/32eOBUofrULK6xUXb+uHjUJHOfTRZs9aPYQU54O6vsMwO
2eBmrT7IOGZyEs2yJdgjFP1AzmGq293IuOS1ed0qG7+5eD61PTg/6HMnC8wgqNAS
bU3pN8OQCak=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:32 2025 by rpki-client