Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/9ibi7L3dMBj808wxA_1WZpShYqQ.roa
File: 9ibi7L3dMBj808wxA_1WZpShYqQ.roa (raw, json)
Hash identifier: bIsfT/zdmGg2ybwb8tp5Y99kFc4yCAds+KNtC3VtYaM=
Subject key identifier: F6:26:E2:EC:BD:DD:30:18:FC:D3:CC:31:03:FD:56:66:94:A1:62:A4
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 018DB2110A231F8F37AA1157781C3A5F9CBE
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/9ibi7L3dMBj808wxA_1WZpShYqQ.roa
Signing time: Fri 16 Feb 2024 13:17:57 +0000
ROA not before: Fri 16 Feb 2024 13:17:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206947
IP address blocks: 185.198.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 08:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:11:0a:23:1f:8f:37:aa:11:57:78:1c:3a:5f:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Feb 16 13:17:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f626e2ecbddd3018fcd3cc3103fd566694a162a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:f2:9d:83:3c:d3:9e:67:d9:fe:ad:26:25:
61:14:75:90:ea:61:1f:51:ef:15:74:3c:bb:d4:51:
55:fb:69:ee:cd:cc:1d:d1:9e:a1:00:0f:ee:cc:df:
4d:c6:03:18:19:de:6c:6a:f7:e0:35:c5:eb:39:d1:
31:df:fb:72:25:15:5c:ea:1b:57:30:a2:1c:64:d5:
8b:ff:59:c9:73:01:3f:87:c8:d8:b1:55:7b:4e:41:
02:71:7c:4b:72:df:42:9e:d5:4c:15:6a:56:8f:14:
e2:b9:4c:79:d0:1f:f4:78:d6:b2:2c:1a:71:3a:e0:
da:28:f8:82:4d:79:9b:ff:6a:c8:cf:7b:d0:f6:84:
fe:a5:30:f2:16:1d:0e:09:9a:89:11:53:e5:6a:fd:
8a:05:ca:b2:59:11:ea:2d:e8:88:2b:6d:59:89:e6:
f9:55:59:84:23:93:cb:26:92:da:31:5a:08:3a:4e:
7b:88:31:2d:d0:a9:6f:d9:ff:2a:b2:da:0d:e6:a8:
a6:9f:86:6a:e1:fd:64:78:68:6a:5c:e0:4d:f0:d6:
c4:e8:04:0a:70:3f:e9:18:90:c0:9b:de:b0:50:a0:
b9:59:18:04:73:06:d0:ac:f1:a3:a8:0a:44:1b:36:
11:23:ff:f6:0a:bf:87:3d:e0:b1:0d:5c:a4:29:d9:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:E2:EC:BD:DD:30:18:FC:D3:CC:31:03:FD:56:66:94:A1:62:A4
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/9ibi7L3dMBj808wxA_1WZpShYqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.210.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fc:03:40:c4:62:29:85:42:f9:88:b5:5a:81:1b:e2:a1:10:
34:8a:1e:ab:80:65:16:16:b3:e8:8b:11:30:c8:5a:d2:86:37:
29:ac:43:6f:61:eb:7e:a1:31:4e:a7:9e:44:99:e0:de:4c:a8:
04:2b:57:83:ce:1e:c7:ec:b3:2b:a1:3c:c3:ab:2c:16:d4:68:
c4:ce:ce:d1:ac:ba:a7:45:23:09:08:72:27:59:14:bb:60:7c:
c8:fd:2b:20:87:8e:e0:63:f9:59:8a:e4:c2:62:03:65:bd:77:
0b:70:bf:85:28:99:e1:c3:5a:02:99:e9:ee:21:fa:ba:a7:2e:
cf:8b:93:0f:e8:e9:4f:2e:00:c4:94:9e:51:3b:aa:3e:97:0c:
8c:13:68:38:18:55:5f:ef:b7:09:97:ec:c3:b4:21:2a:1d:fd:
7d:8e:dd:db:86:8d:68:72:9d:ca:79:52:1e:d5:e3:d4:a5:d6:
38:6f:44:52:92:82:55:84:29:f6:84:b3:b6:6e:88:6a:5c:f0:
b5:bc:4b:5d:36:d2:60:0a:74:a6:f0:26:48:58:24:aa:8b:6f:
a6:6d:89:24:eb:6c:56:1b:e8:fb:97:08:89:8c:13:4c:0c:91:
c4:71:3e:2f:3f:e1:92:d0:e6:60:a1:8e:e3:a0:dd:47:16:d9:
73:cc:17:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2yEQojH483qhFXeBw6X5y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl
YTM0ZWMwHhcNMjQwMjE2MTMxNzU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjI2ZTJlY2JkZGQzMDE4ZmNkM2NjMzEwM2ZkNTY2Njk0YTE2MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvXynYM8055n2f6tJiVhFHWQ6mEf
Ue8VdDy71FFV+2nuzcwd0Z6hAA/uzN9NxgMYGd5savfgNcXrOdEx3/tyJRVc6htX
MKIcZNWL/1nJcwE/h8jYsVV7TkECcXxLct9CntVMFWpWjxTiuUx50B/0eNayLBpx
OuDaKPiCTXmb/2rIz3vQ9oT+pTDyFh0OCZqJEVPlav2KBcqyWRHqLeiIK21Zieb5
VVmEI5PLJpLaMVoIOk57iDEt0Klv2f8qstoN5qimn4Zq4f1keGhqXOBN8NbE6AQK
cD/pGJDAm96wUKC5WRgEcwbQrPGjqApEGzYRI//2Cr+HPeCxDVykKdlSMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPYm4uy93TAY/NPMMQP9VmaUoWKkMB8GA1UdIwQY
MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEvOWliaTdMM2RNQmo4MDh3eEFfMVdacFNoWXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucbSMA0G
CSqGSIb3DQEBCwUAA4IBAQBz/ANAxGIphUL5iLVagRvioRA0ih6rgGUWFrPoixEw
yFrShjcprENvYet+oTFOp55EmeDeTKgEK1eDzh7H7LMroTzDqywW1GjEzs7RrLqn
RSMJCHInWRS7YHzI/Ssgh47gY/lZiuTCYgNlvXcLcL+FKJnhw1oCmenuIfq6py7P
i5MP6OlPLgDElJ5RO6o+lwyME2g4GFVf77cJl+zDtCEqHf19jt3bho1ocp3KeVIe
1ePUpdY4b0RSkoJVhCn2hLO2bohqXPC1vEtdNtJgCnSm8CZIWCSqi2+mbYkk62xW
G+j7lwiJjBNMDJHEcT4vP+GS0OZgoY7joN1HFtlzzBdp
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:18 2025 by rpki-client