Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/d7NznjMnKGqy2-qgFzIyYeLqQj4.roa
File: d7NznjMnKGqy2-qgFzIyYeLqQj4.roa (raw, json)
Hash identifier: toneQnBMQmcUrbFytXtwN3IDtwYUUvUNZF/irj5rR2c=
Subject key identifier: 77:B3:73:9E:33:27:28:6A:B2:DB:EA:A0:17:32:32:61:E2:EA:42:3E
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 018CC5013ED5E453230A9DE603ABFEC0D5BF
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/d7NznjMnKGqy2-qgFzIyYeLqQj4.roa
Signing time: Mon 01 Jan 2024 12:30:42 +0000
ROA not before: Mon 01 Jan 2024 12:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205940
IP address blocks: 185.201.140.0/23 maxlen: 23
185.201.142.0/24 maxlen: 24
2a0a:c540::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3e:d5:e4:53:23:0a:9d:e6:03:ab:fe:c0:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Jan 1 12:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b3739e3327286ab2dbeaa017323261e2ea423e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c4:3d:a9:0b:28:dd:eb:1e:26:be:50:26:42:
77:d0:ca:6d:7e:47:2c:b2:01:c7:ff:1d:60:5f:76:
7c:3e:f2:2e:1c:7e:57:0e:03:b3:3f:b1:79:77:9e:
04:1b:7d:b9:7b:ca:e1:5d:f0:db:96:e9:49:c2:8b:
2f:4a:00:57:ef:fa:7f:65:14:1a:84:ec:90:65:6e:
86:65:68:7a:35:cb:51:ad:ba:7f:8e:08:bd:ee:39:
d8:63:55:14:f0:b1:3e:77:00:ab:27:be:bc:ac:e7:
d5:c2:69:0d:37:15:0b:d9:c3:fd:7f:2b:9a:f3:f4:
92:e5:e5:62:57:07:02:c9:4e:6a:49:a7:86:2e:f3:
ce:cc:70:0a:3d:e2:62:d9:47:ce:49:a3:1b:33:b1:
42:50:f5:36:a9:7c:20:b4:78:6e:9c:65:ae:48:02:
6b:83:0f:d2:0a:de:34:d7:09:af:9c:c3:4f:db:d9:
af:03:5d:0b:13:d9:a4:bb:fb:09:34:be:c7:f7:1f:
79:3c:75:b7:70:69:c6:e8:c8:01:69:4d:dc:fb:ee:
55:40:8a:24:ca:ad:3e:a1:d1:cc:f0:6b:f3:f8:4a:
bf:16:9c:27:a7:68:40:59:7e:04:7d:8e:4c:f7:64:
b8:ca:50:ec:62:2a:e3:49:ce:7a:63:36:26:0c:a7:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:73:9E:33:27:28:6A:B2:DB:EA:A0:17:32:32:61:E2:EA:42:3E
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/d7NznjMnKGqy2-qgFzIyYeLqQj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.140.0-185.201.142.255
IPv6:
2a0a:c540::/29
Signature Algorithm: sha256WithRSAEncryption
a5:b6:cb:15:ea:ef:60:29:2f:50:96:31:5f:8b:1a:73:16:73:
8c:3f:ea:e7:bd:66:09:1c:70:e3:16:b2:b2:1d:b5:fd:13:90:
cd:00:59:d0:63:76:0d:60:7e:8f:1d:3a:c0:c6:31:12:a3:3a:
16:4f:7b:04:13:ac:4e:83:1c:8e:bc:26:bf:21:d1:38:df:80:
59:41:76:13:f7:69:33:8b:04:51:b0:10:59:8e:bc:31:8b:12:
21:f8:61:27:a0:ce:f2:73:80:78:7c:6a:74:5c:c7:33:57:bb:
78:00:cd:5b:be:e8:71:25:43:4d:92:22:dc:d3:b3:f0:d5:11:
98:db:68:10:64:e4:aa:46:35:6a:ae:99:e4:69:60:94:53:5f:
e3:e6:97:95:c0:9d:09:9c:74:21:1e:0a:a2:cb:84:d5:0e:0e:
41:60:d7:67:6c:65:1a:54:96:09:04:40:8f:80:09:89:b6:4f:
91:61:17:89:6d:52:0e:29:a5:91:e4:84:2a:24:6f:d6:d3:de:
52:3d:33:70:e1:a7:12:76:f3:65:51:02:8e:6d:39:ab:81:8e:
cb:2c:fd:41:b5:21:c5:b9:ca:e5:9d:7e:3f:2e:cc:9e:b4:9e:
50:c7:30:ec:74:6b:58:52:d6:c1:01:e6:c4:8b:db:3e:ce:de:
74:c1:d0:a2
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzFAT7V5FMjCp3mA6v+wNW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzE5NGY0YjUyYjlmZjQzM2YyYmYwZDE2YjU4YzExYzdj
ZjExMzEwHhcNMjQwMTAxMTIzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2IzNzM5ZTMzMjcyODZhYjJkYmVhYTAxNzMyMzI2MWUyZWE0MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsQ9qQso3eseJr5QJkJ30Mptfkcs
sgHH/x1gX3Z8PvIuHH5XDgOzP7F5d54EG325e8rhXfDblulJwosvSgBX7/p/ZRQa
hOyQZW6GZWh6NctRrbp/jgi97jnYY1UU8LE+dwCrJ768rOfVwmkNNxUL2cP9fyua
8/SS5eViVwcCyU5qSaeGLvPOzHAKPeJi2UfOSaMbM7FCUPU2qXwgtHhunGWuSAJr
gw/SCt401wmvnMNP29mvA10LE9mku/sJNL7H9x95PHW3cGnG6MgBaU3c++5VQIok
yq0+odHM8Gvz+Eq/Fpwnp2hAWX4EfY5M92S4ylDsYirjSc56YzYmDKf22wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHezc54zJyhqstvqoBcyMmHi6kI+MB8GA1UdIwQY
MBaAFClxlPS1K5/0M/K/DRa1jBHHzxExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUt
NWE5ODg5MzFlYTMzLzEvZDdOem5qTW5LR3F5Mi1xZ0Z6SXlZZUxxUWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMz
LzEvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5yYwD
BAC5yY4wDQQCAAIwBwMFAyoKxUAwDQYJKoZIhvcNAQELBQADggEBAKW2yxXq72Ap
L1CWMV+LGnMWc4w/6ue9ZgkccOMWsrIdtf0TkM0AWdBjdg1gfo8dOsDGMRKjOhZP
ewQTrE6DHI68Jr8h0TjfgFlBdhP3aTOLBFGwEFmOvDGLEiH4YSegzvJzgHh8anRc
xzNXu3gAzVu+6HElQ02SItzTs/DVEZjbaBBk5KpGNWqumeRpYJRTX+Pml5XAnQmc
dCEeCqLLhNUODkFg12dsZRpUlgkEQI+ACYm2T5FhF4ltUg4ppZHkhCokb9bT3lI9
M3DhpxJ282VRAo5tOauBjsss/UG1IcW5yuWdfj8uzJ60nlDHMOx0a1hS1sEB5sSL
2z7O3nTB0KI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:28 2025 by rpki-client