Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/0XksW8U12eRosEK3VBvgu2IKapQ.roa
File: 0XksW8U12eRosEK3VBvgu2IKapQ.roa (raw, json)
Hash identifier: jV0pkO4hd92XRCnAHwCj94ujcDu+bYm3Bgc3deIAsMM=
Subject key identifier: D1:79:2C:5B:C5:35:D9:E4:68:B0:42:B7:54:1B:E0:BB:62:0A:6A:94
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018CC500703BB18FE13F867FCFBD22633202
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/0XksW8U12eRosEK3VBvgu2IKapQ.roa
Signing time: Mon 01 Jan 2024 12:29:49 +0000
ROA not before: Mon 01 Jan 2024 12:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198668
IP address blocks: 185.97.24.0/22 maxlen: 22
185.64.222.0/24 maxlen: 32
37.221.240.0/20 maxlen: 32
45.153.192.0/22 maxlen: 24
185.19.0.0/22 maxlen: 32
185.74.60.0/23 maxlen: 32
85.255.88.0/22 maxlen: 22
2a0d:3140::/29 maxlen: 29
2a03:d840:ffff::/48 maxlen: 48
2a04:c740::/29 maxlen: 48
2a0f:9300::/29 maxlen: 29
2a03:d840::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 21:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:70:3b:b1:8f:e1:3f:86:7f:cf:bd:22:63:32:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1792c5bc535d9e468b042b7541be0bb620a6a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:87:25:72:21:32:e3:46:52:3b:d2:49:bb:
3e:4d:65:c2:53:9a:d5:6a:6f:eb:a8:9a:2a:f0:92:
59:9d:b4:fb:51:60:75:34:da:21:66:bc:e8:f5:0f:
87:63:ba:fe:7b:ad:bd:d7:03:ac:28:de:40:ff:ad:
0a:79:ae:20:df:01:fd:27:b3:2e:ed:17:48:a4:97:
6c:ae:0c:74:eb:d9:fe:4c:d3:4e:fb:a9:ea:e6:c4:
c1:df:92:45:56:c5:dc:34:13:97:37:5b:c4:dc:5d:
b3:d0:76:87:29:46:c6:8e:6d:42:05:b1:51:98:18:
6f:0f:ed:d2:62:d1:01:75:3f:e9:95:46:4c:be:89:
78:b2:25:48:5c:d0:89:21:73:8e:49:d4:c1:00:1b:
8e:01:87:f2:94:26:80:3c:a6:8b:6f:76:8d:55:e1:
02:fd:c2:35:b1:e1:f7:32:34:a8:9a:fc:61:3c:2c:
b9:dd:97:79:cc:31:2c:39:4b:da:1b:52:f8:98:ee:
0a:07:4e:35:84:8b:32:a5:5f:7c:f1:e3:90:08:82:
44:3b:e1:8f:76:5a:68:dc:06:06:7b:57:26:3b:de:
65:14:8a:26:1f:28:a5:84:4d:59:75:62:8f:6c:29:
13:4c:a9:f6:d5:10:ca:09:c1:a7:7b:45:62:0c:f6:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:2C:5B:C5:35:D9:E4:68:B0:42:B7:54:1B:E0:BB:62:0A:6A:94
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/0XksW8U12eRosEK3VBvgu2IKapQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.64.222.0/24
185.74.60.0/23
185.97.24.0/22
IPv6:
2a03:d840::/32
2a04:c740::/29
