Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/155HUf80TRFbhTAgdxSKA8hIfjc.roa
File: 155HUf80TRFbhTAgdxSKA8hIfjc.roa (raw, json)
Hash identifier: GzWQNU3FxiFyIcnclpKZQnn6nVmef1H4f6L3+LXmq8A=
Subject key identifier: D7:9E:47:51:FF:34:4D:11:5B:85:30:20:77:14:8A:03:C8:48:7E:37
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 019475E0614349C94995E3248AFDC7B6D8C9
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/155HUf80TRFbhTAgdxSKA8hIfjc.roa
Signing time: Fri 17 Jan 2025 20:07:06 +0000
ROA not before: Fri 17 Jan 2025 20:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201966
IP address blocks: 185.92.216.0/24 maxlen: 24
185.92.217.0/24 maxlen: 24
185.92.218.0/24 maxlen: 24
185.92.219.0/24 maxlen: 24
2a14:8900::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 18 Jan 2025 19:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:e0:61:43:49:c9:49:95:e3:24:8a:fd:c7:b6:d8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Jan 17 20:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79e4751ff344d115b85302077148a03c8487e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:f2:ac:3d:36:d6:f2:0f:96:10:0d:91:1e:
e2:9a:fa:c3:50:94:2f:09:a3:41:b8:e0:07:5c:e4:
06:ce:d2:ba:ca:dd:27:35:71:7e:62:07:9f:d3:93:
d5:8d:13:3f:6f:ad:7b:49:4e:c7:f0:f3:67:08:cb:
c3:6c:68:71:90:ce:14:44:c9:94:12:77:25:f1:2c:
67:76:94:7f:bf:90:36:19:53:83:f1:d6:41:f5:b2:
e7:b9:5d:60:eb:42:58:54:7a:cd:ea:f0:27:d7:d1:
53:63:ca:b4:75:06:be:37:42:37:ec:53:94:10:e9:
57:e1:74:64:4a:28:cf:e8:c8:44:8d:c9:cf:be:87:
6e:3b:75:18:84:70:79:02:76:10:30:ab:c8:65:d1:
d9:3a:ba:11:f5:0f:d3:8b:e1:9d:5e:30:5d:3d:3b:
d4:f5:69:8d:39:9e:5e:5b:d8:30:31:87:c3:67:f4:
2c:ee:d7:cb:82:96:cd:7d:10:fd:77:58:7d:6a:f7:
31:79:ad:01:7c:8b:35:6f:44:81:a0:52:6e:5f:04:
07:9f:df:67:fa:86:af:f9:51:fe:4a:b8:aa:2a:c7:
98:1a:05:ea:35:fb:b9:26:62:6f:d0:93:c6:ae:f0:
a7:a5:15:8c:25:80:70:e5:9f:c9:e2:00:19:06:32:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:47:51:FF:34:4D:11:5B:85:30:20:77:14:8A:03:C8:48:7E:37
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/155HUf80TRFbhTAgdxSKA8hIfjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.216.0/22
IPv6:
2a14:8900::/32
Signature Algorithm: sha256WithRSAEncryption
08:04:d4:10:dc:f7:a0:5c:c4:77:a8:61:14:82:3a:a6:f2:8e:
7c:e9:06:18:10:49:27:49:9f:73:03:2e:5f:35:27:76:32:18:
12:20:75:6b:8c:bd:5e:6a:68:6e:38:2f:d7:9c:3b:a5:13:8f:
ab:9a:12:26:ad:85:c2:a3:79:e2:06:e6:2e:1b:23:61:43:19:
ff:97:92:f4:1e:31:5e:99:c0:38:96:00:32:35:cf:5d:34:38:
13:06:40:ac:b5:34:ad:47:24:2c:e6:4b:bb:5b:4f:ad:cf:b4:
d7:85:ea:ac:7c:bf:8b:d4:0a:bd:43:15:80:46:ab:e7:f3:6f:
f9:61:fe:11:7b:38:d7:f3:10:d5:21:02:f1:e6:51:e6:8d:61:
8c:df:4f:de:91:71:eb:9f:2a:89:af:1a:b6:e8:3d:75:9f:15:
dc:aa:13:73:43:49:01:f7:56:23:d1:65:6b:11:79:8c:39:37:
d4:55:c1:3e:74:c0:de:46:bb:ee:df:24:d8:8f:c4:6d:35:86:
74:f0:21:b6:79:2f:f9:9d:fe:ff:a0:1c:7f:f4:57:32:75:48:
c0:a3:8e:51:ce:5b:43:d3:7a:80:39:7d:1e:eb:de:9e:87:09:
50:a8:2a:51:be:4b:84:de:92:80:1a:e3:01:4f:f7:fe:98:4c:
95:6f:bc:4b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZR14GFDSclJleMkiv3HttjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTU1MTdiMGIyMDMwOWU5MTY0MDViOWUxZWQyMWEwNDY5
YTY4OTUwHhcNMjUwMTE3MjAwNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzllNDc1MWZmMzQ0ZDExNWI4NTMwMjA3NzE0OGEwM2M4NDg3ZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HfyrD021vIPlhANkR7imvrDUJQv
CaNBuOAHXOQGztK6yt0nNXF+Ygef05PVjRM/b617SU7H8PNnCMvDbGhxkM4URMmU
Encl8SxndpR/v5A2GVOD8dZB9bLnuV1g60JYVHrN6vAn19FTY8q0dQa+N0I37FOU
EOlX4XRkSijP6MhEjcnPvoduO3UYhHB5AnYQMKvIZdHZOroR9Q/Ti+GdXjBdPTvU
9WmNOZ5eW9gwMYfDZ/Qs7tfLgpbNfRD9d1h9avcxea0BfIs1b0SBoFJuXwQHn99n
+oav+VH+SriqKseYGgXqNfu5JmJv0JPGrvCnpRWMJYBw5Z/J4gAZBjLs2QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNeeR1H/NE0RW4UwIHcUigPISH43MB8GA1UdIwQY
MBaAFPIVUXsLIDCekWQFueHtIaBGmmiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAt
Yjk1YTE2NDE2YjU2LzEvMTU1SFVmODBUUkZiaFRBZ2R4U0tBOGhJZmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAtYjk1YTE2NDE2YjU2
LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVzYMA0E
AgACMAcDBQAqFIkAMA0GCSqGSIb3DQEBCwUAA4IBAQAIBNQQ3PegXMR3qGEUgjqm
8o586QYYEEknSZ9zAy5fNSd2MhgSIHVrjL1eamhuOC/XnDulE4+rmhImrYXCo3ni
BuYuGyNhQxn/l5L0HjFemcA4lgAyNc9dNDgTBkCstTStRyQs5ku7W0+tz7TXheqs
fL+L1Aq9QxWARqvn82/5Yf4RezjX8xDVIQLx5lHmjWGM30/ekXHrnyqJrxq26D11
nxXcqhNzQ0kB91Yj0WVrEXmMOTfUVcE+dMDeRrvu3yTYj8RtNYZ08CG2eS/5nf7/
oBx/9FcydUjAo45RzltD03qAOX0e696ehwlQqCpRvkuE3pKAGuMBT/f+mEyVb7xL
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:01:25 2025 by rpki-client