Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/xtM9Exu1MpgF_pAU0j5YPH1gbiA.roa
File: xtM9Exu1MpgF_pAU0j5YPH1gbiA.roa (raw, json)
Hash identifier: pYU6ImZfAwhHbmhNczwLbBvYWzvjXkHPpiu1ofy5sIA=
Subject key identifier: C6:D3:3D:13:1B:B5:32:98:05:FE:90:14:D2:3E:58:3C:7D:60:6E:20
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 01936AE012711044753F9DB0638D2440FADF
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/xtM9Exu1MpgF_pAU0j5YPH1gbiA.roa
Signing time: Tue 26 Nov 2024 23:48:09 +0000
ROA not before: Tue 26 Nov 2024 23:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34966
IP address blocks: 153.92.184.0/23 maxlen: 24
153.92.186.0/24 maxlen: 24
185.237.32.0/24 maxlen: 24
185.237.33.0/24 maxlen: 24
185.237.35.0/24 maxlen: 24
194.30.174.0/24 maxlen: 24
195.238.224.0/24 maxlen: 24
2a0c:280::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:e0:12:71:10:44:75:3f:9d:b0:63:8d:24:40:fa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Nov 26 23:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d33d131bb5329805fe9014d23e583c7d606e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:bb:61:8d:68:91:d7:1f:be:e6:0b:af:6c:
ca:03:c2:a6:7d:95:ca:87:a2:41:f7:27:b0:df:80:
37:81:07:ea:ce:ed:72:fc:9b:3e:58:65:ff:9a:9c:
e4:41:a6:b8:59:f8:8d:ce:47:ca:bb:8c:f1:a3:fb:
d6:e8:98:2d:33:2d:0d:c9:ba:51:7e:58:c2:f4:aa:
4a:0e:a6:6f:aa:bf:02:75:9b:35:2a:d0:40:f3:05:
90:ae:c4:31:58:2b:7e:7c:79:62:a4:7f:f4:a0:12:
4a:12:cb:cb:a0:49:e1:9c:e5:58:ed:c1:e4:72:ea:
8c:9e:d7:f1:3a:b2:d0:d8:11:5c:a4:2b:50:58:5a:
8a:c2:a4:b5:6e:b6:ec:4f:bb:47:d8:cf:3e:d4:ba:
c9:76:5d:79:dc:d0:58:64:02:38:f9:f7:69:d9:17:
66:cc:ab:96:a7:60:91:bd:d3:d6:f7:6e:88:4f:0c:
cc:35:f9:f7:e6:68:85:1d:23:d5:4f:ca:cc:8c:3c:
7e:0f:ab:05:f6:3c:d7:0b:46:c5:e2:95:41:47:5c:
4a:dd:0d:ab:42:ac:3f:2a:2d:bb:91:8c:a9:40:d0:
c2:9a:88:1c:7f:8c:54:5f:44:bf:13:73:b3:a8:55:
02:63:cf:97:6f:ec:5e:9f:ea:25:58:c6:ef:2e:87:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:3D:13:1B:B5:32:98:05:FE:90:14:D2:3E:58:3C:7D:60:6E:20
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/xtM9Exu1MpgF_pAU0j5YPH1gbiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.184.0-153.92.186.255
185.237.32.0/23
185.237.35.0/24
194.30.174.0/24
195.238.224.0/24
IPv6:
2a0c:280::/30
Signature Algorithm: sha256WithRSAEncryption
1a:cb:74:4b:eb:be:3d:3d:b1:9e:50:90:f2:86:6d:c8:cb:64:
a8:60:e4:aa:74:5c:3a:4b:cb:13:53:00:ec:ab:6b:e0:de:66:
8e:bd:e6:a0:6a:c2:23:b5:ac:f8:54:05:e0:8d:da:97:34:07:
da:8d:8e:09:be:7b:e9:88:2f:68:8f:3b:af:b3:3c:13:d8:dd:
62:e6:14:a3:dd:da:40:4d:b8:d9:a1:87:46:23:7d:f2:a8:e2:
20:b3:ff:13:c8:70:c3:b4:eb:73:e8:57:a3:65:fe:73:82:e5:
37:4e:63:86:92:09:e6:55:eb:09:e7:c0:c6:cd:5b:ae:24:94:
a8:a4:3e:89:92:7d:9a:1c:8c:e8:fb:fa:d1:a4:a2:a7:17:20:
9f:ab:34:d0:92:a7:79:f9:22:3d:b4:a3:90:59:b8:82:0a:0d:
5a:24:78:67:6c:6b:3d:66:fd:0d:61:2f:b7:56:01:d1:75:af:
21:97:ca:86:37:ce:9e:75:83:c8:71:1b:d1:7b:3d:02:b5:d7:
98:a4:f4:a4:b8:66:a0:6e:60:fb:dd:c5:6c:c5:b4:66:98:d3:
76:bf:7b:4b:f3:11:d7:2a:9e:ba:3a:1c:e0:f0:46:89:49:b4:
b0:6b:c7:83:96:3e:68:37:5a:71:e0:22:3e:7b:f0:4b:fe:12:
50:7a:26:6f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZNq4BJxEER1P52wY40kQPrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5
NjMxZDEwHhcNMjQxMTI2MjM0ODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQzM2QxMzFiYjUzMjk4MDVmZTkwMTRkMjNlNTgzYzdkNjA2ZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ee7YY1okdcfvuYLr2zKA8KmfZXK
h6JB9yew34A3gQfqzu1y/Js+WGX/mpzkQaa4WfiNzkfKu4zxo/vW6JgtMy0NybpR
fljC9KpKDqZvqr8CdZs1KtBA8wWQrsQxWCt+fHlipH/0oBJKEsvLoEnhnOVY7cHk
cuqMntfxOrLQ2BFcpCtQWFqKwqS1brbsT7tH2M8+1LrJdl153NBYZAI4+fdp2Rdm
zKuWp2CRvdPW926ITwzMNfn35miFHSPVT8rMjDx+D6sF9jzXC0bF4pVBR1xK3Q2r
Qqw/Ki27kYypQNDCmogcf4xUX0S/E3OzqFUCY8+Xb+xen+olWMbvLofEFQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFMbTPRMbtTKYBf6QFNI+WDx9YG4gMB8GA1UdIwQY
MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt
MDMwNzdlMzdjNjFhLzEveHRNOUV4dTFNcGdGX3BBVTBqNVlQSDFnYmlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh
LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmMAwDBAOZXLgD
BACZXLoDBAG57SADBAC57SMDBADCHq4DBADD7uAwDQQCAAIwBwMFAioMAoAwDQYJ
KoZIhvcNAQELBQADggEBABrLdEvrvj09sZ5QkPKGbcjLZKhg5Kp0XDpLyxNTAOyr
a+DeZo695qBqwiO1rPhUBeCN2pc0B9qNjgm+e+mIL2iPO6+zPBPY3WLmFKPd2kBN
uNmhh0YjffKo4iCz/xPIcMO063PoV6Nl/nOC5TdOY4aSCeZV6wnnwMbNW64klKik
PomSfZocjOj7+tGkoqcXIJ+rNNCSp3n5Ij20o5BZuIIKDVokeGdsaz1m/Q1hL7dW
AdF1ryGXyoY3zp51g8hxG9F7PQK115ik9KS4ZqBuYPvdxWzFtGaY03a/e0vzEdcq
nro6HODwRolJtLBrx4OWPmg3WnHgIj578Ev+ElB6Jm8=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:42 2025 by rpki-client