Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/bMVXCQuZfL12fJu5R-KVQ1QCQZ4.roa
File: bMVXCQuZfL12fJu5R-KVQ1QCQZ4.roa (raw, json)
Hash identifier: 6i0rF4hIMdKIxdUfgHB8v0xIGn3sbULphzu0A3nyG+k=
Subject key identifier: 6C:C5:57:09:0B:99:7C:BD:76:7C:9B:B9:47:E2:95:43:54:02:41:9E
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 0191460742FEF08303919BFA9EB41FD253E3
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/bMVXCQuZfL12fJu5R-KVQ1QCQZ4.roa
Signing time: Mon 12 Aug 2024 09:59:26 +0000
ROA not before: Mon 12 Aug 2024 09:59:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.12.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:07:42:fe:f0:83:03:91:9b:fa:9e:b4:1f:d2:53:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Aug 12 09:59:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cc557090b997cbd767c9bb947e295435402419e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:1e:75:84:d3:08:7c:92:ec:c0:4e:3e:78:
bd:07:f3:1f:18:f9:07:99:88:d5:d6:80:1d:be:f2:
f0:a2:c8:37:af:63:9d:2d:89:77:47:1e:84:4c:db:
c9:86:5e:76:a1:14:a3:c6:fc:42:76:ae:ff:9e:c9:
d0:e1:0a:d8:db:7b:9e:cb:41:b1:d5:69:fe:c8:e0:
2c:87:d2:db:98:f7:7f:a2:75:f7:1c:54:7f:8a:42:
7e:65:2f:dc:29:e7:f1:71:20:f6:94:6f:20:d8:ad:
2a:47:a1:e2:01:d6:04:ae:71:f7:8e:31:ff:81:58:
d2:d4:9d:20:8b:1a:1b:47:70:a3:30:1c:b9:94:7f:
1f:92:13:44:02:e4:3d:86:e0:2a:55:92:ad:87:7c:
7e:25:9c:38:3f:1d:d0:81:e7:2c:ca:ea:70:1c:9d:
fb:c0:67:4d:f7:cc:e5:04:44:58:8b:e1:4a:41:8b:
f7:de:84:53:e0:00:88:e1:f9:3a:7e:0a:2f:aa:90:
ef:df:86:13:fa:11:46:9c:ff:0f:6a:b5:86:ae:f6:
a3:76:86:b6:8d:26:1c:13:97:7d:72:b5:d4:a8:be:
d7:04:26:79:15:e7:8b:57:f1:44:55:fd:6d:8d:b8:
d3:44:92:97:de:7e:30:55:3a:6d:d1:53:83:eb:38:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C5:57:09:0B:99:7C:BD:76:7C:9B:B9:47:E2:95:43:54:02:41:9E
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/bMVXCQuZfL12fJu5R-KVQ1QCQZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e5:4e:fc:f4:4e:65:a7:c9:aa:de:5c:31:57:5c:c2:97:d5:
50:22:e0:11:92:2b:e8:11:22:18:f5:1c:8a:92:5b:36:55:b3:
84:ea:43:d6:bb:a5:74:ef:4f:b0:d7:11:08:6f:b7:0b:5e:66:
43:c1:77:43:ce:8d:a5:e8:7f:49:b5:b0:64:42:f3:05:6f:23:
cd:7d:3a:c4:18:bf:8a:d6:41:e5:68:52:56:bf:47:6d:ab:69:
03:f3:86:7e:0d:f2:8c:61:4b:71:b2:96:df:32:45:d1:c2:68:
55:6b:22:b0:e3:61:4c:fc:e2:e4:3c:c5:09:20:db:56:27:36:
c4:b2:5b:2e:ca:51:f1:5f:db:5f:ce:77:94:6f:3e:94:91:84:
f8:82:b1:ac:fc:d3:8b:92:8d:8c:81:aa:7d:7f:03:da:f9:75:
8c:78:df:8f:3b:51:5e:5a:41:39:01:61:80:a7:10:fb:35:fa:
e9:56:66:e9:af:e4:24:e8:8b:37:55:d5:20:4f:42:d8:b3:b3:
1e:d8:59:dd:58:51:cd:28:f5:12:11:e8:c2:73:a6:75:5d:94:
81:39:da:7a:2c:47:15:ab:c0:7e:5b:f9:11:e3:96:8f:b1:82:
c8:b6:c2:de:1c:70:ad:ee:c2:12:c5:47:bd:9c:4e:be:b4:df:
6b:6b:89:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFGB0L+8IMDkZv6nrQf0lPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMGEyODdiZWE5MjU4OGZjNWRhZTRmOTNmYjI1NjI4ZjMy
ZDE5NmQwHhcNMjQwODEyMDk1OTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2M1NTcwOTBiOTk3Y2JkNzY3YzliYjk0N2UyOTU0MzU0MDI0MTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMsedYTTCHyS7MBOPni9B/MfGPkH
mYjV1oAdvvLwosg3r2OdLYl3Rx6ETNvJhl52oRSjxvxCdq7/nsnQ4QrY23uey0Gx
1Wn+yOAsh9LbmPd/onX3HFR/ikJ+ZS/cKefxcSD2lG8g2K0qR6HiAdYErnH3jjH/
gVjS1J0gixobR3CjMBy5lH8fkhNEAuQ9huAqVZKth3x+JZw4Px3QgecsyupwHJ37
wGdN98zlBERYi+FKQYv33oRT4ACI4fk6fgovqpDv34YT+hFGnP8ParWGrvajdoa2
jSYcE5d9crXUqL7XBCZ5FeeLV/FEVf1tjbjTRJKX3n4wVTpt0VOD6ziqTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzFVwkLmXy9dnybuUfilUNUAkGeMB8GA1UdIwQY
MBaAFD8KKHvqkliPxdrk+T+yVijzLRltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMt
MjEzMzVkMTA2M2FmLzEvYk1WWENRdVpmTDEyZkp1NVItS1ZRMVFDUVo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMtMjEzMzVkMTA2M2Fm
LzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQyNMA0G
CSqGSIb3DQEBCwUAA4IBAQCt5U789E5lp8mq3lwxV1zCl9VQIuARkivoESIY9RyK
kls2VbOE6kPWu6V070+w1xEIb7cLXmZDwXdDzo2l6H9JtbBkQvMFbyPNfTrEGL+K
1kHlaFJWv0dtq2kD84Z+DfKMYUtxspbfMkXRwmhVayKw42FM/OLkPMUJINtWJzbE
slsuylHxX9tfzneUbz6UkYT4grGs/NOLko2Mgap9fwPa+XWMeN+PO1FeWkE5AWGA
pxD7NfrpVmbpr+Qk6Is3VdUgT0LYs7Me2FndWFHNKPUSEejCc6Z1XZSBOdp6LEcV
q8B+W/kR45aPsYLItsLeHHCt7sISxUe9nE6+tN9ra4mj
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:20 2025 by rpki-client