Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/VSEGYryiMmjRK5_j2IW1QPwPZoU.roa
File: VSEGYryiMmjRK5_j2IW1QPwPZoU.roa (raw, json)
Hash identifier: YqqEsZboeHxGwRW2oQwrIVRffFowf6LraZClgiOv/is=
Subject key identifier: 55:21:06:62:BC:A2:32:68:D1:2B:9F:E3:D8:85:B5:40:FC:0F:66:85
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 018CC7950CE91F4ED660C63F671526B4CEC8
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/VSEGYryiMmjRK5_j2IW1QPwPZoU.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51048
IP address blocks: 185.83.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0c:e9:1f:4e:d6:60:c6:3f:67:15:26:b4:ce:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55210662bca23268d12b9fe3d885b540fc0f6685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:c8:c9:8d:1d:c6:d1:63:22:94:30:6a:88:
10:da:ec:bc:8c:90:dc:0a:5a:d5:72:d6:57:f7:bb:
32:ef:d3:94:3f:44:25:b4:2e:37:04:79:19:f0:1e:
73:df:55:b7:2d:4e:67:ec:29:e6:66:c1:2e:50:57:
cd:ba:65:c4:88:21:34:b2:f3:0c:d8:c0:1b:0e:d6:
db:98:19:43:f7:89:9d:06:19:c7:c8:33:af:06:11:
0d:3f:da:e2:27:c3:4b:7d:f9:c8:23:24:27:bd:eb:
ec:54:7f:71:56:a2:62:a2:46:d9:db:ca:b1:bf:10:
3e:70:e9:76:91:34:4b:eb:a9:0d:11:94:69:bf:9a:
4a:63:ce:5e:8b:91:9d:21:2b:42:fe:46:f3:42:17:
d4:ed:25:21:ac:45:e9:34:16:1f:27:25:b3:04:e2:
ae:26:a8:ca:cc:fe:36:e2:eb:63:e3:fb:b1:50:b2:
61:17:c7:7e:54:43:1d:78:c1:45:40:e0:95:a7:0e:
a8:37:3d:be:5c:0e:7a:f3:3c:4d:79:95:38:19:49:
e7:c1:5d:ee:64:a9:13:86:30:10:f2:37:04:91:7e:
a5:53:c9:c2:5a:02:cb:c1:8a:db:b5:02:45:19:c6:
fe:5b:cb:d4:02:fa:54:a7:4a:77:18:f4:18:2e:93:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:06:62:BC:A2:32:68:D1:2B:9F:E3:D8:85:B5:40:FC:0F:66:85
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/VSEGYryiMmjRK5_j2IW1QPwPZoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f2:a8:01:bd:62:0a:76:25:7d:16:26:3f:43:12:2f:b7:56:
51:20:f6:60:90:c4:16:b5:01:cf:83:85:71:de:be:9b:19:d1:
e8:81:92:d2:22:5e:7e:09:42:0d:28:11:2e:db:28:71:0f:45:
af:d3:d7:09:bc:85:9b:3d:27:06:c8:4b:dc:f0:07:87:8e:1e:
16:bb:b9:a1:ba:71:87:f5:7a:03:20:42:ea:97:d3:b5:ab:8b:
71:10:f9:7e:d1:c7:49:ad:e0:94:3e:f0:ca:c2:67:f1:64:db:
43:df:d8:16:e1:44:a3:38:bd:80:d7:65:4c:2a:6b:39:88:cd:
6b:84:f8:8a:e3:cb:5f:fa:bd:c2:02:9e:57:6c:47:1d:4a:0b:
b3:ce:83:f3:16:97:21:de:0c:b8:7d:0f:61:22:08:40:1e:f1:
3f:99:cc:d3:28:56:21:f6:0b:7c:93:53:c9:49:15:58:d7:7b:
bb:c6:13:d1:3c:bb:a4:86:e8:ea:25:73:26:f6:63:14:6e:cd:
e6:ef:8d:1a:5d:52:11:4b:3e:12:95:1d:46:aa:4a:32:ed:61:
dd:af:03:f9:bc:96:e0:d7:61:85:fe:93:18:b6:80:f0:0d:a6:
5c:40:42:03:81:06:19:1f:b2:ba:b3:53:b4:6e:de:d6:e1:c7:
a9:9a:f1:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlQzpH07WYMY/ZxUmtM7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTRkZjY1YTNiZGRkZmI1NTYwOWYxODUwZTE0OWY4MmJl
YTc4ZjcwHhcNMjQwMTAyMDAzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTIxMDY2MmJjYTIzMjY4ZDEyYjlmZTNkODg1YjU0MGZjMGY2Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvjIyY0dxtFjIpQwaogQ2uy8jJDc
ClrVctZX97sy79OUP0QltC43BHkZ8B5z31W3LU5n7CnmZsEuUFfNumXEiCE0svMM
2MAbDtbbmBlD94mdBhnHyDOvBhENP9riJ8NLffnIIyQnvevsVH9xVqJiokbZ28qx
vxA+cOl2kTRL66kNEZRpv5pKY85ei5GdIStC/kbzQhfU7SUhrEXpNBYfJyWzBOKu
JqjKzP424utj4/uxULJhF8d+VEMdeMFFQOCVpw6oNz2+XA568zxNeZU4GUnnwV3u
ZKkThjAQ8jcEkX6lU8nCWgLLwYrbtQJFGcb+W8vUAvpUp0p3GPQYLpNCIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUhBmK8ojJo0Suf49iFtUD8D2aFMB8GA1UdIwQY
MBaAFD2U32Wjvd37VWCfGFDhSfgr6nj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpUZlphTzkzZnRWWUo4WVVPRkotQ3ZxZVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYTljNjItOGUxNi00NmRmLWJlMmIt
MDZiOWVkOTlmMTZjLzEvVlNFR1lyeWlNbWpSSzVfajJJVzFRUHdQWm9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kYTljNjItOGUxNi00NmRmLWJlMmItMDZiOWVkOTlmMTZj
LzEvUFpUZlphTzkzZnRWWUo4WVVPRkotQ3ZxZVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVOoMA0G
CSqGSIb3DQEBCwUAA4IBAQA/8qgBvWIKdiV9FiY/QxIvt1ZRIPZgkMQWtQHPg4Vx
3r6bGdHogZLSIl5+CUINKBEu2yhxD0Wv09cJvIWbPScGyEvc8AeHjh4Wu7mhunGH
9XoDIELql9O1q4txEPl+0cdJreCUPvDKwmfxZNtD39gW4USjOL2A12VMKms5iM1r
hPiK48tf+r3CAp5XbEcdSguzzoPzFpch3gy4fQ9hIghAHvE/mczTKFYh9gt8k1PJ
SRVY13u7xhPRPLukhujqJXMm9mMUbs3m740aXVIRSz4SlR1Gqkoy7WHdrwP5vJbg
12GF/pMYtoDwDaZcQEIDgQYZH7K6s1O0bt7W4cepmvFh
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:47 2025 by rpki-client