Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/MAkD9XYhKbJYTzfjPQlJMieO82Q.roa
File: MAkD9XYhKbJYTzfjPQlJMieO82Q.roa (raw, json)
Hash identifier: F+sDuYT56NaUjAmBttuoZr6sh2GEQn54NqIlMhOnwOg=
Subject key identifier: 30:09:03:F5:76:21:29:B2:58:4F:37:E3:3D:09:49:32:27:8E:F3:64
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 0195383476A29EBA7258C43880E35D42ED65
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/MAkD9XYhKbJYTzfjPQlJMieO82Q.roa
Signing time: Mon 24 Feb 2025 13:45:17 +0000
ROA not before: Mon 24 Feb 2025 13:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8309
IP address blocks: 185.46.164.64/26 maxlen: 26
185.46.164.128/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 25 Feb 2025 09:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:34:76:a2:9e:ba:72:58:c4:38:80:e3:5d:42:ed:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Feb 24 13:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=300903f5762129b2584f37e33d094932278ef364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:fd:a3:10:12:96:5f:b3:4a:04:b5:16:bc:
15:2a:0d:17:4a:a9:e5:f2:e8:b3:76:db:97:07:0b:
23:9a:6b:50:5e:2a:7d:98:19:67:6b:f3:28:24:d5:
5f:fb:91:5e:0a:ba:e0:c8:fb:4c:8d:e7:45:fd:df:
d6:37:38:b8:d5:e6:e0:6a:02:f9:2a:3e:2e:96:2c:
b6:b1:78:4f:87:a3:3f:e4:1b:84:e1:ec:fb:c6:72:
30:6a:de:34:a4:50:9f:e2:73:c8:07:81:2a:86:98:
79:c4:8e:e3:74:f6:a4:ca:cd:1d:fc:59:62:2b:bc:
56:89:7f:a4:28:d5:61:40:91:dd:3a:8b:69:3e:c7:
1d:82:6f:fe:fa:40:f5:aa:82:07:fe:5c:12:60:c8:
a8:6d:b3:ad:93:67:77:bb:e7:8e:ca:7d:a3:85:1b:
23:f0:d1:c3:4b:9b:af:6c:0d:23:06:5b:66:b4:22:
b7:e9:09:fd:95:0e:e5:df:9d:b1:9e:84:9c:b1:f6:
19:41:22:be:14:8b:56:89:6b:52:6f:9e:88:a3:ca:
53:bd:49:a3:a4:93:87:c9:cd:92:88:c1:66:94:60:
1d:df:e9:6c:5d:d2:9c:ee:73:ef:e9:ea:b9:02:c7:
75:66:98:6b:d3:7d:d1:41:6d:87:f1:c2:d9:d9:f6:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:03:F5:76:21:29:B2:58:4F:37:E3:3D:09:49:32:27:8E:F3:64
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/MAkD9XYhKbJYTzfjPQlJMieO82Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.164.64-185.46.164.255
Signature Algorithm: sha256WithRSAEncryption
83:14:74:1b:2b:73:18:35:4d:09:9e:1b:4d:d2:9e:f4:7d:03:
2b:ea:34:ba:3c:3a:a7:a0:79:2e:61:89:da:77:82:ad:f4:8c:
6a:95:a2:89:14:ae:2d:b5:f1:6b:e9:f5:5d:a9:36:e6:00:13:
9f:33:92:24:2f:e6:c0:46:5d:be:39:56:73:bf:8e:f0:30:f0:
e4:82:7e:7f:d6:63:3a:b2:d1:fe:05:58:d3:4a:1d:39:e0:37:
bc:24:9a:c5:c8:83:f0:5e:c4:d6:e5:ad:14:6f:b0:37:70:19:
3d:6d:56:02:b0:dc:b6:7d:90:12:87:07:8c:b6:d2:59:21:b0:
3f:53:9f:13:49:98:f5:90:d5:23:43:74:70:6f:b6:3c:bf:b2:
17:72:03:87:d3:9a:35:3b:4f:57:59:ce:9f:5e:d2:90:a7:0f:
f6:41:db:a2:86:a9:2c:f3:52:9e:66:a5:55:0a:ee:3d:de:a0:
de:e9:cd:7a:8b:aa:36:86:a2:8c:d6:8d:98:45:53:8b:7a:b8:
fd:ac:29:e0:fb:41:59:2c:a2:45:50:81:3a:e6:0c:98:a3:5d:
48:a0:0c:18:06:48:fa:92:33:77:c2:2b:f8:2c:70:f3:cb:41:
91:84:64:1d:2e:e7:6f:3c:a8:ae:8a:63:26:f0:53:27:58:ca:
a0:1b:51:84
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZU4NHainrpyWMQ4gONdQu1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy
YThlYWMwHhcNMjUwMjI0MTM0NTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDA5MDNmNTc2MjEyOWIyNTg0ZjM3ZTMzZDA5NDkzMjI3OGVmMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMf9oxASll+zSgS1FrwVKg0XSqnl
8uizdtuXBwsjmmtQXip9mBlna/MoJNVf+5FeCrrgyPtMjedF/d/WNzi41ebgagL5
Kj4uliy2sXhPh6M/5BuE4ez7xnIwat40pFCf4nPIB4Eqhph5xI7jdPakys0d/Fli
K7xWiX+kKNVhQJHdOotpPscdgm/++kD1qoIH/lwSYMiobbOtk2d3u+eOyn2jhRsj
8NHDS5uvbA0jBltmtCK36Qn9lQ7l352xnoScsfYZQSK+FItWiWtSb56Io8pTvUmj
pJOHyc2SiMFmlGAd3+lsXdKc7nPv6eq5Asd1Zphr033RQW2H8cLZ2fadxQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFDAJA/V2ISmyWE834z0JSTInjvNkMB8GA1UdIwQY
MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct
ZjQ4NGRhOGU2N2MzLzEvTUFrRDlYWWhLYkpZVHpmalBRbEpNaWVPODJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz
LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPMA0DBQa5LqRA
AwQAuS6kMA0GCSqGSIb3DQEBCwUAA4IBAQCDFHQbK3MYNU0JnhtN0p70fQMr6jS6
PDqnoHkuYYnad4Kt9IxqlaKJFK4ttfFr6fVdqTbmABOfM5IkL+bARl2+OVZzv47w
MPDkgn5/1mM6stH+BVjTSh054De8JJrFyIPwXsTW5a0Ub7A3cBk9bVYCsNy2fZAS
hweMttJZIbA/U58TSZj1kNUjQ3Rwb7Y8v7IXcgOH05o1O09XWc6fXtKQpw/2Qdui
hqks81KeZqVVCu493qDe6c16i6o2hqKM1o2YRVOLerj9rCng+0FZLKJFUIE65gyY
o11IoAwYBkj6kjN3wiv4LHDzy0GRhGQdLudvPKiuimMm8FMnWMqgG1GE
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:42:14 2025 by rpki-client