Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/AdBJgRJ4jssHPV7nsAqdNww1Sh8.roa
File: AdBJgRJ4jssHPV7nsAqdNww1Sh8.roa (raw, json)
Hash identifier: pMU0onRwaIxtMKvp5F6AdYME/vJo84IaTZ0vashYGIQ=
Subject key identifier: 01:D0:49:81:12:78:8E:CB:07:3D:5E:E7:B0:0A:9D:37:0C:35:4A:1F
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 019499BC5E63E7E9298298F2DA7B3A92919D
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/AdBJgRJ4jssHPV7nsAqdNww1Sh8.roa
Signing time: Fri 24 Jan 2025 19:14:06 +0000
ROA not before: Fri 24 Jan 2025 19:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 185.84.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 21:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:bc:5e:63:e7:e9:29:82:98:f2:da:7b:3a:92:91:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jan 24 19:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d0498112788ecb073d5ee7b00a9d370c354a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:d9:2a:28:db:b7:84:1d:09:94:9e:51:5d:
3e:07:ee:a4:16:b9:b7:91:08:85:1d:5d:52:cf:55:
ae:8c:b0:2d:3e:23:14:fe:98:f0:96:f0:d9:40:ff:
98:b1:90:18:40:2b:80:94:47:6f:11:c8:44:50:80:
25:b9:a5:f2:5a:02:5a:ce:25:03:51:3d:fd:46:a5:
ee:a0:21:74:c4:fa:bb:81:a2:8e:9f:c0:bc:f2:c2:
26:0e:76:29:53:54:f6:07:2a:4e:56:f5:e6:f9:fc:
57:81:dc:32:b6:06:11:ae:d3:5a:7f:02:28:e5:9b:
c4:bc:13:c6:b9:15:aa:d5:c8:47:ad:d1:50:04:bc:
0c:50:ce:d1:a7:ad:37:05:d7:ed:fe:60:62:7a:a4:
d1:dc:5d:88:b9:7d:f1:e3:c9:84:94:ff:8c:23:71:
0e:5d:54:94:1c:6c:58:a9:77:82:0f:36:0b:a3:34:
3c:5d:b2:d9:52:2c:a1:3c:99:e6:c0:98:34:d6:d8:
e8:b6:91:20:25:a9:9d:ef:ea:83:1e:a0:65:97:9b:
95:54:64:11:5b:27:2a:5f:7b:41:81:b1:17:b6:5f:
25:51:93:22:2c:f8:9b:7c:85:2c:e5:ed:6a:c1:94:
aa:0a:12:5e:fd:57:89:22:96:28:ad:64:fe:83:80:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:49:81:12:78:8E:CB:07:3D:5E:E7:B0:0A:9D:37:0C:35:4A:1F
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/AdBJgRJ4jssHPV7nsAqdNww1Sh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:38:58:9a:5e:af:df:8a:4a:e1:75:9c:b8:fa:5e:40:df:da:
4d:d2:ed:a4:55:c8:a4:be:81:c5:54:6c:1b:54:2e:ac:4b:60:
66:23:d9:41:16:ed:86:50:8f:3c:4f:cb:9c:81:fd:59:31:fb:
91:a4:4c:d6:c0:b6:ec:52:e8:ef:d8:06:27:3a:6c:c7:83:3e:
82:53:06:83:76:04:99:19:6b:f0:bf:2a:81:10:33:e0:1c:7e:
6b:26:94:00:3d:b8:34:6c:07:4a:b7:6b:16:53:30:db:6f:b0:
18:06:0b:d5:53:27:92:d3:2d:26:2f:19:5d:b2:88:1c:fc:36:
8f:3d:b9:ba:86:84:1e:5f:41:d6:9d:fd:a6:27:69:6e:ea:84:
23:75:a1:61:b6:5e:4c:c1:f9:42:2f:eb:68:27:65:4d:21:e1:
34:d8:b9:2f:89:00:39:4f:79:46:ce:02:52:fd:90:d2:da:37:
fc:4d:32:88:6c:e3:a1:ac:6c:6f:11:3f:99:1e:42:55:d5:d6:
c4:61:a9:01:ea:db:aa:6f:26:48:18:aa:ec:0c:24:f0:ac:55:
f6:66:7f:f3:67:4f:16:e5:87:bb:85:eb:e0:4d:40:ea:69:b3:
84:3d:35:49:23:20:ff:87:c6:f5:dc:70:d2:54:07:4b:03:0f:
51:3d:22:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSZvF5j5+kpgpjy2ns6kpGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzJkNjQ2MzYyMWIxM2Y3OGU1MzBkMTQ0ZmVhYzAyM2Ux
ZTQ1ODIwHhcNMjUwMTI0MTkxNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWQwNDk4MTEyNzg4ZWNiMDczZDVlZTdiMDBhOWQzNzBjMzU0YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b/ZKijbt4QdCZSeUV0+B+6kFrm3
kQiFHV1Sz1WujLAtPiMU/pjwlvDZQP+YsZAYQCuAlEdvEchEUIAluaXyWgJaziUD
UT39RqXuoCF0xPq7gaKOn8C88sImDnYpU1T2BypOVvXm+fxXgdwytgYRrtNafwIo
5ZvEvBPGuRWq1chHrdFQBLwMUM7Rp603Bdft/mBieqTR3F2IuX3x48mElP+MI3EO
XVSUHGxYqXeCDzYLozQ8XbLZUiyhPJnmwJg01tjotpEgJamd7+qDHqBll5uVVGQR
WycqX3tBgbEXtl8lUZMiLPibfIUs5e1qwZSqChJe/VeJIpYorWT+g4BM6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHQSYESeI7LBz1e57AKnTcMNUofMB8GA1UdIwQY
MBaAFP8y1kY2IbE/eOUw0UT+rAI+HkWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgt
MmIwMGVhMzI5MzdiLzEvQWRCSmdSSjRqc3NIUFY3bnNBcWROd3cxU2g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgtMmIwMGVhMzI5Mzdi
LzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVSeMA0G
CSqGSIb3DQEBCwUAA4IBAQAMOFiaXq/fikrhdZy4+l5A39pN0u2kVcikvoHFVGwb
VC6sS2BmI9lBFu2GUI88T8ucgf1ZMfuRpEzWwLbsUujv2AYnOmzHgz6CUwaDdgSZ
GWvwvyqBEDPgHH5rJpQAPbg0bAdKt2sWUzDbb7AYBgvVUyeS0y0mLxldsogc/DaP
Pbm6hoQeX0HWnf2mJ2lu6oQjdaFhtl5MwflCL+toJ2VNIeE02LkviQA5T3lGzgJS
/ZDS2jf8TTKIbOOhrGxvET+ZHkJV1dbEYakB6tuqbyZIGKrsDCTwrFX2Zn/zZ08W
5Ye7hevgTUDqabOEPTVJIyD/h8b13HDSVAdLAw9RPSKQ
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:07 2025 by rpki-client