Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/6wk56OWhW-BOCtJAUwxiWN2duag.roa
File: 6wk56OWhW-BOCtJAUwxiWN2duag.roa (raw, json)
Hash identifier: SK26i33aJn+F8lsYzPC6rMsChDy/9Gu2OoKi/gigKWQ=
Subject key identifier: EB:09:39:E8:E5:A1:5B:E0:4E:0A:D2:40:53:0C:62:58:DD:9D:B9:A8
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 0193DAA2356DCD9FEB2F99825A43CAAF6F2F
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/6wk56OWhW-BOCtJAUwxiWN2duag.roa
Signing time: Wed 18 Dec 2024 16:38:03 +0000
ROA not before: Wed 18 Dec 2024 16:38:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 378
IP address blocks: 185.187.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:a2:35:6d:cd:9f:eb:2f:99:82:5a:43:ca:af:6f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Dec 18 16:38:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb0939e8e5a15be04e0ad240530c6258dd9db9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:de:44:28:a7:88:35:0b:11:1b:cf:8c:50:
8b:7e:86:2f:b2:64:01:59:0e:03:ab:af:ce:d6:f9:
17:de:9b:1b:aa:61:6c:6d:db:59:32:f2:4b:4c:e0:
ec:50:b7:b4:dc:1e:c5:38:b4:a4:a7:5a:8e:73:9c:
fe:e8:bb:6e:59:38:8d:c9:c1:5f:9a:e6:d5:5e:35:
8a:2f:a8:ca:b3:7e:10:9a:3e:ad:91:d6:3a:1b:fd:
57:30:16:97:3a:77:85:0f:ba:56:fb:7d:84:21:87:
4e:fb:fb:66:4b:4b:b0:35:8e:7c:b7:ad:6b:de:53:
a9:d6:f1:64:11:49:f1:52:49:e3:3c:9c:dd:28:49:
d7:1a:0b:1b:c9:33:52:1c:40:f8:0c:f7:8c:b6:f4:
7f:67:f3:b7:0b:48:4f:ae:a8:8e:b1:9c:13:4c:12:
5b:38:ab:58:a4:95:ad:bc:b8:d6:21:cc:b2:10:26:
8a:83:1b:98:fb:66:95:28:4d:54:62:ba:44:d2:15:
0b:a7:90:ab:ff:99:d9:de:93:eb:44:0f:8e:51:5b:
15:eb:47:e5:99:97:a7:53:94:03:08:1b:0e:55:a3:
68:95:8b:3e:e9:07:96:5d:2c:67:3a:38:fc:72:3c:
94:1d:0c:a2:5f:11:4f:e1:1f:2c:1b:be:94:65:e4:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:39:E8:E5:A1:5B:E0:4E:0A:D2:40:53:0C:62:58:DD:9D:B9:A8
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/6wk56OWhW-BOCtJAUwxiWN2duag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.36.0/24
Signature Algorithm: sha256WithRSAEncryption
84:80:f0:cd:db:f7:69:ca:fd:f2:90:db:cd:16:b7:0a:c8:16:
31:f6:8c:23:b8:5c:f9:46:18:67:b4:a6:90:54:3c:ac:f8:53:
4e:68:ca:a1:81:5a:5a:49:0b:0a:0a:46:7a:1d:f5:6a:4a:8f:
aa:57:6b:08:cc:6e:d6:56:a6:d9:24:c9:60:e8:92:fb:86:1e:
7e:c8:bd:da:a6:68:94:d3:12:d7:d9:e0:fc:39:43:cc:5c:cc:
af:ba:ec:6f:0e:1d:99:50:ba:bf:37:c5:a6:a8:3a:73:78:57:
7d:ff:54:dd:55:ae:c4:df:6d:9f:63:0f:24:7d:08:0f:16:c6:
67:f7:7c:9c:eb:5f:70:92:97:3f:8e:7f:66:cd:b6:48:f0:ee:
7b:02:dd:49:4e:91:37:8b:a0:ca:cc:4c:d7:84:28:0a:bb:89:
cf:64:09:2a:7b:f0:4d:28:38:d7:a6:68:db:17:63:33:74:29:
94:2f:f7:d5:68:18:2f:7b:13:7d:79:e0:7f:e7:26:5f:0b:9d:
c0:6d:21:c2:34:0d:14:b6:7d:86:e3:99:a2:d4:19:9b:81:7b:
2c:4d:23:ae:01:db:3c:38:58:1b:9f:ef:fe:00:b4:66:c8:f3:
13:a7:c9:f0:5e:09:dd:38:9d:85:6a:40:76:5e:8b:b7:f5:d0:
00:20:7e:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPaojVtzZ/rL5mCWkPKr28vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTczZDFiM2UyMzFjNTdiMzUxOWU4ZDRlNTQ3ODY4NjA2
YzRmZDMwHhcNMjQxMjE4MTYzODAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjA5MzllOGU1YTE1YmUwNGUwYWQyNDA1MzBjNjI1OGRkOWRiOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVreRCiniDULERvPjFCLfoYvsmQB
WQ4Dq6/O1vkX3psbqmFsbdtZMvJLTODsULe03B7FOLSkp1qOc5z+6LtuWTiNycFf
mubVXjWKL6jKs34Qmj6tkdY6G/1XMBaXOneFD7pW+32EIYdO+/tmS0uwNY58t61r
3lOp1vFkEUnxUknjPJzdKEnXGgsbyTNSHED4DPeMtvR/Z/O3C0hPrqiOsZwTTBJb
OKtYpJWtvLjWIcyyECaKgxuY+2aVKE1UYrpE0hULp5Cr/5nZ3pPrRA+OUVsV60fl
mZenU5QDCBsOVaNolYs+6QeWXSxnOjj8cjyUHQyiXxFP4R8sG76UZeRzmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsJOejloVvgTgrSQFMMYljdnbmoMB8GA1UdIwQY
MBaAFBIXPRs+IxxXs1GejU5UeGhgbE/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEt
M2Y4MzcyZDk2OGQwLzEvNndrNTZPV2hXLUJPQ3RKQVV3eGlXTjJkdWFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEtM2Y4MzcyZDk2OGQw
LzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubskMA0G
CSqGSIb3DQEBCwUAA4IBAQCEgPDN2/dpyv3ykNvNFrcKyBYx9owjuFz5RhhntKaQ
VDys+FNOaMqhgVpaSQsKCkZ6HfVqSo+qV2sIzG7WVqbZJMlg6JL7hh5+yL3apmiU
0xLX2eD8OUPMXMyvuuxvDh2ZULq/N8WmqDpzeFd9/1TdVa7E322fYw8kfQgPFsZn
93yc619wkpc/jn9mzbZI8O57At1JTpE3i6DKzEzXhCgKu4nPZAkqe/BNKDjXpmjb
F2MzdCmUL/fVaBgvexN9eeB/5yZfC53AbSHCNA0Utn2G45mi1BmbgXssTSOuAds8
OFgbn+/+ALRmyPMTp8nwXgndOJ2FakB2Xou39dAAIH77
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:14:37 2025 by rpki-client