Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/1NLQFNpQNWLxYpGk55RjUzCReRg.roa
File: 1NLQFNpQNWLxYpGk55RjUzCReRg.roa (raw, json)
Hash identifier: yPbc3D3sRWJbtd3XXnw1LEVQl3aGfzIPXaU7dQ+atmA=
Subject key identifier: D4:D2:D0:14:DA:50:35:62:F1:62:91:A4:E7:94:63:53:30:91:79:18
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 0193B136DAA33A25A899326166E10D96C026
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/1NLQFNpQNWLxYpGk55RjUzCReRg.roa
Signing time: Tue 10 Dec 2024 15:36:22 +0000
ROA not before: Tue 10 Dec 2024 15:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5607
IP address blocks: 185.110.178.0/23 maxlen: 23
2a01:f8c0::/32 maxlen: 32
2a01:f8c1::/32 maxlen: 32
2a01:f8c2::/32 maxlen: 32
2a01:f8c3::/32 maxlen: 32
2a01:f8c4::/32 maxlen: 32
2a01:f8c5::/32 maxlen: 32
2a01:f8c6::/32 maxlen: 32
2a01:f8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:36:da:a3:3a:25:a8:99:32:61:66:e1:0d:96:c0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Dec 10 15:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4d2d014da503562f16291a4e794635330917918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:ae:24:df:ff:6b:3a:a5:a0:f0:f7:af:7f:
56:d3:2d:c4:51:27:57:4f:f8:d8:4b:f2:aa:0b:65:
10:38:30:3b:66:e2:27:23:06:e5:97:e1:45:e6:e6:
d5:47:58:81:b1:dd:d9:96:23:46:06:5d:62:7a:0b:
14:03:c8:7c:b7:6e:24:7c:80:28:3e:22:ed:cb:02:
1b:83:04:c9:94:5e:04:cd:74:f7:69:40:0b:81:a3:
56:f0:df:bc:ef:22:59:ed:3e:fd:25:ee:80:a4:30:
d8:f2:36:8e:4b:a1:f4:9d:be:9d:14:38:b5:5b:70:
9b:df:bb:68:58:35:ec:36:7b:6e:75:23:ef:11:7a:
ca:f7:31:d9:05:12:23:ab:54:7c:5b:90:e6:20:9c:
d1:48:e6:c1:c5:f3:8f:e6:8f:d6:54:ef:fa:2d:56:
dd:0b:c8:59:8a:3b:0e:5b:15:fa:f3:8c:96:55:81:
e6:d2:85:a8:a3:26:9c:47:f0:3d:e7:db:da:b7:56:
63:c5:c4:1f:36:fd:b6:4f:04:54:37:5f:9d:28:20:
48:6a:cd:92:1e:56:01:14:1d:3a:ae:97:2a:64:bd:
33:18:61:db:99:1f:29:95:ec:4f:9c:32:03:14:02:
c1:b1:40:e2:8a:3f:8a:e5:75:d6:74:fd:2c:8e:52:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:D0:14:DA:50:35:62:F1:62:91:A4:E7:94:63:53:30:91:79:18
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/1NLQFNpQNWLxYpGk55RjUzCReRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.178.0/23
IPv6:
2a01:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:5e:07:4c:d6:33:53:fc:97:e0:eb:78:2b:43:cb:3f:d3:bc:
46:b1:5a:4b:57:be:a4:df:f1:0a:55:d1:02:1c:14:5a:9a:86:
4e:0e:f9:b1:41:16:62:60:20:25:56:64:c2:f1:28:cc:20:0e:
49:62:4f:76:44:ec:ec:12:43:97:d4:03:35:e4:7b:de:fe:d1:
7b:72:93:af:10:52:6c:ce:ba:71:0c:73:2f:d4:c7:a4:f6:65:
0e:08:b7:1b:9c:b8:1d:e1:55:ff:87:2a:97:f9:c2:e8:f9:69:
26:0c:6c:75:bc:76:f8:a6:f4:b2:d9:5c:c5:5c:33:7f:9f:45:
2b:c7:8f:1f:cf:65:d8:45:9f:a9:33:4a:a3:af:80:a0:ef:d3:
92:ef:dd:44:46:92:1c:4c:d5:25:2d:70:db:d8:8c:36:76:d5:
2e:d2:cc:ba:57:10:cd:13:8c:3a:3c:56:eb:b3:c8:4f:ab:81:
a3:fb:10:41:84:5e:d4:e0:0e:dd:f7:d5:dc:eb:94:55:1b:bc:
66:d0:36:e1:46:32:c4:51:e0:2a:32:32:8f:15:9e:02:42:cc:
56:3a:9f:c1:1e:04:47:02:38:83:44:08:b5:fe:e9:45:5b:0d:
c7:91:06:8e:27:55:b4:24:7f:85:bd:eb:ba:bd:b1:a3:aa:de:
33:a5:48:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZOxNtqjOiWomTJhZuENlsAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx
YTc3OTQwHhcNMjQxMjEwMTUzNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGQyZDAxNGRhNTAzNTYyZjE2MjkxYTRlNzk0NjM1MzMwOTE3OTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhiuJN//azqloPD3r39W0y3EUSdX
T/jYS/KqC2UQODA7ZuInIwbll+FF5ubVR1iBsd3ZliNGBl1iegsUA8h8t24kfIAo
PiLtywIbgwTJlF4EzXT3aUALgaNW8N+87yJZ7T79Je6ApDDY8jaOS6H0nb6dFDi1
W3Cb37toWDXsNntudSPvEXrK9zHZBRIjq1R8W5DmIJzRSObBxfOP5o/WVO/6LVbd
C8hZijsOWxX684yWVYHm0oWooyacR/A959vat1ZjxcQfNv22TwRUN1+dKCBIas2S
HlYBFB06rpcqZL0zGGHbmR8plexPnDIDFALBsUDiij+K5XXWdP0sjlJHRQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNTS0BTaUDVi8WKRpOeUY1MwkXkYMB8GA1UdIwQY
MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt
N2E4MGVkNjIxNzgxLzEvMU5MUUZOcFFOV0x4WXBHazU1UmpVekNSZVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx
LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuW6yMA0E
AgACMAcDBQMqAfjAMA0GCSqGSIb3DQEBCwUAA4IBAQBjXgdM1jNT/Jfg63grQ8s/
07xGsVpLV76k3/EKVdECHBRamoZODvmxQRZiYCAlVmTC8SjMIA5JYk92ROzsEkOX
1AM15Hve/tF7cpOvEFJszrpxDHMv1Mek9mUOCLcbnLgd4VX/hyqX+cLo+WkmDGx1
vHb4pvSy2VzFXDN/n0Urx48fz2XYRZ+pM0qjr4Cg79OS791ERpIcTNUlLXDb2Iw2
dtUu0sy6VxDNE4w6PFbrs8hPq4Gj+xBBhF7U4A7d99Xc65RVG7xm0DbhRjLEUeAq
MjKPFZ4CQsxWOp/BHgRHAjiDRAi1/ulFWw3HkQaOJ1W0JH+Fveu6vbGjqt4zpUit
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:47 2025 by rpki-client