Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/Du62uWwbUvBeQuIK6qQQnYChNds.roa
File: Du62uWwbUvBeQuIK6qQQnYChNds.roa (raw, json)
Hash identifier: BRvHxpfS0z60cYDRYYkrXCwvr5ND/L2Okvl82F3cdy0=
Subject key identifier: 0E:EE:B6:B9:6C:1B:52:F0:5E:42:E2:0A:EA:A4:10:9D:80:A1:35:DB
Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial: 0191EFC19C6E3A4E67CA0603E7B48C08330E
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/Du62uWwbUvBeQuIK6qQQnYChNds.roa
Signing time: Sat 14 Sep 2024 08:58:48 +0000
ROA not before: Sat 14 Sep 2024 08:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 185.91.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:c1:9c:6e:3a:4e:67:ca:06:03:e7:b4:8c:08:33:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Validity
Not Before: Sep 14 08:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eeeb6b96c1b52f05e42e20aeaa4109d80a135db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:a3:7b:be:53:32:cf:f2:bf:92:90:58:e1:
f4:d2:84:1a:13:53:23:5b:d2:c1:5f:6d:39:fe:34:
82:a2:50:85:8c:bb:8c:f0:cc:09:54:92:2d:f9:4d:
eb:75:21:be:17:43:9b:d2:23:07:e8:5a:9a:a5:9d:
ac:59:91:7f:a7:af:54:3c:0e:27:a0:e2:47:06:63:
b8:e5:3f:7c:bf:5a:79:a7:4e:2c:32:c3:c4:c6:4a:
78:1b:19:24:2a:cd:2e:b7:c5:5a:42:26:de:9a:ac:
a2:f2:9c:96:2e:2f:1f:5f:a9:7a:77:48:d2:c0:0d:
cc:ec:db:ea:e7:42:fc:9e:9b:9a:7f:3e:9a:94:94:
83:e7:5e:64:d3:f5:b6:32:f3:5e:a6:5c:dd:af:79:
66:52:aa:50:e5:b6:a9:b4:47:38:af:a6:6f:78:7e:
c5:cc:b4:d0:6a:ba:2d:55:90:bd:3a:b7:4f:58:86:
1e:db:48:42:9e:b4:16:73:6a:04:02:a8:17:16:29:
ec:f2:86:cb:65:28:ad:82:ea:90:85:5c:5e:ef:87:
6a:8c:b5:01:04:fb:2e:a5:58:d7:f5:c7:28:ab:d2:
dd:85:e2:64:93:7c:f4:70:a9:50:77:2f:d7:09:97:
e7:8e:1a:10:b5:e2:4f:9f:20:dc:02:11:39:30:4c:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:B6:B9:6C:1B:52:F0:5E:42:E2:0A:EA:A4:10:9D:80:A1:35:DB
X509v3 Authority Key Identifier:
keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/Du62uWwbUvBeQuIK6qQQnYChNds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:11:59:3f:91:71:37:b9:b7:93:be:90:6a:f6:39:1d:b3:58:
cf:9b:b3:a0:94:03:70:a7:7e:58:71:c1:f8:b0:9f:2c:a7:81:
9a:d5:3f:c5:f5:30:fc:2a:30:c8:c7:6f:2a:75:88:63:9f:9a:
96:2c:e4:5c:1d:cc:7e:27:74:38:26:46:2a:50:46:8a:31:e8:
46:5d:47:79:15:14:7f:db:aa:1d:fa:6c:e2:29:53:1d:e0:38:
88:67:f4:de:97:47:e8:db:6c:8c:69:36:74:3f:7e:39:4e:18:
6d:91:26:7d:7f:8c:3a:72:93:d0:03:1d:19:e4:43:86:15:48:
09:31:27:6a:d5:54:ec:cb:06:9c:68:0e:1e:a1:61:3c:47:82:
ff:8d:e9:50:89:ae:53:1b:bb:fb:6b:07:7c:b2:d9:bd:67:fa:
db:05:86:b0:2c:9d:05:59:ee:02:82:ac:2c:b2:87:6c:c5:d1:
ef:d4:3a:60:0f:6e:fb:4d:a4:c6:7e:42:80:fe:8b:47:12:6a:
c1:ba:43:5f:9a:0f:28:41:71:91:c6:16:bb:34:5e:81:54:9e:
6d:55:72:bb:bf:e0:a9:62:b0:7e:36:ff:08:c0:0d:30:be:da:
e2:2b:bf:e0:77:4e:03:bf:78:40:54:0f:9b:54:b6:c7:62:02:
bb:ef:8e:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHvwZxuOk5nygYD57SMCDMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYWYwYmY5M2ZjNDM4MWZmZjdlN2FhODZiNDA3NmMwMzMy
NDJmZmEwHhcNMjQwOTE0MDg1ODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWVlYjZiOTZjMWI1MmYwNWU0MmUyMGFlYWE0MTA5ZDgwYTEzNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQyje75TMs/yv5KQWOH00oQaE1Mj
W9LBX205/jSColCFjLuM8MwJVJIt+U3rdSG+F0Ob0iMH6FqapZ2sWZF/p69UPA4n
oOJHBmO45T98v1p5p04sMsPExkp4GxkkKs0ut8VaQibemqyi8pyWLi8fX6l6d0jS
wA3M7Nvq50L8npuafz6alJSD515k0/W2MvNeplzdr3lmUqpQ5baptEc4r6ZveH7F
zLTQarotVZC9OrdPWIYe20hCnrQWc2oEAqgXFins8obLZSitguqQhVxe74dqjLUB
BPsupVjX9ccoq9LdheJkk3z0cKlQdy/XCZfnjhoQteJPnyDcAhE5MExBJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7utrlsG1LwXkLiCuqkEJ2AoTXbMB8GA1UdIwQY
MBaAFJ+vC/k/xDgf/356qGtAdsAzJC/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgt
ZjUyMGE3ZDcxZWY1LzEvRHU2MnVXd2JVdkJlUXVJSzZxUVFuWUNoTmRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgtZjUyMGE3ZDcxZWY1
LzEvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVvNMA0G
CSqGSIb3DQEBCwUAA4IBAQA8EVk/kXE3ubeTvpBq9jkds1jPm7OglANwp35YccH4
sJ8sp4Ga1T/F9TD8KjDIx28qdYhjn5qWLORcHcx+J3Q4JkYqUEaKMehGXUd5FRR/
26od+mziKVMd4DiIZ/Tel0fo22yMaTZ0P345ThhtkSZ9f4w6cpPQAx0Z5EOGFUgJ
MSdq1VTsywacaA4eoWE8R4L/jelQia5TG7v7awd8stm9Z/rbBYawLJ0FWe4Cgqws
sodsxdHv1DpgD277TaTGfkKA/otHEmrBukNfmg8oQXGRxha7NF6BVJ5tVXK7v+Cp
YrB+Nv8IwA0wvtriK7/gd04Dv3hAVA+bVLbHYgK7745f
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:02:37 2025 by rpki-client