Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ToF5l8DCExkQcY0QHp9NExWH5RA.roa
File: ToF5l8DCExkQcY0QHp9NExWH5RA.roa (raw, json)
Hash identifier: P5+ykW4ltz6S9olm6Oh/wv18eyEbePulWULbAVEpMOI=
Subject key identifier: 4E:81:79:97:C0:C2:13:19:10:71:8D:10:1E:9F:4D:13:15:87:E5:10
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018CC500D8A382CDB1488F0A171BDC936B12
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ToF5l8DCExkQcY0QHp9NExWH5RA.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203510
IP address blocks: 185.9.185.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d8:a3:82:cd:b1:48:8f:0a:17:1b:dc:93:6b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e817997c0c2131910718d101e9f4d131587e510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:b5:ac:5a:a4:a7:92:a7:f8:cc:65:38:6f:
4e:9e:e9:de:45:98:c3:c8:fd:52:de:ed:04:ac:9c:
aa:c3:03:33:b0:ad:96:14:2b:de:8d:ed:3b:d1:7d:
48:2b:72:19:54:50:15:35:ec:70:fe:bc:01:1b:1e:
fa:92:da:48:4b:92:47:c9:27:29:23:3f:9c:64:15:
a9:b7:a7:2d:27:1a:2b:3d:e4:e1:83:c0:b6:14:75:
55:75:ae:7b:f3:03:e7:bd:eb:a6:0a:bd:4b:a2:7e:
77:e6:43:8b:3f:bf:51:f6:08:02:56:14:84:25:30:
45:ae:4b:f4:89:66:a2:8d:ff:6e:26:38:da:e4:64:
a2:c8:ce:07:9e:09:d1:e3:fb:42:65:a5:4d:58:dd:
f6:95:92:e1:fe:ed:26:7a:c5:6a:63:50:3a:15:5d:
96:c3:03:c7:ef:8c:72:e2:fd:6c:f7:f2:e5:fc:08:
41:87:62:4b:23:c6:4c:d6:1e:91:be:18:e7:25:ff:
3a:79:4d:6c:47:fe:08:e8:17:c4:dc:de:d6:54:d7:
ee:9b:fa:0e:a6:2b:fb:58:7e:15:bf:1d:07:94:c8:
4c:09:a7:f0:18:74:ea:27:a3:d8:0f:bb:17:71:4f:
2a:c2:2c:db:25:a0:31:62:84:b3:f7:6a:a0:92:f2:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:79:97:C0:C2:13:19:10:71:8D:10:1E:9F:4D:13:15:87:E5:10
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ToF5l8DCExkQcY0QHp9NExWH5RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.185.0/24
Signature Algorithm: sha256WithRSAEncryption
43:09:ef:56:60:93:4f:67:4e:f4:28:62:e0:f6:fc:fc:68:bc:
63:fd:10:cf:9e:20:3b:23:5a:be:a5:ab:46:05:72:12:56:c3:
6d:46:72:67:a5:4c:05:9e:05:79:83:1e:00:69:24:24:4c:98:
64:0a:ae:8d:7c:0a:17:4f:37:b2:37:bb:8d:40:92:19:29:ac:
a9:62:be:cd:af:48:bd:d9:78:be:c0:51:f3:e8:02:69:e0:9d:
bc:85:66:3d:c1:6f:90:5e:59:5f:2e:5d:bb:26:c0:45:30:1d:
ce:bc:1c:be:0a:05:dc:6e:45:b4:c8:aa:28:88:1d:93:b5:cc:
3a:c7:a3:7c:e6:33:fc:29:21:b8:a9:7b:f0:ef:d2:74:19:66:
04:25:b2:2f:08:2b:1a:07:a5:7b:51:66:29:25:b4:cb:e7:4d:
3b:b8:6b:7b:cd:e0:20:88:78:56:b3:60:ac:0c:60:0c:da:35:
a8:ff:e7:a0:92:01:9d:84:25:0d:a5:e6:70:93:05:49:95:c1:
9a:15:1c:08:37:f9:2a:8d:09:82:0b:4e:57:c1:d2:e6:82:9d:
7c:83:61:bd:58:2b:87:63:11:8d:c9:af:71:af:fc:a6:b9:a0:
f6:10:01:14:a0:4d:06:cb:bc:c6:75:28:46:2d:3d:a3:40:05:
e9:c9:96:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFANijgs2xSI8KFxvck2sSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjQwMTAxMTIzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTgxNzk5N2MwYzIxMzE5MTA3MThkMTAxZTlmNGQxMzE1ODdlNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwe1rFqkp5Kn+MxlOG9OnuneRZjD
yP1S3u0ErJyqwwMzsK2WFCveje070X1IK3IZVFAVNexw/rwBGx76ktpIS5JHyScp
Iz+cZBWpt6ctJxorPeThg8C2FHVVda578wPnveumCr1Lon535kOLP79R9ggCVhSE
JTBFrkv0iWaijf9uJjja5GSiyM4HngnR4/tCZaVNWN32lZLh/u0mesVqY1A6FV2W
wwPH74xy4v1s9/Ll/AhBh2JLI8ZM1h6RvhjnJf86eU1sR/4I6BfE3N7WVNfum/oO
piv7WH4Vvx0HlMhMCafwGHTqJ6PYD7sXcU8qwizbJaAxYoSz92qgkvKKhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE6BeZfAwhMZEHGNEB6fTRMVh+UQMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvVG9GNWw4RENFeGtRY1kwUUhwOU5FeFdINVJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQm5MA0G
CSqGSIb3DQEBCwUAA4IBAQBDCe9WYJNPZ070KGLg9vz8aLxj/RDPniA7I1q+patG
BXISVsNtRnJnpUwFngV5gx4AaSQkTJhkCq6NfAoXTzeyN7uNQJIZKaypYr7Nr0i9
2Xi+wFHz6AJp4J28hWY9wW+QXllfLl27JsBFMB3OvBy+CgXcbkW0yKooiB2Ttcw6
x6N85jP8KSG4qXvw79J0GWYEJbIvCCsaB6V7UWYpJbTL5007uGt7zeAgiHhWs2Cs
DGAM2jWo/+egkgGdhCUNpeZwkwVJlcGaFRwIN/kqjQmCC05XwdLmgp18g2G9WCuH
YxGNya9xr/ymuaD2EAEUoE0Gy7zGdShGLT2jQAXpyZat
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:05 2025 by rpki-client