2a0d:3140::/29
2a0f:9300::/29
Signature Algorithm: sha256WithRSAEncryption
6b:a4:3b:46:10:24:a6:14:b6:da:46:e2:13:db:43:6a:d0:f1:
e1:2b:3f:51:b0:76:3f:77:69:03:67:e1:41:b6:ef:5c:53:a4:
72:ea:46:bf:34:5f:c8:71:a6:a6:5d:c7:4a:8e:f3:60:55:be:
24:18:4f:78:71:62:e4:88:11:67:39:67:c5:f8:56:a9:1f:c4:
9e:0a:9e:27:d8:f7:f6:66:4b:62:3a:af:f4:4f:78:4c:fd:b6:
64:9b:e2:c7:22:5a:57:fb:6a:c7:60:7c:df:25:c9:4b:4e:1b:
a2:30:00:94:7e:8d:2b:0f:83:d8:03:69:46:a0:81:15:62:7a:
17:45:e1:f2:fa:2a:fd:d4:8f:9e:aa:8c:5d:be:69:bc:0c:cb:
1a:04:77:f4:64:ae:02:f4:b0:d1:c7:45:5a:d3:23:93:14:e7:
4a:1c:eb:de:b1:c2:28:e7:ed:f4:69:2b:ca:99:ac:fb:b4:00:
69:10:cd:dc:4f:92:ef:ca:74:80:8f:2a:35:5c:a3:2b:48:1a:
f1:cc:3e:2f:44:ab:c3:50:57:1f:a9:04:f5:57:1d:d9:cc:67:
20:1c:ee:0f:de:e5:b4:a2:a6:60:8b:53:c5:37:11:75:48:cc:
56:30:7c:a4:cf:fd:f1:05:0b:f5:0a:fc:be:ee:4e:c6:ad:ba:
34:2a:27:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYzFAHA7sY/hP4Z/z70iYzICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2
MGY2ZjMwHhcNMjQwMTAxMTIyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTc5MmM1YmM1MzVkOWU0NjhiMDQyYjc1NDFiZTBiYjYyMGE2YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHaHJXIhMuNGUjvSSbs+TWXCU5rV
am/rqJoq8JJZnbT7UWB1NNohZrzo9Q+HY7r+e6291wOsKN5A/60Kea4g3wH9J7Mu
7RdIpJdsrgx069n+TNNO+6nq5sTB35JFVsXcNBOXN1vE3F2z0HaHKUbGjm1CBbFR
mBhvD+3SYtEBdT/plUZMvol4siVIXNCJIXOOSdTBABuOAYfylCaAPKaLb3aNVeEC
/cI1seH3MjSomvxhPCy53Zd5zDEsOUvaG1L4mO4KB041hIsypV988eOQCIJEO+GP
dlpo3AYGe1cmO95lFIomHyilhE1ZdWKPbCkTTKn21RDKCcGne0ViDPb0zwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFNF5LFvFNdnkaLBCt1Qb4LtiCmqUMB8GA1UdIwQY
MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvMFhrc1c4VTEyZVJvc0VLM1ZCdmd1MklLYXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjAwBAIAATAqAwQEJd3wAwQC
LZnAAwQCVf9YAwQCuRMAAwQAuUDeAwQBuUo8AwQCuWEYMCIEAgACMBwDBQAqA9hA
AwUDKgTHQAMFAyoNMUADBQMqD5MAMA0GCSqGSIb3DQEBCwUAA4IBAQBrpDtGECSm
FLbaRuIT20Nq0PHhKz9RsHY/d2kDZ+FBtu9cU6Ry6ka/NF/IcaamXcdKjvNgVb4k
GE94cWLkiBFnOWfF+FapH8SeCp4n2Pf2ZktiOq/0T3hM/bZkm+LHIlpX+2rHYHzf
JclLThuiMACUfo0rD4PYA2lGoIEVYnoXReHy+ir91I+eqoxdvmm8DMsaBHf0ZK4C
9LDRx0Va0yOTFOdKHOvescIo5+30aSvKmaz7tABpEM3cT5LvynSAjyo1XKMrSBrx
zD4vRKvDUFcfqQT1Vx3ZzGcgHO4P3uW0oqZgi1PFNxF1SMxWMHykz/3xBQv1Cvy+
7k7Grbo0KieO
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:23 2025 by rpki-client