Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/1-cMSnjcnTD3cRvpzOo_BYkVKaS8.roa
File: 1-cMSnjcnTD3cRvpzOo_BYkVKaS8.roa (raw, json)
Hash identifier: JEfBhk//IRq8lCz0uwj2qykoePP9Hegi26qXx7s/O+Q=
Subject key identifier: F9:C3:12:9E:37:27:4C:3D:DC:46:FA:73:3A:8F:C1:62:45:4A:69:2F
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 018CC793EE6284B426774DE8CFCCFBCD9E26
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/1-cMSnjcnTD3cRvpzOo_BYkVKaS8.roa
Signing time: Tue 02 Jan 2024 00:30:09 +0000
ROA not before: Tue 02 Jan 2024 00:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206091
IP address blocks: 185.196.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:ee:62:84:b4:26:77:4d:e8:cf:cc:fb:cd:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jan 2 00:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9c3129e37274c3ddc46fa733a8fc162454a692f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:c9:8b:a4:b6:b9:64:03:5e:56:59:13:ea:
e0:6b:fb:bc:d9:33:21:9d:4d:a0:28:81:77:6d:64:
47:f3:62:b0:77:79:46:19:09:f8:8d:5e:63:0f:2c:
6c:b0:a7:5a:b5:39:2d:dd:a7:f4:18:3d:84:5c:5e:
2b:16:ec:6e:9a:3d:24:cd:f6:fc:11:15:be:96:6c:
40:81:d1:11:82:91:45:31:d4:fa:2d:b1:48:30:91:
3c:01:fa:0e:a2:4c:e0:42:b7:7e:e5:fc:87:16:4b:
2e:8d:9d:5b:1f:00:cf:4c:0a:8d:75:da:d9:de:fa:
d3:15:ab:75:aa:a2:00:46:60:dd:ff:99:9e:87:67:
4c:4e:2e:fb:c7:d4:2a:68:c5:0b:aa:62:09:42:5c:
46:41:66:98:4b:ea:fb:61:88:34:7f:c6:ae:f2:68:
74:b0:8d:ea:20:7e:c2:b7:79:91:76:38:d8:0c:99:
86:2d:2c:06:8c:2c:6e:ad:d8:3c:42:cf:be:a0:ff:
cb:61:18:ec:88:f4:66:54:3d:cb:4c:b2:33:6e:71:
6b:4d:61:3f:89:c8:b7:b4:b1:bc:d5:95:02:a7:7a:
ca:77:02:33:5c:c3:73:cf:2d:0e:7c:c2:48:b1:22:
08:76:ca:2f:66:c4:06:dd:e3:d4:29:e3:22:3d:38:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:12:9E:37:27:4C:3D:DC:46:FA:73:3A:8F:C1:62:45:4A:69:2F
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/1-cMSnjcnTD3cRvpzOo_BYkVKaS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.176.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:a1:0f:a3:70:19:6e:90:7d:75:c8:d1:6c:d1:d4:8c:66:72:
68:e8:aa:61:bd:e4:b1:dc:04:30:f1:4c:dd:4d:69:b1:1c:fd:
35:4d:b3:28:57:a1:ac:c2:2a:f0:fe:45:0d:71:f5:8c:5e:3d:
c1:c5:99:c0:0a:47:9e:ad:b1:b2:c1:41:b0:44:6f:ec:b3:68:
36:0d:59:64:37:19:23:59:c2:fb:b0:52:cd:c3:fb:9d:8b:e7:
4f:d4:5f:27:a1:a7:8b:3a:4d:1c:5e:99:f5:dd:2e:36:0e:73:
4a:3a:d9:c7:89:a9:0b:69:03:76:9b:01:e9:5b:d3:8b:c4:6e:
e6:11:8d:98:15:cb:ea:ad:9b:74:26:7f:2b:61:04:36:09:a5:
41:00:b9:5c:0a:61:13:47:f8:59:81:30:10:82:f8:5e:d7:09:
ea:dd:43:8a:24:3f:4d:40:8c:b3:25:ba:b8:36:f7:a0:ce:49:
49:82:cd:d4:de:92:a0:39:f6:69:4f:68:7f:43:5e:fe:29:b1:
1b:bd:63:31:09:9f:7c:c8:69:7f:f1:70:5f:bc:e7:c0:26:26:
83:47:71:b6:4b:c0:07:4d:d2:c8:26:75:35:0b:34:e9:93:88:
81:9b:36:f4:2a:53:41:c6:d4:f7:64:af:33:bc:83:0e:11:3b:
9f:81:a9:3d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzHk+5ihLQmd03oz8z7zZ4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj
MGFjYTYwHhcNMjQwMTAyMDAzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWMzMTI5ZTM3Mjc0YzNkZGM0NmZhNzMzYThmYzE2MjQ1NGE2OTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSzJi6S2uWQDXlZZE+rga/u82TMh
nU2gKIF3bWRH82Kwd3lGGQn4jV5jDyxssKdatTkt3af0GD2EXF4rFuxumj0kzfb8
ERW+lmxAgdERgpFFMdT6LbFIMJE8AfoOokzgQrd+5fyHFksujZ1bHwDPTAqNddrZ
3vrTFat1qqIARmDd/5meh2dMTi77x9QqaMULqmIJQlxGQWaYS+r7YYg0f8au8mh0
sI3qIH7Ct3mRdjjYDJmGLSwGjCxurdg8Qs++oP/LYRjsiPRmVD3LTLIzbnFrTWE/
ici3tLG81ZUCp3rKdwIzXMNzzy0OfMJIsSIIdsovZsQG3ePUKeMiPTirfQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPnDEp43J0w93Eb6czqPwWJFSmkvMB8GA1UdIwQY
MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt
OGU5YjUxMWNhYzFhLzEvMS1jTVNuamNuVEQzY1J2cHpPb19CWWtWS2FTOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYWIvMjdlMDMxLTEzODYtNGZjYS1iYmUxLThlOWI1MTFjYWMx
YS8xL2NsQzZyZjhzS0d4Z3VXRUgwc1pOVTM3QXJLWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnEsDAN
BgkqhkiG9w0BAQsFAAOCAQEArqEPo3AZbpB9dcjRbNHUjGZyaOiqYb3ksdwEMPFM
3U1psRz9NU2zKFehrMIq8P5FDXH1jF49wcWZwApHnq2xssFBsERv7LNoNg1ZZDcZ
I1nC+7BSzcP7nYvnT9RfJ6GnizpNHF6Z9d0uNg5zSjrZx4mpC2kDdpsB6VvTi8Ru
5hGNmBXL6q2bdCZ/K2EENgmlQQC5XAphE0f4WYEwEIL4XtcJ6t1DiiQ/TUCMsyW6
uDb3oM5JSYLN1N6SoDn2aU9of0Ne/imxG71jMQmffMhpf/FwX7znwCYmg0dxtkvA
B03SyCZ1NQs06ZOIgZs29CpTQcbU92SvM7yDDhE7n4GpPQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:22 2025 by rpki-client