Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/yxgAMb82WpqjWmY94LiroNi66J8.roa
File: yxgAMb82WpqjWmY94LiroNi66J8.roa (raw, json)
Hash identifier: xSMrHKDV4RuHUZqNGA371ClZ8QjnIZ05SUgtZ5rln7A=
Subject key identifier: CB:18:00:31:BF:36:5A:9A:A3:5A:66:3D:E0:B8:AB:A0:D8:BA:E8:9F
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 0193BB0192CA1BF7CA7545473EF84862834D
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/yxgAMb82WpqjWmY94LiroNi66J8.roa
Signing time: Thu 12 Dec 2024 13:14:22 +0000
ROA not before: Thu 12 Dec 2024 13:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 185.10.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:01:92:ca:1b:f7:ca:75:45:47:3e:f8:48:62:83:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Dec 12 13:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb180031bf365a9aa35a663de0b8aba0d8bae89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2b:f4:07:bf:30:74:db:5a:f5:a2:bc:44:37:
7c:7c:e1:74:b0:0b:3b:dc:8c:e4:65:ab:4d:7b:25:
d7:a6:10:f9:4d:0c:4d:d2:b8:bd:9c:9e:1f:aa:f4:
15:07:57:3f:b8:04:df:41:a2:17:3a:80:22:30:95:
78:4e:61:7e:98:56:34:ab:41:f7:2c:f5:f5:95:b3:
e3:26:5e:ae:cc:32:a8:84:0f:13:c9:fc:44:8e:3c:
ba:af:f9:bb:a6:eb:9d:6c:4d:49:66:0f:41:7f:cb:
47:68:72:9e:b4:9b:0d:88:f9:3b:87:59:80:cf:46:
93:2a:8a:1f:9a:05:dd:2a:02:a7:d7:07:5c:f1:f8:
08:2b:30:92:ec:a9:e1:2d:25:ba:af:3b:94:56:e2:
76:20:9a:20:25:aa:50:1c:a4:20:2d:b5:13:bc:ad:
7c:b8:c0:7e:07:dc:28:24:4b:0b:47:99:97:f7:74:
fb:6d:7b:4e:5c:51:4a:36:a9:6f:a4:5f:55:60:f5:
f4:cf:4d:c0:73:37:53:ee:60:4a:1d:82:57:99:61:
eb:e8:5d:4a:3c:36:3e:29:1b:2a:3e:99:99:3e:c3:
9e:6f:76:8d:eb:12:48:d7:14:1e:0f:60:b0:a7:38:
5b:a0:93:9d:21:54:54:25:fb:32:47:39:5a:30:9d:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:18:00:31:BF:36:5A:9A:A3:5A:66:3D:E0:B8:AB:A0:D8:BA:E8:9F
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/yxgAMb82WpqjWmY94LiroNi66J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:6d:fd:eb:51:a1:61:af:72:c4:6e:3c:83:eb:5e:48:83:78:
65:ca:de:0d:72:a9:e2:94:f4:30:9f:08:fe:34:3f:c3:dd:58:
47:83:e9:e1:5f:a2:23:ba:af:bc:0c:f6:48:fa:94:f9:95:3f:
97:00:05:2d:38:dc:14:6f:d4:8e:75:31:bc:d7:c8:55:09:5b:
87:2a:15:f2:6f:92:55:c4:63:79:19:e6:5a:14:81:5d:31:92:
de:ef:12:09:90:01:2e:40:63:1c:8c:a6:0c:bd:a7:5a:1d:70:
3e:80:3f:86:47:1f:e3:4b:f8:ca:c3:63:da:c7:b8:a0:2d:a9:
e1:4a:50:7d:10:df:27:a1:21:23:df:90:06:0a:d4:9a:be:47:
d2:29:96:bb:93:ce:9a:81:cc:78:e8:2b:f8:12:50:d1:b2:58:
23:5e:f5:f6:fd:2e:21:52:90:df:a6:75:a7:fe:65:f8:51:3b:
a9:0a:16:45:0c:6a:ff:0f:74:19:60:5f:5b:8c:c5:65:59:00:
53:29:c0:5b:cf:b5:22:55:1e:b9:ea:70:21:11:fa:87:1a:97:
12:38:21:9e:6a:b1:4d:84:86:53:27:4a:bf:26:65:f5:4f:a4:
c3:30:4a:19:cf:18:64:0d:e2:9c:65:b3:a4:e2:6e:9a:78:90:
67:b8:9a:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO7AZLKG/fKdUVHPvhIYoNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjQxMjEyMTMxNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjE4MDAzMWJmMzY1YTlhYTM1YTY2M2RlMGI4YWJhMGQ4YmFlODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sv0B78wdNta9aK8RDd8fOF0sAs7
3IzkZatNeyXXphD5TQxN0ri9nJ4fqvQVB1c/uATfQaIXOoAiMJV4TmF+mFY0q0H3
LPX1lbPjJl6uzDKohA8TyfxEjjy6r/m7puudbE1JZg9Bf8tHaHKetJsNiPk7h1mA
z0aTKoofmgXdKgKn1wdc8fgIKzCS7KnhLSW6rzuUVuJ2IJogJapQHKQgLbUTvK18
uMB+B9woJEsLR5mX93T7bXtOXFFKNqlvpF9VYPX0z03AczdT7mBKHYJXmWHr6F1K
PDY+KRsqPpmZPsOeb3aN6xJI1xQeD2CwpzhboJOdIVRUJfsyRzlaMJ32lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsYADG/Nlqao1pmPeC4q6DYuuifMB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEveXhnQU1iODJXcHFqV21ZOTRMaXJvTmk2Nko4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQp4MA0G
CSqGSIb3DQEBCwUAA4IBAQAvbf3rUaFhr3LEbjyD615Ig3hlyt4NcqnilPQwnwj+
ND/D3VhHg+nhX6Ijuq+8DPZI+pT5lT+XAAUtONwUb9SOdTG818hVCVuHKhXyb5JV
xGN5GeZaFIFdMZLe7xIJkAEuQGMcjKYMvadaHXA+gD+GRx/jS/jKw2Pax7igLanh
SlB9EN8noSEj35AGCtSavkfSKZa7k86agcx46Cv4ElDRslgjXvX2/S4hUpDfpnWn
/mX4UTupChZFDGr/D3QZYF9bjMVlWQBTKcBbz7UiVR656nAhEfqHGpcSOCGearFN
hIZTJ0q/JmX1T6TDMEoZzxhkDeKcZbOk4m6aeJBnuJrU
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:23:16 2025 by rpki-client