Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/XSCuSk6ho3kncLi9N5h0fkzReUw.roa
File: XSCuSk6ho3kncLi9N5h0fkzReUw.roa (raw, json)
Hash identifier: xW0CD2gtQzoCRECqQuo4LjE4y+op6VBGtEfGETtabEk=
Subject key identifier: 5D:20:AE:4A:4E:A1:A3:79:27:70:B8:BD:37:98:74:7E:4C:D1:79:4C
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 019245652E7FEE2ADE6081AEB362BE7B95F9
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/XSCuSk6ho3kncLi9N5h0fkzReUw.roa
Signing time: Tue 01 Oct 2024 00:05:11 +0000
ROA not before: Tue 01 Oct 2024 00:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 185.30.233.0/24 maxlen: 24
185.165.190.0/24 maxlen: 24
185.165.191.0/24 maxlen: 24
2a07:85c5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Oct 2024 14:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:45:65:2e:7f:ee:2a:de:60:81:ae:b3:62:be:7b:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Oct 1 00:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d20ae4a4ea1a3792770b8bd3798747e4cd1794c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:f5:31:a5:88:28:d4:3c:af:4e:16:8c:b6:
36:26:42:41:b4:5c:e6:db:ca:ce:38:76:df:0a:1f:
8c:ae:73:bf:b0:93:70:51:f8:77:91:bc:c0:4c:9e:
a9:8d:88:66:70:50:de:20:77:fd:1b:2f:af:65:ee:
53:29:5d:4d:4d:df:7d:67:f3:23:34:5f:bc:bd:2b:
f2:e5:11:0e:60:9f:21:5e:aa:a5:bb:f1:33:16:5e:
52:ce:67:f3:89:7a:06:f9:c5:9e:3b:f5:07:11:e9:
52:02:79:c4:63:b3:4b:5f:5a:87:63:d4:e6:4a:eb:
85:d8:06:5b:ea:a4:5a:fd:ec:12:48:28:a8:0b:36:
d9:c5:a2:35:ae:4a:d9:5f:2f:54:1c:70:5f:c2:a6:
c2:80:78:68:16:ff:d9:c5:13:5e:2c:64:87:07:b2:
a5:57:8b:45:66:6b:fb:9c:87:7c:c5:0f:fe:bd:1c:
66:cc:c5:c6:21:0d:fb:5b:c7:4d:60:9c:82:eb:a8:
95:05:09:61:c5:08:11:fa:88:da:34:95:43:90:54:
2f:45:c2:7f:f2:62:a9:a7:66:d6:7e:a0:6a:0e:f5:
d1:6a:04:28:f9:c7:60:e7:86:8f:14:65:7e:5a:8e:
5e:4a:13:46:6e:1d:c8:dd:47:da:30:e8:9f:03:d8:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:20:AE:4A:4E:A1:A3:79:27:70:B8:BD:37:98:74:7E:4C:D1:79:4C
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/XSCuSk6ho3kncLi9N5h0fkzReUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.233.0/24
185.165.190.0/23
IPv6:
2a07:85c5::/48
Signature Algorithm: sha256WithRSAEncryption
37:5e:17:fd:d7:70:17:bc:74:f6:82:8d:71:15:3c:e7:18:fa:
09:01:27:66:9f:08:0c:c7:4a:0d:f8:90:30:8f:d1:62:00:a3:
d0:67:ad:37:24:bb:11:c3:69:7d:78:26:61:2c:ee:9d:0e:ed:
25:19:87:b8:91:c8:a9:e8:ee:6d:97:8e:73:06:d0:89:32:03:
28:5a:0e:63:b2:69:42:6a:7d:a2:a3:9e:54:13:86:a6:b4:b3:
5c:95:4f:40:d7:f4:90:dd:15:d9:99:f5:0c:11:00:fb:91:6a:
62:0e:4a:b6:11:76:ec:17:59:89:63:e7:95:69:2e:f8:1b:f3:
0e:f3:36:89:98:68:83:bd:67:72:10:80:9b:51:7c:6b:9b:79:
d5:de:f2:8c:24:1a:d4:d6:c3:4c:0b:f6:45:9b:ec:d2:1e:10:
c0:52:68:ea:eb:9b:c1:cc:d7:ec:f7:8a:47:37:b1:66:7d:0c:
23:f9:5f:10:2b:89:cf:51:00:fb:b0:6d:68:f9:c1:9e:fd:0f:
1c:c5:16:f5:cb:60:74:6b:80:23:46:f1:b0:21:bb:75:e9:9f:
ae:60:17:11:11:d8:37:9d:3c:b6:c9:9f:9f:41:8b:53:c8:54:
0e:ad:59:26:5a:2b:4b:f0:a1:fe:02:a3:99:85:ee:e3:c7:1b:
76:a3:c1:33
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZJFZS5/7ireYIGus2K+e5X5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTg0MmU2NzE0NzI1MjUwNWY0MTU1MWYwZjczNWI3Zjcy
ZTNlOTcwHhcNMjQxMDAxMDAwNTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDIwYWU0YTRlYTFhMzc5Mjc3MGI4YmQzNzk4NzQ3ZTRjZDE3OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AT1MaWIKNQ8r04WjLY2JkJBtFzm
28rOOHbfCh+MrnO/sJNwUfh3kbzATJ6pjYhmcFDeIHf9Gy+vZe5TKV1NTd99Z/Mj
NF+8vSvy5REOYJ8hXqqlu/EzFl5SzmfziXoG+cWeO/UHEelSAnnEY7NLX1qHY9Tm
SuuF2AZb6qRa/ewSSCioCzbZxaI1rkrZXy9UHHBfwqbCgHhoFv/ZxRNeLGSHB7Kl
V4tFZmv7nId8xQ/+vRxmzMXGIQ37W8dNYJyC66iVBQlhxQgR+ojaNJVDkFQvRcJ/
8mKpp2bWfqBqDvXRagQo+cdg54aPFGV+Wo5eShNGbh3I3UfaMOifA9iRwQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFF0grkpOoaN5J3C4vTeYdH5M0XlMMB8GA1UdIwQY
MBaAFO+oQuZxRyUlBfQVUfD3Nbf3Lj6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYt
OGUwYzMxMjIzZGI4LzEvWFNDdVNrNmhvM2tuY0xpOU41aDBma3pSZVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYtOGUwYzMxMjIzZGI4
LzEvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuR7pAwQB
uaW+MA8EAgACMAkDBwAqB4XFAAAwDQYJKoZIhvcNAQELBQADggEBADdeF/3XcBe8
dPaCjXEVPOcY+gkBJ2afCAzHSg34kDCP0WIAo9BnrTckuxHDaX14JmEs7p0O7SUZ
h7iRyKno7m2XjnMG0IkyAyhaDmOyaUJqfaKjnlQThqa0s1yVT0DX9JDdFdmZ9QwR
APuRamIOSrYRduwXWYlj55VpLvgb8w7zNomYaIO9Z3IQgJtRfGubedXe8owkGtTW
w0wL9kWb7NIeEMBSaOrrm8HM1+z3ikc3sWZ9DCP5XxAric9RAPuwbWj5wZ79DxzF
FvXLYHRrgCNG8bAhu3Xpn65gFxER2DedPLbJn59Bi1PIVA6tWSZaK0vwof4Co5mF
7uPHG3ajwTM=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:36:41 2025 by rpki-client