Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/BTvq03W4lJ46mm-Izw9jmDRqgmQ.roa
File: BTvq03W4lJ46mm-Izw9jmDRqgmQ.roa (raw, json)
Hash identifier: v5IuVbDWKMalFuOzG4yNbVuE4mcxkLy5q9L1SpVm6xY=
Subject key identifier: 05:3B:EA:D3:75:B8:94:9E:3A:9A:6F:88:CF:0F:63:98:34:6A:82:64
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019445A5C5191FBE6A91F68BDBF5C513559F
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/BTvq03W4lJ46mm-Izw9jmDRqgmQ.roa
Signing time: Wed 08 Jan 2025 11:21:19 +0000
ROA not before: Wed 08 Jan 2025 11:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216244
IP address blocks: 185.85.74.0/24 maxlen: 24
185.160.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 21:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:a5:c5:19:1f:be:6a:91:f6:8b:db:f5:c5:13:55:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 8 11:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=053bead375b8949e3a9a6f88cf0f6398346a8264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:c7:64:1e:26:c7:f7:d5:b7:52:f6:1a:1d:
30:62:b5:da:9f:fb:9f:d0:69:ac:fd:c2:64:5f:af:
5a:b4:69:8f:84:9a:3f:ab:9c:0e:af:0d:bb:5b:37:
9b:30:b2:ee:19:18:11:03:8b:ad:5f:fc:9a:44:d6:
04:e5:00:b3:27:35:5a:2f:97:6c:54:d7:cd:d0:cc:
da:17:26:9a:34:e8:c6:82:a9:bb:9d:3c:74:71:b7:
9a:e4:ba:45:b3:e8:21:23:00:4a:7d:4f:99:c8:06:
82:43:ed:c7:05:25:ba:9d:89:bd:5c:f7:ee:95:08:
dd:7a:47:82:98:fa:f3:13:ac:45:50:9a:08:ec:eb:
56:4d:f6:40:95:a6:26:71:8a:51:9f:35:ac:4b:c5:
0c:0a:6f:7f:3d:2a:7d:b0:4a:28:c9:5a:79:67:0f:
91:11:41:26:50:c9:bb:88:0c:b6:2e:db:ff:55:c6:
e2:55:e7:09:0d:07:fb:cb:6c:01:61:67:a3:64:c3:
20:fa:59:53:1b:50:02:ae:83:00:70:6f:53:f5:3f:
9f:4c:0e:f9:63:70:db:57:a5:af:e9:95:fa:b1:56:
c9:f1:65:07:ec:a2:6f:7c:65:33:20:7b:39:75:35:
17:cc:f0:f7:fc:e2:f5:46:83:70:9b:7d:15:73:0c:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:EA:D3:75:B8:94:9E:3A:9A:6F:88:CF:0F:63:98:34:6A:82:64
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/BTvq03W4lJ46mm-Izw9jmDRqgmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.74.0/24
185.160.28.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3c:c2:47:95:2e:76:5b:d2:8d:49:2f:09:5d:8f:44:24:8a:
2b:29:55:13:20:25:42:a9:7b:7c:f0:4f:0d:d4:7d:2c:d9:7f:
cf:8f:69:f2:b9:3f:5c:69:6c:7b:4a:99:8d:9a:a1:82:32:9c:
2d:38:f1:cc:f6:50:1b:9b:0b:87:1e:d9:98:1f:74:ae:eb:93:
fa:83:5f:a1:85:17:d9:d2:de:9e:7c:2e:05:01:7a:1d:ec:dc:
7c:38:4a:9e:88:96:60:ef:42:ad:e8:a5:68:55:63:70:2e:67:
41:a9:a5:19:d6:65:b6:b6:46:f1:12:e3:d6:a7:f8:2b:dd:82:
b8:8e:79:cd:8b:74:94:86:1e:a8:f8:c2:31:da:1d:2e:e4:69:
98:7b:34:ba:8f:9c:32:f2:e1:69:76:42:f8:f8:fd:ec:a2:06:
40:43:1e:c5:30:83:d1:2d:19:67:32:32:2e:a7:81:a8:86:d4:
4b:a1:95:db:11:c8:26:28:c1:5c:85:e4:c2:54:3a:cb:97:2c:
5a:96:4e:06:7e:5d:37:c4:71:bb:cb:3c:f5:70:53:9e:7f:50:
80:c8:48:d6:05:b8:30:3d:ab:03:c2:95:c0:51:ca:ad:ec:00:
e9:ee:cb:9b:23:4d:cf:5b:60:3c:54:bc:44:ec:25:48:4f:9c:
ea:b0:2c:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRFpcUZH75qkfaL2/XFE1WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjUwMTA4MTEyMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTNiZWFkMzc1Yjg5NDllM2E5YTZmODhjZjBmNjM5ODM0NmE4MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/zHZB4mx/fVt1L2Gh0wYrXan/uf
0Gms/cJkX69atGmPhJo/q5wOrw27WzebMLLuGRgRA4utX/yaRNYE5QCzJzVaL5ds
VNfN0MzaFyaaNOjGgqm7nTx0cbea5LpFs+ghIwBKfU+ZyAaCQ+3HBSW6nYm9XPfu
lQjdekeCmPrzE6xFUJoI7OtWTfZAlaYmcYpRnzWsS8UMCm9/PSp9sEooyVp5Zw+R
EUEmUMm7iAy2Ltv/VcbiVecJDQf7y2wBYWejZMMg+llTG1ACroMAcG9T9T+fTA75
Y3DbV6Wv6ZX6sVbJ8WUH7KJvfGUzIHs5dTUXzPD3/OL1RoNwm30VcwzSwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAU76tN1uJSeOppviM8PY5g0aoJkMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvQlR2cTAzVzRsSjQ2bW0tSXp3OWptRFJxZ21RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVVKAwQA
uaAcMA0GCSqGSIb3DQEBCwUAA4IBAQBEPMJHlS52W9KNSS8JXY9EJIorKVUTICVC
qXt88E8N1H0s2X/Pj2nyuT9caWx7SpmNmqGCMpwtOPHM9lAbmwuHHtmYH3Su65P6
g1+hhRfZ0t6efC4FAXod7Nx8OEqeiJZg70Kt6KVoVWNwLmdBqaUZ1mW2tkbxEuPW
p/gr3YK4jnnNi3SUhh6o+MIx2h0u5GmYezS6j5wy8uFpdkL4+P3sogZAQx7FMIPR
LRlnMjIup4GohtRLoZXbEcgmKMFcheTCVDrLlyxalk4Gfl03xHG7yzz1cFOef1CA
yEjWBbgwPasDwpXAUcqt7ADp7subI03PW2A8VLxE7CVIT5zqsCzF
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:16 2025 by rpki-client