Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/k2RVmMw4dTjE-E7Uc5HM8pps6L4.roa
File: k2RVmMw4dTjE-E7Uc5HM8pps6L4.roa (raw, json)
Hash identifier: MA+oigHJbuNq/V3cBqh3wlOrDhlwgij4sZbn8b5+NbA=
Subject key identifier: 93:64:55:98:CC:38:75:38:C4:F8:4E:D4:73:91:CC:F2:9A:6C:E8:BE
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018FBA156AFF726ED2D177F07104C79A10FA
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/k2RVmMw4dTjE-E7Uc5HM8pps6L4.roa
Signing time: Mon 27 May 2024 12:45:16 +0000
ROA not before: Mon 27 May 2024 12:45:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202423
IP address blocks: 185.142.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:15:6a:ff:72:6e:d2:d1:77:f0:71:04:c7:9a:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: May 27 12:45:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93645598cc387538c4f84ed47391ccf29a6ce8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:3e:62:6f:de:2b:35:4b:ee:50:b9:ec:25:
10:a6:dc:80:70:a2:f8:93:e1:17:74:a6:4a:06:06:
56:6e:79:6b:e6:98:44:04:98:c3:95:34:3c:ab:e5:
51:65:05:58:01:a0:1c:f9:f2:2b:98:1b:55:49:e6:
20:54:e7:0f:82:cc:62:3e:ea:2e:0c:91:0a:01:e9:
34:b0:68:3d:95:06:cf:2e:a7:f4:12:ae:d3:01:06:
72:fd:d4:57:37:61:66:86:aa:2d:3b:24:67:fc:ed:
6d:eb:0c:42:5a:a4:69:5c:54:ee:2b:97:19:f8:0b:
ed:7a:e8:7c:c5:a5:e6:5a:31:b2:62:2a:ed:d6:ad:
92:01:0c:94:49:4d:ed:99:da:c4:91:bb:93:6c:c1:
c5:ea:25:8d:f8:38:4e:93:f9:1e:3c:35:6d:63:80:
a5:74:63:f8:8a:e5:b8:95:73:a9:d3:de:12:a3:33:
d5:73:0d:b1:44:b3:71:3e:a2:2c:2f:0d:c4:79:6e:
88:0f:d4:70:33:d3:d1:b9:16:a4:ab:2c:6d:94:24:
3c:e5:91:df:47:0e:d8:15:b5:af:c5:8b:b1:85:84:
3a:fb:df:99:47:32:04:a8:be:7e:7d:74:36:00:b5:
cb:6e:72:4a:fc:c3:84:3b:a8:5e:55:18:69:df:f3:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:55:98:CC:38:75:38:C4:F8:4E:D4:73:91:CC:F2:9A:6C:E8:BE
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/k2RVmMw4dTjE-E7Uc5HM8pps6L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.98.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7b:c3:e0:bd:5a:2f:c0:22:8e:cb:11:1f:53:c7:62:47:e2:
d6:a1:0b:9f:96:b8:ae:eb:3b:61:ed:cc:79:18:fc:96:e1:68:
b0:a7:7a:7c:ae:00:14:56:75:40:a7:e8:d8:c3:be:c3:24:8c:
7d:e8:dc:74:6b:42:15:8a:c0:ab:71:56:ab:24:4f:1b:5b:92:
05:18:55:e0:76:5a:fb:a9:4c:26:fc:a6:e4:0a:47:ba:8a:d8:
a7:7a:20:dd:48:24:f6:93:6b:df:0b:70:3d:dc:bc:75:1c:91:
d9:de:a0:cf:c5:0f:55:18:fd:b9:4a:83:1a:79:b6:2c:3b:dd:
75:9a:bc:41:da:b7:8c:63:2d:22:67:93:67:09:95:12:ed:09:
db:16:75:fa:69:38:d7:81:d6:fe:b8:ba:39:d5:b9:ca:c6:5e:
8c:ee:99:2a:15:f3:b6:16:17:7b:33:ca:0b:88:c5:de:45:e7:
4c:84:0f:cf:09:13:5c:43:05:ef:a7:83:a5:ca:15:e6:ee:8b:
09:d8:9a:de:7f:05:9b:3b:5c:cc:e6:d9:d3:ea:b7:3d:02:e0:
a2:a9:08:0a:78:7c:14:50:9c:88:d7:f1:e6:e8:8f:e1:7b:ee:
68:58:1c:ec:58:95:63:6c:55:a8:b3:25:8c:bf:73:55:81:a2:
f2:1e:09:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+6FWr/cm7S0XfwcQTHmhD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjQwNTI3MTI0NTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzY0NTU5OGNjMzg3NTM4YzRmODRlZDQ3MzkxY2NmMjlhNmNlOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NY+Ym/eKzVL7lC57CUQptyAcKL4
k+EXdKZKBgZWbnlr5phEBJjDlTQ8q+VRZQVYAaAc+fIrmBtVSeYgVOcPgsxiPuou
DJEKAek0sGg9lQbPLqf0Eq7TAQZy/dRXN2FmhqotOyRn/O1t6wxCWqRpXFTuK5cZ
+Avteuh8xaXmWjGyYirt1q2SAQyUSU3tmdrEkbuTbMHF6iWN+DhOk/kePDVtY4Cl
dGP4iuW4lXOp094SozPVcw2xRLNxPqIsLw3EeW6ID9RwM9PRuRakqyxtlCQ85ZHf
Rw7YFbWvxYuxhYQ6+9+ZRzIEqL5+fXQ2ALXLbnJK/MOEO6heVRhp3/MvvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNkVZjMOHU4xPhO1HORzPKabOi+MB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvazJSVm1NdzRkVGpFLUU3VWM1SE04cHBzNkw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY5iMA0G
CSqGSIb3DQEBCwUAA4IBAQApe8PgvVovwCKOyxEfU8diR+LWoQuflriu6zth7cx5
GPyW4Wiwp3p8rgAUVnVAp+jYw77DJIx96Nx0a0IVisCrcVarJE8bW5IFGFXgdlr7
qUwm/KbkCke6itineiDdSCT2k2vfC3A93Lx1HJHZ3qDPxQ9VGP25SoMaebYsO911
mrxB2reMYy0iZ5NnCZUS7QnbFnX6aTjXgdb+uLo51bnKxl6M7pkqFfO2Fhd7M8oL
iMXeRedMhA/PCRNcQwXvp4OlyhXm7osJ2JrefwWbO1zM5tnT6rc9AuCiqQgKeHwU
UJyI1/Hm6I/he+5oWBzsWJVjbFWosyWMv3NVgaLyHgmM
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:58 2025 by rpki-client