Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/nu0e9CCgZI5fOsXFXXxumoZ9_xw.roa
File: nu0e9CCgZI5fOsXFXXxumoZ9_xw.roa (raw, json)
Hash identifier: Ny0pSGTR0m1224vGnUb7wjezUxXw0Xf0XBF26XG+ac4=
Subject key identifier: 9E:ED:1E:F4:20:A0:64:8E:5F:3A:C5:C5:5D:7C:6E:9A:86:7D:FF:1C
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 018CC7276324E79B94B7E86E2F5A1F212B19
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/nu0e9CCgZI5fOsXFXXxumoZ9_xw.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39736
IP address blocks: 185.228.164.0/22 maxlen: 23
2a0d:2600::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:63:24:e7:9b:94:b7:e8:6e:2f:5a:1f:21:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9eed1ef420a0648e5f3ac5c55d7c6e9a867dff1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:f3:55:d1:51:4f:3b:55:9d:7c:f1:0d:df:
c6:b4:43:98:62:c7:ee:0c:f4:d6:53:93:df:b3:eb:
cc:8a:24:d2:6a:e6:40:af:6e:b3:c8:e0:97:ba:13:
76:a1:7a:a8:75:e3:a5:5a:22:b5:b9:cc:22:05:db:
27:68:4f:3f:0b:e4:14:7e:6f:ee:03:63:30:09:58:
c5:25:93:3b:6f:85:58:9c:21:b0:b6:0e:07:83:7b:
3d:8d:21:2c:6a:c6:ed:da:87:21:f0:1a:65:d1:90:
51:19:20:25:28:2f:26:ce:3d:e3:f6:6b:4a:39:2f:
64:e9:31:86:fe:ee:93:3c:55:26:89:23:ea:00:36:
9c:d9:ad:02:ea:57:83:86:e2:a5:93:d1:d6:03:2a:
eb:64:3f:10:21:69:2d:8e:e2:46:12:10:2a:8e:d7:
63:3a:a9:98:6c:88:1d:55:4d:14:81:f7:fe:ab:4f:
00:62:30:a2:de:e0:d8:1e:91:fd:f4:b3:68:5b:95:
6f:e3:02:71:c0:21:ec:fc:41:62:d3:44:7a:51:1a:
2f:56:e3:ba:9b:4d:6a:fe:e9:12:93:47:7c:fe:1f:
0d:f9:f4:36:69:33:43:ac:81:9e:de:f4:6d:85:ef:
99:57:2e:c3:5b:a8:95:48:8c:e8:de:b2:9c:74:78:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:1E:F4:20:A0:64:8E:5F:3A:C5:C5:5D:7C:6E:9A:86:7D:FF:1C
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/nu0e9CCgZI5fOsXFXXxumoZ9_xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.164.0/22
IPv6:
2a0d:2600::/29
Signature Algorithm: sha256WithRSAEncryption
8e:e3:b3:5d:db:08:62:28:fe:42:35:a4:4f:e3:2c:50:81:a3:
a5:a7:de:74:02:2c:3a:ea:c4:ab:c3:da:67:48:a4:2f:05:cf:
d0:6e:4e:3f:1f:7a:54:78:42:77:38:aa:59:d4:1c:32:4f:5e:
ed:98:ca:7e:c0:6d:4a:fc:6f:29:1b:e7:31:b5:cc:43:36:c7:
15:85:9b:02:f6:fa:58:36:40:65:61:82:8f:46:13:ef:62:fe:
92:a9:40:2d:af:88:62:10:e4:78:e1:ae:95:be:f2:c7:60:2f:
cb:a6:50:71:30:4e:91:d8:a0:b4:15:88:63:c3:e8:0a:32:02:
d5:72:37:1f:d9:dd:b5:12:58:23:29:6b:82:00:0f:e7:4c:49:
b7:d2:14:9b:cb:78:d7:f4:c6:f6:6e:7c:3e:11:4d:63:7d:a2:
de:e8:7d:56:b5:08:40:cb:7f:3b:46:ef:27:59:27:f7:8a:dc:
0c:c3:17:94:b5:f2:9c:27:a8:21:58:ed:b3:82:22:d4:20:50:
12:c9:a8:f2:e7:c5:ee:ba:46:a0:0f:1e:ed:76:32:9d:3c:85:
a0:a4:85:7d:3f:c6:d8:14:f7:b4:39:4d:f7:d8:7f:9b:08:0a:
68:e1:c7:bd:70:40:32:ed:ba:2d:89:ce:da:1f:06:bd:1f:8b:
9c:66:99:18
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHJ2Mk55uUt+huL1ofISsZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGYzNmI3YjAzMDViZDlmZmViYzUzN2ExYTc1NmI3NGUw
NGQ1ZTQwHhcNMjQwMTAxMjIzMTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWVkMWVmNDIwYTA2NDhlNWYzYWM1YzU1ZDdjNmU5YTg2N2RmZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAPzVdFRTztVnXzxDd/GtEOYYsfu
DPTWU5Pfs+vMiiTSauZAr26zyOCXuhN2oXqodeOlWiK1ucwiBdsnaE8/C+QUfm/u
A2MwCVjFJZM7b4VYnCGwtg4Hg3s9jSEsasbt2och8Bpl0ZBRGSAlKC8mzj3j9mtK
OS9k6TGG/u6TPFUmiSPqADac2a0C6leDhuKlk9HWAyrrZD8QIWktjuJGEhAqjtdj
OqmYbIgdVU0Ugff+q08AYjCi3uDYHpH99LNoW5Vv4wJxwCHs/EFi00R6URovVuO6
m01q/ukSk0d8/h8N+fQ2aTNDrIGe3vRthe+ZVy7DW6iVSIzo3rKcdHg4swIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ7tHvQgoGSOXzrFxV18bpqGff8cMB8GA1UdIwQY
MBaAFDWPNrewMFvZ/+vFN6GnVrdOBNXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84YzkwNjctY2M2ZC00YzRhLWI2NjEt
MzdkMTU3MTlhMmQwLzEvbnUwZTlDQ2daSTVmT3NYRlhYeHVtb1o5X3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84YzkwNjctY2M2ZC00YzRhLWI2NjEtMzdkMTU3MTlhMmQw
LzEvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueSkMA0E
AgACMAcDBQMqDSYAMA0GCSqGSIb3DQEBCwUAA4IBAQCO47Nd2whiKP5CNaRP4yxQ
gaOlp950Aiw66sSrw9pnSKQvBc/Qbk4/H3pUeEJ3OKpZ1BwyT17tmMp+wG1K/G8p
G+cxtcxDNscVhZsC9vpYNkBlYYKPRhPvYv6SqUAtr4hiEOR44a6VvvLHYC/LplBx
ME6R2KC0FYhjw+gKMgLVcjcf2d21ElgjKWuCAA/nTEm30hSby3jX9Mb2bnw+EU1j
faLe6H1WtQhAy387Ru8nWSf3itwMwxeUtfKcJ6ghWO2zgiLUIFASyajy58Xuukag
Dx7tdjKdPIWgpIV9P8bYFPe0OU332H+bCApo4ce9cEAy7botic7aHwa9H4ucZpkY
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:47 2025 by rpki-client