Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/nosMYAD2dQ-MzZ1OEfFiesk_BVg.roa
File: nosMYAD2dQ-MzZ1OEfFiesk_BVg.roa (raw, json)
Hash identifier: BbMTf2hX0VO5kt1M07EVc5w/R9P0MnjCCzPNL9qUgPk=
Subject key identifier: 9E:8B:0C:60:00:F6:75:0F:8C:CD:9D:4E:11:F1:62:7A:C9:3F:05:58
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 01934FAF51F0CC65F519E04F4D9A71826945
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/nosMYAD2dQ-MzZ1OEfFiesk_BVg.roa
Signing time: Thu 21 Nov 2024 17:05:10 +0000
ROA not before: Thu 21 Nov 2024 17:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31382
IP address blocks: 185.140.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Nov 2024 06:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:af:51:f0:cc:65:f5:19:e0:4f:4d:9a:71:82:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Nov 21 17:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e8b0c6000f6750f8ccd9d4e11f1627ac93f0558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:cb:8a:e5:97:2f:24:da:45:e5:22:28:64:
a1:61:3c:d3:af:96:22:4f:47:8e:3c:b9:09:cd:1f:
d3:0f:f7:32:cb:3e:34:c4:5f:66:55:e8:99:d7:0e:
25:96:8f:f4:bd:7c:dd:c0:b4:31:62:3c:4e:f8:8a:
44:06:ef:22:31:87:d9:de:6d:ff:92:b0:0a:4c:84:
61:58:9f:ea:e6:b1:af:8b:2a:5a:08:ab:a1:f4:74:
69:12:fb:75:ef:e0:ee:c1:ce:fc:49:f7:23:78:e9:
e0:2c:6d:4f:86:1e:76:1c:26:40:03:94:13:ce:32:
6c:73:6d:a8:99:12:88:cf:37:6f:cf:3b:83:b8:26:
f0:82:b5:b3:81:8f:1e:8c:32:9b:08:5b:9d:d0:dd:
dc:48:ca:86:df:de:72:6f:a2:f5:c7:a8:70:41:29:
c6:98:02:96:be:53:56:e2:d1:4e:00:16:65:13:f4:
2b:13:e2:02:94:da:07:9f:57:08:81:cf:6f:90:99:
c7:f8:1c:a9:6f:ce:a6:d6:52:44:cf:dc:e1:f6:1b:
9f:99:bf:f9:5d:44:d1:b7:7d:0d:20:3c:d2:ce:17:
ad:67:56:fa:b3:72:c3:1c:ea:d4:a0:90:e5:67:27:
fd:8a:06:c4:0d:6a:7e:29:7b:ff:11:ed:72:d5:d6:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8B:0C:60:00:F6:75:0F:8C:CD:9D:4E:11:F1:62:7A:C9:3F:05:58
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/nosMYAD2dQ-MzZ1OEfFiesk_BVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.84.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:5e:12:70:e7:bc:38:92:03:77:84:6f:dd:d2:1b:44:33:6b:
33:13:bb:a5:0a:06:bc:2a:8a:e7:94:f3:69:6f:b2:3f:10:44:
bf:87:19:ca:e1:37:93:a5:fa:b9:6b:37:95:55:c5:e7:9f:0c:
77:ec:6f:4e:e3:6d:a0:51:29:8d:a8:ad:a0:7b:6e:bd:f0:cd:
27:73:a4:4f:91:ba:e7:05:81:40:e3:07:35:30:07:1e:75:02:
bb:8f:f7:79:8b:0c:73:ba:8c:b6:61:e1:dd:d6:18:00:76:45:
a1:5f:c9:72:bb:a7:28:69:a2:14:84:eb:8e:ac:94:36:fd:60:
30:8b:b8:09:67:a5:6e:4c:20:6c:aa:39:54:7a:f5:64:b2:5e:
87:46:62:0f:91:79:d9:53:8b:d7:5b:09:1c:88:4d:a2:90:57:
db:9b:83:64:a6:3a:a9:c4:70:fe:85:cf:5e:6f:9d:7c:92:19:
8f:1a:33:3f:e8:dd:a4:e6:3a:96:84:1d:ba:f8:48:9e:e6:7f:
fc:1e:fa:60:d7:d6:48:73:2a:2c:2a:1a:c6:eb:86:e0:2c:43:
6b:b0:e5:3d:cb:4e:36:e9:8a:ad:70:b1:26:04:94:0c:1a:b2:
09:9a:34:de:ff:f3:f2:4b:12:ac:05:f7:64:b9:d8:3d:e9:dc:
53:2b:22:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNPr1HwzGX1GeBPTZpxgmlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey
MTVlYWEwHhcNMjQxMTIxMTcwNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZThiMGM2MDAwZjY3NTBmOGNjZDlkNGUxMWYxNjI3YWM5M2YwNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4jLiuWXLyTaReUiKGShYTzTr5Yi
T0eOPLkJzR/TD/cyyz40xF9mVeiZ1w4llo/0vXzdwLQxYjxO+IpEBu8iMYfZ3m3/
krAKTIRhWJ/q5rGviypaCKuh9HRpEvt17+Duwc78SfcjeOngLG1Phh52HCZAA5QT
zjJsc22omRKIzzdvzzuDuCbwgrWzgY8ejDKbCFud0N3cSMqG395yb6L1x6hwQSnG
mAKWvlNW4tFOABZlE/QrE+IClNoHn1cIgc9vkJnH+Bypb86m1lJEz9zh9hufmb/5
XUTRt30NIDzSzhetZ1b6s3LDHOrUoJDlZyf9igbEDWp+KXv/Ee1y1dbZlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6LDGAA9nUPjM2dThHxYnrJPwVYMB8GA1UdIwQY
MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt
OGNlNDE3OTIzMmM4LzEvbm9zTVlBRDJkUS1NeloxT0VmRmllc2tfQlZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4
LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYxUMA0G
CSqGSIb3DQEBCwUAA4IBAQBaXhJw57w4kgN3hG/d0htEM2szE7ulCga8KornlPNp
b7I/EES/hxnK4TeTpfq5azeVVcXnnwx37G9O422gUSmNqK2ge2698M0nc6RPkbrn
BYFA4wc1MAcedQK7j/d5iwxzuoy2YeHd1hgAdkWhX8lyu6coaaIUhOuOrJQ2/WAw
i7gJZ6VuTCBsqjlUevVksl6HRmIPkXnZU4vXWwkciE2ikFfbm4NkpjqpxHD+hc9e
b518khmPGjM/6N2k5jqWhB26+Eie5n/8Hvpg19ZIcyosKhrG64bgLENrsOU9y042
6YqtcLEmBJQMGrIJmjTe//PySxKsBfdkudg96dxTKyJy
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:17 2025 by rpki-client