Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/DEGDnl_IqKDJKEQFj-YJpqtxRhU.roa
File: DEGDnl_IqKDJKEQFj-YJpqtxRhU.roa (raw, json)
Hash identifier: 3ft4BYVPtKOJc2M7l4Q1ePk1gsBVp8fz5WFtC8JFaZc=
Subject key identifier: 0C:41:83:9E:5F:C8:A8:A0:C9:28:44:05:8F:E6:09:A6:AB:71:46:15
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 018CC3B6EF8397B45290299849E367B55BD2
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/DEGDnl_IqKDJKEQFj-YJpqtxRhU.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52063
IP address blocks: 185.109.116.0/22 maxlen: 24
46.254.184.0/21 maxlen: 24
2a00:9400::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ef:83:97:b4:52:90:29:98:49:e3:67:b5:5b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c41839e5fc8a8a0c92844058fe609a6ab714615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:a6:e3:2a:e8:36:9f:b0:34:08:00:71:70:
e2:85:ac:b0:4a:9b:aa:a9:00:28:fb:c1:95:a5:77:
88:ef:6f:c6:87:55:4e:1f:45:23:06:b6:be:83:50:
ff:72:b7:1a:49:44:80:18:63:eb:e9:dd:8b:0b:7d:
e2:f1:21:06:12:d0:e7:87:b6:fe:38:89:51:9d:bb:
62:95:1b:8d:bf:2d:fd:bb:be:f9:62:54:64:9f:15:
ca:30:45:bf:88:55:c3:fc:68:d2:03:e2:a0:93:6c:
a2:8d:c5:d7:63:8d:c0:2a:ef:16:ea:da:7d:d4:0e:
26:4a:c7:bc:7b:11:0d:db:29:71:ba:2d:04:22:90:
aa:fb:4c:9d:e4:05:e6:d4:72:b5:2f:cb:50:ab:3a:
e0:49:1e:2f:7a:c9:c6:d1:f2:44:31:e0:a6:b1:9e:
ba:00:6a:91:dd:60:b3:d3:82:ee:20:56:76:02:75:
a0:f6:ba:91:c4:11:9a:96:4e:d1:36:4d:75:0d:4d:
06:df:59:40:de:2e:71:5e:8a:5f:cb:7a:11:18:be:
43:4c:cd:49:58:8b:3d:1b:87:c2:93:ed:99:97:10:
30:c0:e2:48:69:f8:6b:09:8d:3d:a9:e0:e9:9c:22:
cf:e3:1b:43:61:2e:44:af:71:08:cb:21:c8:3d:79:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:83:9E:5F:C8:A8:A0:C9:28:44:05:8F:E6:09:A6:AB:71:46:15
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/DEGDnl_IqKDJKEQFj-YJpqtxRhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.184.0/21
185.109.116.0/22
IPv6:
2a00:9400::/32
Signature Algorithm: sha256WithRSAEncryption
2e:05:f2:66:56:e5:9f:01:d0:03:ca:25:ca:cf:14:8a:6c:6c:
cc:28:23:68:9d:01:c7:f5:94:eb:a1:d1:6c:87:1e:ec:c4:7a:
9d:44:8d:70:90:05:8f:9b:2e:fd:16:c9:8e:2e:92:e4:39:51:
9c:f6:44:45:f9:4c:e5:88:68:ad:5a:b1:fc:02:06:e5:ec:fb:
22:bc:89:74:88:33:ee:61:b7:b9:ba:93:46:de:02:f0:34:b3:
c8:5d:41:e2:45:f2:9b:7c:9c:0d:b9:00:e1:aa:5e:38:8f:0c:
e2:e9:bb:a3:08:4c:29:4e:fa:d4:08:8c:49:c8:11:1d:bf:03:
64:34:8d:7a:44:cd:27:be:82:aa:6f:16:f6:69:9d:df:fb:82:
4b:aa:1f:88:79:58:7a:c7:61:c0:6f:d5:34:d5:99:34:f0:17:
ca:8f:d8:b6:4d:64:b8:4d:98:2f:08:9e:9a:6c:9e:2d:e6:b1:
95:d8:f9:38:66:44:75:cb:7e:bd:e6:4c:68:a9:30:9b:45:ec:
07:bb:a7:80:c9:bd:cf:70:6d:5b:49:f0:55:85:ea:43:96:87:
68:20:c6:74:81:39:45:11:d9:29:94:0a:2e:f8:ea:12:a7:fc:
15:ca:12:54:0c:b5:b0:a2:51:84:e2:74:9f:eb:39:71:31:4b:
ae:47:36:6c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzDtu+Dl7RSkCmYSeNntVvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMzM5ZDMwNDQ5OWQwNjlhZWNkOGJkMGU4ZmJhMDJlNTIy
ZjU3NmEwHhcNMjQwMTAxMDYyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzQxODM5ZTVmYzhhOGEwYzkyODQ0MDU4ZmU2MDlhNmFiNzE0NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV2m4yroNp+wNAgAcXDihaywSpuq
qQAo+8GVpXeI72/Gh1VOH0UjBra+g1D/crcaSUSAGGPr6d2LC33i8SEGEtDnh7b+
OIlRnbtilRuNvy39u775YlRknxXKMEW/iFXD/GjSA+Kgk2yijcXXY43AKu8W6tp9
1A4mSse8exEN2ylxui0EIpCq+0yd5AXm1HK1L8tQqzrgSR4vesnG0fJEMeCmsZ66
AGqR3WCz04LuIFZ2AnWg9rqRxBGalk7RNk11DU0G31lA3i5xXopfy3oRGL5DTM1J
WIs9G4fCk+2ZlxAwwOJIafhrCY09qeDpnCLP4xtDYS5Er3EIyyHIPXm+JwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAxBg55fyKigyShEBY/mCaarcUYVMB8GA1UdIwQY
MBaAFEAznTBEmdBprs2L0Oj7oC5SL1dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgt
MDMxZTU4OTA1OTIzLzEvREVHRG5sX0lxS0RKS0VRRmotWUpwcXR4UmhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgtMDMxZTU4OTA1OTIz
LzEvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLv64AwQC
uW10MA0EAgACMAcDBQAqAJQAMA0GCSqGSIb3DQEBCwUAA4IBAQAuBfJmVuWfAdAD
yiXKzxSKbGzMKCNonQHH9ZTrodFshx7sxHqdRI1wkAWPmy79FsmOLpLkOVGc9kRF
+UzliGitWrH8Agbl7PsivIl0iDPuYbe5upNG3gLwNLPIXUHiRfKbfJwNuQDhql44
jwzi6bujCEwpTvrUCIxJyBEdvwNkNI16RM0nvoKqbxb2aZ3f+4JLqh+IeVh6x2HA
b9U01Zk08BfKj9i2TWS4TZgvCJ6abJ4t5rGV2Pk4ZkR1y3695kxoqTCbRewHu6eA
yb3PcG1bSfBVhepDlodoIMZ0gTlFEdkplAou+OoSp/wVyhJUDLWwolGE4nSf6zlx
MUuuRzZs
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:07 2025 by rpki-client