Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/xr46j73V7PVr8rZj5GK-_mZrpP4.roa
File: xr46j73V7PVr8rZj5GK-_mZrpP4.roa (raw, json)
Hash identifier: ST9Aydp7SqOCgAy6avEiVp7MyzNLEBtb6W/whUJ3iXg=
Subject key identifier: C6:BE:3A:8F:BD:D5:EC:F5:6B:F2:B6:63:E4:62:BE:FE:66:6B:A4:FE
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019310DA4A443DCE03D234851FAFE643C0A5
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/xr46j73V7PVr8rZj5GK-_mZrpP4.roa
Signing time: Sat 09 Nov 2024 12:16:01 +0000
ROA not before: Sat 09 Nov 2024 12:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203818
IP address blocks: 185.113.92.0/24 maxlen: 24
185.113.93.0/24 maxlen: 24
185.113.94.0/24 maxlen: 24
185.113.95.0/24 maxlen: 24
185.122.208.0/24 maxlen: 24
185.122.209.0/24 maxlen: 24
185.122.210.0/24 maxlen: 24
185.122.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:da:4a:44:3d:ce:03:d2:34:85:1f:af:e6:43:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Nov 9 12:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6be3a8fbdd5ecf56bf2b663e462befe666ba4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:d3:63:48:2c:ee:9d:82:64:64:64:52:91:
24:ab:17:10:4a:3e:58:78:76:7b:b9:ee:f9:79:27:
d3:3b:11:87:13:11:68:7c:f2:4f:97:6a:ff:37:19:
40:b1:44:21:e7:b6:5b:d0:23:01:d6:a6:cd:12:d8:
04:e1:f1:a2:b1:fc:cf:12:81:e3:57:dc:6c:07:10:
5b:3a:58:81:ea:74:59:0c:cc:03:37:bb:bf:e0:65:
38:24:2c:23:f6:b5:72:47:6b:c2:bb:c8:65:d0:a9:
3a:11:ed:90:55:85:49:1e:7b:44:d6:37:77:ad:c6:
1d:4d:64:94:98:0b:55:1e:2d:42:1e:a2:10:ee:4f:
fe:b6:ef:37:d4:3f:db:df:bc:7d:4b:16:17:4f:dd:
01:f2:bd:16:4c:aa:41:58:6b:e8:fe:c6:5b:2d:1b:
17:49:8e:2a:78:47:e5:2f:8e:23:32:a7:a5:b1:ee:
c4:59:9f:e3:53:dd:38:78:2b:4b:54:e9:6b:d3:aa:
a0:b6:87:2f:8b:76:ba:e5:cc:c0:06:e2:b9:c9:9b:
bc:d5:34:06:4b:8f:22:ae:99:b3:08:e5:20:ef:88:
2b:1f:27:7c:1e:65:05:2e:e5:24:6f:b9:17:34:32:
f7:20:02:41:11:07:4e:0a:ac:f9:10:73:04:08:cd:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BE:3A:8F:BD:D5:EC:F5:6B:F2:B6:63:E4:62:BE:FE:66:6B:A4:FE
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/xr46j73V7PVr8rZj5GK-_mZrpP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.92.0/22
185.122.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:d2:0e:83:ed:f9:2c:a2:25:e0:bb:eb:a4:78:8a:fb:bb:0f:
ad:cd:f1:fc:5a:02:aa:ba:93:5a:6d:0a:bf:27:be:03:d1:3c:
31:92:2e:d5:fc:64:15:21:e7:ef:1f:89:8b:4a:97:41:46:f9:
83:e6:05:af:d7:bc:74:4f:ee:09:f0:85:e5:16:23:15:ec:8b:
3e:8a:66:94:cc:e4:91:cd:a1:15:9c:b5:05:ea:41:5f:8c:d1:
03:14:41:bc:a6:ae:bf:b5:9e:56:d4:9e:ac:fc:a7:63:34:f3:
4b:64:04:0b:e7:98:de:cf:9d:e5:94:a3:81:10:67:ca:ac:ca:
68:46:8f:94:e5:04:46:a2:56:ba:bc:24:4d:c0:97:c0:16:38:
a5:ba:f0:22:d3:12:2e:cd:e9:1d:7e:bb:37:ab:be:e0:14:26:
3d:cc:ab:c6:87:9b:15:8d:4b:9e:6e:11:78:62:c2:44:0b:21:
70:59:25:83:05:b9:c5:42:6f:0e:34:6a:95:ea:72:24:1a:7c:
19:2d:e8:53:a1:24:bd:e6:7f:1c:80:9d:c9:b1:4e:85:df:1c:
de:69:ea:ba:9b:da:a0:5e:45:4a:3f:b7:29:78:2d:fa:b3:cb:
ee:c3:36:fb:ee:fb:7f:4b:98:ac:08:3e:7e:1c:9f:68:7c:bf:
1b:77:32:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMQ2kpEPc4D0jSFH6/mQ8ClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjQxMTA5MTIxNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmJlM2E4ZmJkZDVlY2Y1NmJmMmI2NjNlNDYyYmVmZTY2NmJhNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rzTY0gs7p2CZGRkUpEkqxcQSj5Y
eHZ7ue75eSfTOxGHExFofPJPl2r/NxlAsUQh57Zb0CMB1qbNEtgE4fGisfzPEoHj
V9xsBxBbOliB6nRZDMwDN7u/4GU4JCwj9rVyR2vCu8hl0Kk6Ee2QVYVJHntE1jd3
rcYdTWSUmAtVHi1CHqIQ7k/+tu831D/b37x9SxYXT90B8r0WTKpBWGvo/sZbLRsX
SY4qeEflL44jMqelse7EWZ/jU904eCtLVOlr06qgtocvi3a65czABuK5yZu81TQG
S48irpmzCOUg74grHyd8HmUFLuUkb7kXNDL3IAJBEQdOCqz5EHMECM0NWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMa+Oo+91ez1a/K2Y+Rivv5ma6T+MB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEveHI0Nmo3M1Y3UFZyOHJaajVHSy1fbVpycFA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXFcAwQC
uXrQMA0GCSqGSIb3DQEBCwUAA4IBAQB60g6D7fksoiXgu+ukeIr7uw+tzfH8WgKq
upNabQq/J74D0Twxki7V/GQVIefvH4mLSpdBRvmD5gWv17x0T+4J8IXlFiMV7Is+
imaUzOSRzaEVnLUF6kFfjNEDFEG8pq6/tZ5W1J6s/KdjNPNLZAQL55jez53llKOB
EGfKrMpoRo+U5QRGola6vCRNwJfAFjiluvAi0xIuzekdfrs3q77gFCY9zKvGh5sV
jUuebhF4YsJECyFwWSWDBbnFQm8ONGqV6nIkGnwZLehToSS95n8cgJ3JsU6F3xze
aeq6m9qgXkVKP7cpeC36s8vuwzb77vt/S5isCD5+HJ9ofL8bdzLz
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:24 2025 by rpki-client