Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/sm0dzeK37hT-wuGom8l8gIsKM0M.roa
File: sm0dzeK37hT-wuGom8l8gIsKM0M.roa (raw, json)
Hash identifier: aN7IhoW+mRln1TFbBotAvdvU2j9+u20Cp80yd6cOn9I=
Subject key identifier: B2:6D:1D:CD:E2:B7:EE:14:FE:C2:E1:A8:9B:C9:7C:80:8B:0A:33:43
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0194258F2082A57C2615D349009BF8F0C37F
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/sm0dzeK37hT-wuGom8l8gIsKM0M.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205958
IP address blocks: 185.30.168.0/23 maxlen: 23
185.30.170.0/23 maxlen: 23
185.194.102.0/23 maxlen: 23
185.215.132.0/23 maxlen: 23
185.215.134.0/23 maxlen: 23
2a0a:49c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 02 Apr 2025 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:20:82:a5:7c:26:15:d3:49:00:9b:f8:f0:c3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b26d1dcde2b7ee14fec2e1a89bc97c808b0a3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:e0:3d:6d:97:92:54:8c:6a:55:8f:79:07:
0c:2b:ed:12:f1:58:9f:f4:0f:39:fc:31:3d:df:83:
81:75:6d:e2:c5:50:42:c6:e8:4f:b4:10:b1:a5:01:
7b:8b:e0:fd:a4:41:d8:dc:d5:8c:12:8f:41:d3:ea:
c2:af:51:77:09:c8:7e:33:c3:b0:dc:ea:57:16:fa:
e7:66:5c:8e:b4:32:32:3a:58:cb:c8:7e:34:58:c4:
e5:a9:b3:a9:35:c7:1d:9e:95:b3:0d:9b:b1:00:93:
6d:0e:26:b1:5d:6b:a5:fc:1d:31:68:18:2f:7b:7b:
5d:65:61:df:35:a1:e3:cc:dd:5e:34:4b:06:75:92:
e9:e7:3d:96:53:0c:fa:25:3d:91:d1:36:78:09:e5:
e6:4d:74:05:b2:8a:58:06:1b:18:05:48:11:0f:f5:
b2:3a:b0:e9:a7:30:0f:d0:49:f0:36:d0:40:9f:60:
6b:20:6a:5c:86:b3:57:3a:04:d0:ce:da:e4:d3:e6:
c6:58:cd:52:56:1c:fd:15:39:10:a5:a6:ef:59:ec:
73:62:17:67:dc:f2:11:57:50:2e:32:2f:ae:9f:2c:
2b:a1:54:bd:0e:bb:be:d8:bd:81:06:36:98:68:30:
81:42:9e:14:a4:4f:9b:5f:fb:08:0f:1e:f1:d3:53:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6D:1D:CD:E2:B7:EE:14:FE:C2:E1:A8:9B:C9:7C:80:8B:0A:33:43
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/sm0dzeK37hT-wuGom8l8gIsKM0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.168.0/22
185.194.102.0/23
185.215.132.0/22
IPv6:
2a0a:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
27:9d:9d:53:9b:35:8c:94:b3:bd:3e:86:b3:1e:f3:93:0b:c9:
6e:3b:05:ab:3a:bf:e6:43:98:25:5d:b5:71:2b:2d:ca:cd:e3:
d7:44:bc:4f:b6:55:3c:cb:b4:2e:e3:ec:9d:22:f6:6b:b9:d4:
74:91:f6:44:e5:ed:ee:cb:38:ad:3b:a4:f4:58:68:05:8b:b0:
e7:e3:74:e7:85:6f:bd:75:fa:5c:f3:40:7d:ec:e4:7f:c3:8d:
fb:c0:e1:2d:60:a2:a8:7a:5d:1c:b2:cf:cc:d7:a7:a7:e3:4a:
bc:38:7f:3c:ed:ca:23:f3:37:36:4b:f8:4d:3c:95:51:b9:28:
50:9f:ca:5a:81:3b:ba:7f:f6:9f:01:37:45:c2:b0:ed:f4:87:
57:61:6c:8b:36:21:77:00:56:e0:b8:56:4d:34:35:99:94:2e:
e5:a4:a4:25:cb:1b:7a:f6:ed:a2:37:bb:26:36:4f:ee:98:e0:
d4:2c:df:87:e1:71:a7:9c:63:d6:b9:68:db:e1:01:12:cb:4c:
30:56:a0:ac:a2:2b:83:b8:93:5e:2a:44:d3:71:2c:68:ac:08:
03:3f:1f:c7:81:3f:38:bf:02:72:de:e2:99:ec:76:b1:59:49:
8f:60:c6:05:bf:69:88:d6:8a:c6:dc:dc:04:29:2d:ba:07:52:
bb:da:09:02
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQljyCCpXwmFdNJAJv48MN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NzQwNWU5Y2VlMzlkNzE5NDRkNWUzMTQ5ZWIwMWI2MWY5
YWRiMWUwHhcNMjUwMTAyMDU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjZkMWRjZGUyYjdlZTE0ZmVjMmUxYTg5YmM5N2M4MDhiMGEzMzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoffgPW2XklSMalWPeQcMK+0S8Vif
9A85/DE934OBdW3ixVBCxuhPtBCxpQF7i+D9pEHY3NWMEo9B0+rCr1F3Cch+M8Ow
3OpXFvrnZlyOtDIyOljLyH40WMTlqbOpNccdnpWzDZuxAJNtDiaxXWul/B0xaBgv
e3tdZWHfNaHjzN1eNEsGdZLp5z2WUwz6JT2R0TZ4CeXmTXQFsopYBhsYBUgRD/Wy
OrDppzAP0EnwNtBAn2BrIGpchrNXOgTQztrk0+bGWM1SVhz9FTkQpabvWexzYhdn
3PIRV1AuMi+unywroVS9Dru+2L2BBjaYaDCBQp4UpE+bX/sIDx7x01OQpQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLJtHc3it+4U/sLhqJvJfICLCjNDMB8GA1UdIwQY
MBaAFCR0BenO451xlE1eMUnrAbYfmtseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYt
NDdiYmFjYTA3OGZmLzEvc20wZHplSzM3aFQtd3VHb204bDhnSXNLTTBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYtNDdiYmFjYTA3OGZm
LzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuR6oAwQB
ucJmAwQCudeEMA0EAgACMAcDBQMqCknAMA0GCSqGSIb3DQEBCwUAA4IBAQAnnZ1T
mzWMlLO9PoazHvOTC8luOwWrOr/mQ5glXbVxKy3KzePXRLxPtlU8y7Qu4+ydIvZr
udR0kfZE5e3uyzitO6T0WGgFi7Dn43TnhW+9dfpc80B97OR/w437wOEtYKKoel0c
ss/M16en40q8OH887coj8zc2S/hNPJVRuShQn8pagTu6f/afATdFwrDt9IdXYWyL
NiF3AFbguFZNNDWZlC7lpKQlyxt69u2iN7smNk/umODULN+H4XGnnGPWuWjb4QES
y0wwVqCsoiuDuJNeKkTTcSxorAgDPx/HgT84vwJy3uKZ7HaxWUmPYMYFv2mI1orG
3NwEKS26B1K72gkC
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:37:36 2025 by rpki-client