Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/O6mea_8ZZWc0siI3BIG6qg6xBQ0.roa
File: O6mea_8ZZWc0siI3BIG6qg6xBQ0.roa (raw, json)
Hash identifier: 42eJ00Lzni/h4EFKO7QEKdPy73J0gHi2PkE3suLV/Hs=
Subject key identifier: 3B:A9:9E:6B:FF:19:65:67:34:B2:22:37:04:81:BA:AA:0E:B1:05:0D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018FD9A9B06D93BA37F8CC0CA2F00867B2A8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/O6mea_8ZZWc0siI3BIG6qg6xBQ0.roa
Signing time: Sun 02 Jun 2024 15:55:27 +0000
ROA not before: Sun 02 Jun 2024 15:55:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 178.239.148.0/23 maxlen: 24
185.215.228.0/23 maxlen: 23
185.243.50.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 09:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:a9:b0:6d:93:ba:37:f8:cc:0c:a2:f0:08:67:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 2 15:55:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ba99e6bff19656734b222370481baaa0eb1050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:28:5a:e1:5d:ee:5a:c6:78:d7:5d:d0:e8:
51:2d:53:40:e2:d4:db:b6:df:a1:c6:bc:db:ca:dd:
cc:bf:0f:e6:bb:b4:05:ae:6f:39:0f:6f:07:90:4b:
79:f5:21:2e:0e:aa:a6:f7:07:00:a0:d8:b1:70:d2:
89:b7:e2:27:22:88:5c:9f:f0:9d:22:92:e8:3d:c9:
e3:e6:f8:c4:ee:6e:5d:a2:1c:b6:05:bf:bc:72:fe:
c8:d4:e3:d4:8a:03:f5:a5:91:f2:d3:80:90:5c:8b:
76:7a:1f:59:c3:62:07:a9:10:4b:c7:b8:2f:56:f8:
e4:89:81:ff:72:03:43:75:60:5d:d9:83:96:2d:ab:
b8:7a:98:dc:3a:66:d0:0e:71:27:ef:2a:2d:6a:9e:
36:70:7c:c8:b3:10:69:31:ac:fe:fd:2e:18:8d:8b:
6b:cd:0c:ac:bd:3b:2e:e8:ba:23:ef:b8:96:f4:d9:
ba:94:63:3a:25:6b:30:ac:fc:83:b3:52:bb:e5:e0:
ca:6b:41:26:8d:d8:8f:16:75:66:74:f4:aa:d6:09:
4c:34:97:cd:bc:70:b1:65:d6:9b:44:8e:7b:24:db:
e9:f8:6f:84:ab:84:5c:27:30:5d:d4:18:e6:24:34:
48:18:f6:84:99:53:7f:cf:ad:8e:dc:b6:a6:3e:23:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:9E:6B:FF:19:65:67:34:B2:22:37:04:81:BA:AA:0E:B1:05:0D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/O6mea_8ZZWc0siI3BIG6qg6xBQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.148.0/23
185.215.228.0/23
185.243.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:3d:c1:1b:83:70:84:9c:97:72:bc:7f:3d:7b:a1:69:bc:17:
e0:14:95:5d:86:97:7d:a8:04:97:8a:01:b8:1a:9e:4a:8d:3d:
42:fe:dc:54:6f:d8:be:2e:3c:59:9a:77:83:73:f0:a2:f9:ae:
c3:e9:94:23:fe:82:84:8f:12:51:62:23:2d:36:bd:65:e7:d4:
4a:84:49:62:c4:16:81:5d:05:71:dd:6d:0e:82:4d:2e:22:1b:
e8:15:c3:0b:bd:53:1e:a7:37:f9:32:ac:27:ff:0d:7c:40:27:
f2:4f:01:5a:6a:72:1a:f2:2d:0d:43:dc:97:6f:bf:2f:58:65:
a2:6c:13:2c:53:01:7f:ca:f7:27:14:4c:4f:02:ab:3d:05:aa:
c6:47:61:a4:61:ea:0c:d5:20:5d:b7:0b:96:a0:2d:53:b7:9f:
5a:42:61:81:a4:dd:bc:a5:56:65:d4:6e:0b:97:06:b9:cf:64:
f9:38:23:4e:3d:a9:99:ef:dd:69:9f:b7:84:14:84:35:dd:01:
46:5d:d6:55:a8:00:2d:b1:df:55:df:d4:64:59:73:84:cc:e2:
48:90:e1:33:31:00:3e:b5:51:b6:bb:7b:9c:fc:d5:1c:f3:85:
b4:17:8e:47:ce:33:6c:21:f1:85:13:6b:6a:bc:f2:14:4b:3d:
26:9d:8f:42
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY/ZqbBtk7o3+MwMovAIZ7KoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjQwNjAyMTU1NTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmE5OWU2YmZmMTk2NTY3MzRiMjIyMzcwNDgxYmFhYTBlYjEwNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn94oWuFd7lrGeNdd0OhRLVNA4tTb
tt+hxrzbyt3Mvw/mu7QFrm85D28HkEt59SEuDqqm9wcAoNixcNKJt+InIohcn/Cd
IpLoPcnj5vjE7m5dohy2Bb+8cv7I1OPUigP1pZHy04CQXIt2eh9Zw2IHqRBLx7gv
VvjkiYH/cgNDdWBd2YOWLau4epjcOmbQDnEn7yotap42cHzIsxBpMaz+/S4YjYtr
zQysvTsu6Loj77iW9Nm6lGM6JWswrPyDs1K75eDKa0EmjdiPFnVmdPSq1glMNJfN
vHCxZdabRI57JNvp+G+Eq4RcJzBd1BjmJDRIGPaEmVN/z62O3LamPiOP3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDupnmv/GWVnNLIiNwSBuqoOsQUNMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvTzZtZWFfOFpaV2Mwc2lJM0JJRzZxZzZ4QlEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBsu+UAwQB
udfkAwQBufMyMA0GCSqGSIb3DQEBCwUAA4IBAQCLPcEbg3CEnJdyvH89e6FpvBfg
FJVdhpd9qASXigG4Gp5KjT1C/txUb9i+LjxZmneDc/Ci+a7D6ZQj/oKEjxJRYiMt
Nr1l59RKhElixBaBXQVx3W0Ogk0uIhvoFcMLvVMepzf5Mqwn/w18QCfyTwFaanIa
8i0NQ9yXb78vWGWibBMsUwF/yvcnFExPAqs9BarGR2GkYeoM1SBdtwuWoC1Tt59a
QmGBpN28pVZl1G4Llwa5z2T5OCNOPamZ791pn7eEFIQ13QFGXdZVqAAtsd9V39Rk
WXOEzOJIkOEzMQA+tVG2u3uc/NUc84W0F45HzjNsIfGFE2tqvPIUSz0mnY9C
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:58 2025 by rpki-client