Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/0VsMK3B1wqP8QX_ZG2jMHCAEcPg.roa
File: 0VsMK3B1wqP8QX_ZG2jMHCAEcPg.roa (raw, json)
Hash identifier: GPYCYC4TfCG3JBPKbkkZs0Kev6E4SC+oLgJpTtJ2NF8=
Subject key identifier: D1:5B:0C:2B:70:75:C2:A3:FC:41:7F:D9:1B:68:CC:1C:20:04:70:F8
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 018CC793D44DBECE1C8A916E3E259B42BE94
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/0VsMK3B1wqP8QX_ZG2jMHCAEcPg.roa
Signing time: Tue 02 Jan 2024 00:30:03 +0000
ROA not before: Tue 02 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212136
IP address blocks: 81.22.47.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 10:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:d4:4d:be:ce:1c:8a:91:6e:3e:25:9b:42:be:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Jan 2 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d15b0c2b7075c2a3fc417fd91b68cc1c200470f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:bd:98:76:50:10:f7:72:b7:83:46:b4:ab:
ca:fc:cc:75:09:48:f8:14:6e:4f:1e:0f:c3:7d:a3:
e1:f9:a5:7d:e6:f9:22:19:f2:eb:2b:5b:e3:56:85:
6e:d8:84:0e:a5:e4:f8:5b:ca:1f:81:76:12:63:45:
34:a8:3d:ad:d4:7d:7c:70:f0:3a:6b:17:19:6b:70:
2d:4a:88:20:17:94:be:88:f9:7b:aa:66:cc:0b:44:
dd:9b:ad:7b:f1:b8:af:81:bf:2f:c8:b4:47:1f:bf:
58:c6:57:aa:39:3d:18:1b:97:30:60:d5:64:f4:37:
eb:a0:5a:74:e5:f2:5d:a1:14:ae:95:00:05:d6:92:
7d:b4:71:a0:f6:b4:a5:8c:2e:29:17:5d:3c:5e:be:
ca:c9:bc:7e:ad:e7:db:30:bd:37:78:db:f9:23:f1:
2c:49:25:5a:b0:bd:0b:d4:f2:6a:d2:53:1d:77:82:
bb:56:68:34:a1:14:64:8c:34:40:fe:4f:87:b7:3d:
e4:0c:f6:30:37:eb:7f:49:a5:a0:b5:03:35:cf:1c:
29:48:c8:98:9a:38:0d:3a:ae:45:9e:be:6b:66:3d:
51:e4:ca:e4:e0:9d:96:4a:80:de:93:6f:cf:b7:bf:
7a:f6:28:9e:70:1c:0f:52:f1:24:46:e8:12:9c:93:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:0C:2B:70:75:C2:A3:FC:41:7F:D9:1B:68:CC:1C:20:04:70:F8
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/0VsMK3B1wqP8QX_ZG2jMHCAEcPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.46.0/23
185.228.248.0/24
185.247.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:38:29:69:e6:d6:14:55:11:50:53:2d:c4:f8:fb:af:5b:25:
92:3f:10:1a:38:4a:bb:0d:48:e1:56:02:71:04:ba:d7:02:d9:
f0:ce:bc:6e:ef:7a:6e:a6:2b:6a:7b:0b:01:c7:2e:65:96:97:
cc:ca:3e:1f:7b:ea:9b:75:87:f2:ca:96:97:f7:8e:08:f2:b9:
af:e9:27:b0:03:48:4a:a0:e5:d8:de:d9:c7:30:a3:eb:39:29:
d7:33:72:f0:ca:e8:31:7f:46:84:ab:c9:fd:3e:df:90:9e:5c:
f5:81:1e:ad:4c:40:cc:6a:ab:e4:de:bc:60:88:f2:a9:6d:e0:
66:bf:b0:59:c8:b2:bd:94:ee:01:81:78:c4:16:dc:c4:56:11:
9a:ad:53:fd:ad:23:47:a7:43:1a:2a:c3:14:d7:e1:ec:fe:ab:
35:1a:35:cc:db:5a:37:d2:fb:2a:b0:d5:c1:66:8e:d3:50:65:
6d:e3:a2:64:ee:4c:69:f4:d1:16:5c:30:d7:74:de:26:79:e2:
7a:8a:8f:b6:45:48:16:19:37:b9:a8:7c:51:24:44:50:ae:4a:
9e:ff:b7:b0:97:dd:c5:2a:e6:56:5b:3f:55:bc:ac:3e:1e:e4:
c6:a1:04:ea:c2:ba:66:54:d7:72:f4:d5:8e:ba:bd:94:72:8b:
bd:f9:4d:4c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzHk9RNvs4cipFuPiWbQr6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy
YzZiMjkwHhcNMjQwMTAyMDAzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTViMGMyYjcwNzVjMmEzZmM0MTdmZDkxYjY4Y2MxYzIwMDQ3MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzza9mHZQEPdyt4NGtKvK/Mx1CUj4
FG5PHg/DfaPh+aV95vkiGfLrK1vjVoVu2IQOpeT4W8ofgXYSY0U0qD2t1H18cPA6
axcZa3AtSoggF5S+iPl7qmbMC0Tdm6178bivgb8vyLRHH79YxleqOT0YG5cwYNVk
9DfroFp05fJdoRSulQAF1pJ9tHGg9rSljC4pF108Xr7Kybx+refbML03eNv5I/Es
SSVasL0L1PJq0lMdd4K7Vmg0oRRkjDRA/k+Htz3kDPYwN+t/SaWgtQM1zxwpSMiY
mjgNOq5Fnr5rZj1R5Mrk4J2WSoDek2/Pt7969iiecBwPUvEkRugSnJMA0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNFbDCtwdcKj/EF/2RtozBwgBHD4MB8GA1UdIwQY
MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt
OWIyMWI2ZjY2NzlhLzEvMFZzTUszQjF3cVA4UVhfWkcyak1IQ0FFY1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh
LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBURYuAwQA
ueT4AwQAufe7MA0GCSqGSIb3DQEBCwUAA4IBAQA+OClp5tYUVRFQUy3E+PuvWyWS
PxAaOEq7DUjhVgJxBLrXAtnwzrxu73pupitqewsBxy5llpfMyj4fe+qbdYfyypaX
944I8rmv6SewA0hKoOXY3tnHMKPrOSnXM3Lwyugxf0aEq8n9Pt+Qnlz1gR6tTEDM
aqvk3rxgiPKpbeBmv7BZyLK9lO4BgXjEFtzEVhGarVP9rSNHp0MaKsMU1+Hs/qs1
GjXM21o30vsqsNXBZo7TUGVt46Jk7kxp9NEWXDDXdN4meeJ6io+2RUgWGTe5qHxR
JERQrkqe/7ewl93FKuZWWz9VvKw+HuTGoQTqwrpmVNdy9NWOur2Ucou9+U1M
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:25 2025 by rpki-client