Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/hHdiAHxqYC1FjCi0EtT269vIRQY.roa
File: hHdiAHxqYC1FjCi0EtT269vIRQY.roa (raw, json)
Hash identifier: ptE818c0mB/CtfVWqOve5ictvoCHhouJunTRYlIamUA=
Subject key identifier: 84:77:62:00:7C:6A:60:2D:45:8C:28:B4:12:D4:F6:EB:DB:C8:45:06
Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial: 018CCA29DEC63BF4CF03A2087BAA2B2570CB
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/hHdiAHxqYC1FjCi0EtT269vIRQY.roa
Signing time: Tue 02 Jan 2024 12:33:10 +0000
ROA not before: Tue 02 Jan 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204754
IP address blocks: 185.241.185.0/24 maxlen: 24
185.241.186.0/24 maxlen: 24
185.241.184.0/24 maxlen: 24
185.241.187.0/24 maxlen: 24
2a0c:a880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:de:c6:3b:f4:cf:03:a2:08:7b:aa:2b:25:70:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Validity
Not Before: Jan 2 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=847762007c6a602d458c28b412d4f6ebdbc84506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:0c:d5:42:17:8f:6a:26:41:b8:49:e4:06:
78:46:0d:69:cc:4d:6b:f1:38:00:0e:08:c4:ae:66:
b4:ed:8d:1c:c0:81:bd:dd:8e:bf:29:4b:fa:7d:b0:
59:54:c3:28:5a:6e:11:f7:f7:8e:c1:9d:f3:ba:5b:
d8:14:99:f2:f9:45:fd:41:27:b3:c0:dc:e6:5a:21:
ad:b3:b2:f1:02:09:b1:ba:0b:a6:c6:d5:5f:01:ec:
5e:05:a8:13:d7:6c:1a:e0:7e:b6:93:b3:c7:2f:66:
d1:26:b0:ca:cc:3c:b8:e8:75:a8:d6:13:6b:e1:c2:
33:ab:f3:f4:79:9a:d6:39:16:f4:7a:ea:c8:2d:21:
eb:50:81:20:f0:11:3b:c6:df:1e:9f:78:f1:58:fe:
fe:94:8a:4d:3e:d2:59:56:66:40:7b:60:77:8f:09:
b6:c4:6c:d9:f4:ff:27:4a:4a:a4:68:3a:fd:a7:ec:
25:da:ce:eb:cc:6f:be:b6:6c:7e:2e:b4:56:b4:2f:
96:ed:90:1a:01:b9:2c:69:34:54:8b:36:3c:13:a8:
1b:41:2d:54:9e:8b:c0:7d:9c:7c:a0:9b:cb:bf:c2:
9b:be:a5:a4:f6:b5:39:47:48:1f:f9:47:4a:42:9d:
e6:56:dc:5a:88:f7:af:03:b7:39:33:9a:f4:b5:29:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:62:00:7C:6A:60:2D:45:8C:28:B4:12:D4:F6:EB:DB:C8:45:06
X509v3 Authority Key Identifier:
keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/hHdiAHxqYC1FjCi0EtT269vIRQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.184.0/22
IPv6:
2a0c:a880::/29
Signature Algorithm: sha256WithRSAEncryption
69:4b:1c:9d:6b:48:ea:7e:67:41:b7:98:4c:75:00:d0:70:13:
8e:8d:f9:8b:1d:09:b8:51:01:1a:ba:9a:d8:a9:91:b4:74:7a:
dd:9d:75:22:fa:5a:05:46:ce:49:f6:ba:e2:8e:1e:71:66:65:
bf:a8:60:7c:73:10:c4:1a:a7:9c:b1:79:2b:42:51:0b:cf:ba:
91:d5:52:38:8f:be:0c:86:89:f9:70:dc:80:7b:aa:d2:14:25:
c8:bc:f7:16:7a:39:57:73:47:b2:97:51:07:6c:ab:70:ae:a3:
9d:c4:a8:03:d8:07:ef:fc:d4:57:3e:22:92:cd:2d:f2:c8:48:
f9:71:e2:b4:4b:21:d8:f5:0f:30:cc:47:a7:0e:6a:ef:f6:8c:
e6:49:6f:f0:3f:65:19:47:60:a8:8e:b8:dd:ef:67:85:28:7d:
38:cf:37:02:35:7d:10:c2:4b:e1:82:10:22:5a:13:01:dd:55:
dd:c3:52:cf:a5:06:3d:8a:a0:27:ea:b6:b1:26:cd:16:92:85:
49:ff:63:93:dc:31:ed:28:30:e3:0e:93:19:a4:e5:08:97:d4:
a4:29:d6:39:4f:a1:0f:09:c5:f9:b0:a9:bc:24:89:a2:44:09:
7d:e2:61:94:e0:66:89:09:38:02:59:dd:eb:91:09:23:51:15:
9e:10:33:49
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKKd7GO/TPA6IIe6orJXDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjkyYjM4ZGYxOTdjYTJjYmFlMzAyNjkzMjI2YjIzZjMy
YTNmNzYwHhcNMjQwMTAyMTIzMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDc3NjIwMDdjNmE2MDJkNDU4YzI4YjQxMmQ0ZjZlYmRiYzg0NTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1EM1UIXj2omQbhJ5AZ4Rg1pzE1r
8TgADgjErma07Y0cwIG93Y6/KUv6fbBZVMMoWm4R9/eOwZ3zulvYFJny+UX9QSez
wNzmWiGts7LxAgmxugumxtVfAexeBagT12wa4H62k7PHL2bRJrDKzDy46HWo1hNr
4cIzq/P0eZrWORb0eurILSHrUIEg8BE7xt8en3jxWP7+lIpNPtJZVmZAe2B3jwm2
xGzZ9P8nSkqkaDr9p+wl2s7rzG++tmx+LrRWtC+W7ZAaAbksaTRUizY8E6gbQS1U
novAfZx8oJvLv8KbvqWk9rU5R0gf+UdKQp3mVtxaiPevA7c5M5r0tSlECQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIR3YgB8amAtRYwotBLU9uvbyEUGMB8GA1UdIwQY
MBaAFH65KzjfGXyiy64wJpMiayPzKj92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUt
OTFkMWEwNjg2M2FlLzEvaEhkaUFIeHFZQzFGakNpMEV0VDI2OXZJUlFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUtOTFkMWEwNjg2M2Fl
LzEvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufG4MA0E
AgACMAcDBQMqDKiAMA0GCSqGSIb3DQEBCwUAA4IBAQBpSxyda0jqfmdBt5hMdQDQ
cBOOjfmLHQm4UQEauprYqZG0dHrdnXUi+loFRs5J9rrijh5xZmW/qGB8cxDEGqec
sXkrQlELz7qR1VI4j74Mhon5cNyAe6rSFCXIvPcWejlXc0eyl1EHbKtwrqOdxKgD
2Afv/NRXPiKSzS3yyEj5ceK0SyHY9Q8wzEenDmrv9ozmSW/wP2UZR2Cojrjd72eF
KH04zzcCNX0QwkvhghAiWhMB3VXdw1LPpQY9iqAn6raxJs0WkoVJ/2OT3DHtKDDj
DpMZpOUIl9SkKdY5T6EPCcX5sKm8JImiRAl94mGU4GaJCTgCWd3rkQkjURWeEDNJ
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:00 2025 by rpki-client