Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/Gk64OKnXekXIYDAHIHNOVoVlHOI.roa
File: Gk64OKnXekXIYDAHIHNOVoVlHOI.roa (raw, json)
Hash identifier: ENY/IrDdnhBIJ5+vQzFhkkLlkWeD5NegMgolOVaTHoI=
Subject key identifier: 1A:4E:B8:38:A9:D7:7A:45:C8:60:30:07:20:73:4E:56:85:65:1C:E2
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019426D9EE2B66AA3401282FD1487CDDB146
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/Gk64OKnXekXIYDAHIHNOVoVlHOI.roa
Signing time: Thu 02 Jan 2025 11:50:03 +0000
ROA not before: Thu 02 Jan 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 185.160.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 23:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ee:2b:66:aa:34:01:28:2f:d1:48:7c:dd:b1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 2 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a4eb838a9d77a45c860300720734e5685651ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:3b:f9:33:0f:ff:2f:93:ce:66:75:1f:29:
86:ed:d7:71:2e:39:37:17:06:2c:94:4e:23:8f:5b:
86:94:33:11:e5:06:55:e9:da:fd:46:29:d6:69:83:
64:a3:a4:f3:1e:5c:b8:d6:0a:e1:92:63:11:db:39:
9d:03:22:ae:e6:7d:5d:f2:d5:bc:4f:45:ac:17:ce:
1d:a8:7a:14:31:91:08:f2:ee:84:43:43:41:3d:b6:
d2:9c:75:51:7f:53:a0:e8:c8:ee:d4:c1:07:06:22:
9a:49:65:d5:50:b6:d8:41:27:53:1f:9c:a1:ed:bc:
1d:68:eb:6f:80:e5:b1:70:0b:cc:38:86:00:07:d4:
56:e2:32:c6:3d:8a:b9:e9:0c:86:47:da:9a:69:2b:
ae:b2:44:fd:37:2e:85:2e:a2:63:94:4d:7e:62:5b:
97:88:36:96:bb:64:8e:3d:72:77:7c:8c:51:e7:68:
de:82:e1:83:19:bd:6a:40:10:50:26:97:ce:c9:75:
74:73:b1:b4:57:68:76:fe:8c:1b:96:7e:b9:9d:a8:
77:69:b9:22:ce:ee:64:3b:88:0a:6e:52:41:d3:cb:
be:97:1f:36:3a:05:98:77:ff:3a:94:ea:68:81:3a:
f8:28:93:a5:c0:2c:f4:6b:0a:1f:b5:01:6d:d3:e6:
8f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:B8:38:A9:D7:7A:45:C8:60:30:07:20:73:4E:56:85:65:1C:E2
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/Gk64OKnXekXIYDAHIHNOVoVlHOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.28.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a0:fb:53:f4:a4:b4:e1:e5:0a:1c:85:73:2f:7d:8e:c0:e7:
51:14:5b:5b:f1:ef:71:e3:0d:b9:20:e8:98:fd:9d:9f:6c:06:
fb:27:51:f3:a7:2d:81:79:53:ce:06:05:c0:cd:44:c8:4e:f4:
cb:6d:16:43:32:fc:2b:3a:96:70:0f:95:e8:d2:34:4b:31:74:
1d:47:13:c6:af:8d:5d:28:57:1e:c6:40:c4:94:c9:4c:9d:28:
9b:be:29:21:85:c8:e7:f1:5e:3c:40:11:52:fa:c1:10:cb:20:
1e:9a:3b:23:3a:5b:2f:ec:f9:c7:88:cb:13:58:96:f1:1c:fc:
4e:5c:b3:12:69:55:2c:f3:8d:05:f6:b0:2b:c9:e0:d8:27:e0:
a3:6f:6e:ee:2b:c6:a6:b0:24:02:df:be:e6:8b:f2:fd:a9:df:
4c:1d:ad:8c:c4:4d:1d:bf:cd:47:7f:10:7f:3b:ae:b5:b7:c0:
8e:da:55:38:b6:72:7b:45:52:dc:48:9d:aa:86:07:9d:23:34:
28:3e:94:67:a8:e3:08:ee:e9:f1:37:d8:74:3d:6a:58:20:89:
61:d1:1d:3f:78:ac:d0:5c:6f:ab:5f:c5:06:86:9c:d3:c2:44:
77:18:5f:4e:0d:2b:e3:59:b4:72:a4:a3:86:d8:d9:bf:9a:21:
44:86:9a:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2e4rZqo0ASgv0Uh83bFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjUwMTAyMTE1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTRlYjgzOGE5ZDc3YTQ1Yzg2MDMwMDcyMDczNGU1Njg1NjUxY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i47+TMP/y+TzmZ1HymG7ddxLjk3
FwYslE4jj1uGlDMR5QZV6dr9RinWaYNko6TzHly41grhkmMR2zmdAyKu5n1d8tW8
T0WsF84dqHoUMZEI8u6EQ0NBPbbSnHVRf1Og6Mju1MEHBiKaSWXVULbYQSdTH5yh
7bwdaOtvgOWxcAvMOIYAB9RW4jLGPYq56QyGR9qaaSuuskT9Ny6FLqJjlE1+YluX
iDaWu2SOPXJ3fIxR52jeguGDGb1qQBBQJpfOyXV0c7G0V2h2/owbln65nah3abki
zu5kO4gKblJB08u+lx82OgWYd/86lOpogTr4KJOlwCz0awoftQFt0+aPGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpOuDip13pFyGAwByBzTlaFZRziMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvR2s2NE9Lblhla1hJWURBSElITk9Wb1ZsSE9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaAcMA0G
CSqGSIb3DQEBCwUAA4IBAQBioPtT9KS04eUKHIVzL32OwOdRFFtb8e9x4w25IOiY
/Z2fbAb7J1Hzpy2BeVPOBgXAzUTITvTLbRZDMvwrOpZwD5Xo0jRLMXQdRxPGr41d
KFcexkDElMlMnSibvikhhcjn8V48QBFS+sEQyyAemjsjOlsv7PnHiMsTWJbxHPxO
XLMSaVUs840F9rAryeDYJ+Cjb27uK8amsCQC377mi/L9qd9MHa2MxE0dv81HfxB/
O661t8CO2lU4tnJ7RVLcSJ2qhgedIzQoPpRnqOMI7unxN9h0PWpYIIlh0R0/eKzQ
XG+rX8UGhpzTwkR3GF9ODSvjWbRypKOG2Nm/miFEhpqp
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:18 2025 by rpki-client