Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/Dh_rTgvMLfyLcVW9sVEOSJAPNmE.roa
File: Dh_rTgvMLfyLcVW9sVEOSJAPNmE.roa (raw, json)
Hash identifier: 0sHPYAejyaINQ5g+xJKp3rh/SmZUYj0q4zpZYZmojMg=
Subject key identifier: 0E:1F:EB:4E:0B:CC:2D:FC:8B:71:55:BD:B1:51:0E:48:90:0F:36:61
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 018CC8DFAE9294082376542F6EFC6DF5F056
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/Dh_rTgvMLfyLcVW9sVEOSJAPNmE.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25433
IP address blocks: 94.232.160.0/21 maxlen: 21
185.197.80.0/22 maxlen: 22
2a0a:7840::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ae:92:94:08:23:76:54:2f:6e:fc:6d:f5:f0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e1feb4e0bcc2dfc8b7155bdb1510e48900f3661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:46:a5:16:fd:29:cb:ff:2f:55:8b:45:1c:
f7:3f:5c:0b:a7:e0:ed:c6:7e:87:ab:b9:61:cf:92:
60:90:a8:0b:ad:1f:5f:ee:e6:ad:1b:29:6a:b0:c4:
24:dc:9e:55:8d:63:52:bb:5d:7c:2f:5b:d4:52:6e:
b9:65:e9:62:09:56:f0:22:d3:47:d1:a9:ea:2a:32:
0c:dd:3a:c7:fc:a2:db:6c:69:ac:78:bc:ef:9f:aa:
06:5e:3c:ab:05:1f:ea:21:fd:78:1f:b0:f6:75:4a:
21:d4:9b:3e:9c:32:d4:89:25:ac:66:eb:87:81:f1:
65:9a:cd:28:5e:36:f2:3b:b5:0e:0d:75:98:98:71:
18:d1:28:48:1f:35:be:76:3e:20:fc:49:8c:00:53:
0a:78:f0:34:a2:b5:af:a9:09:89:d2:bd:fc:00:57:
24:6f:fe:fc:9d:0e:38:b4:94:84:e3:f6:43:67:96:
1f:20:b1:68:5d:eb:bd:dc:d1:da:17:e6:67:6e:29:
dd:d9:58:38:15:18:5f:69:44:87:3d:6c:3c:69:1b:
42:d5:00:e3:21:4a:0e:a7:d6:a0:36:89:62:e6:92:
de:4d:4f:92:e8:4b:10:1a:d2:9d:13:69:33:b1:50:
4e:be:df:43:0b:bf:e1:82:9c:d7:e6:98:7a:06:de:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:EB:4E:0B:CC:2D:FC:8B:71:55:BD:B1:51:0E:48:90:0F:36:61
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/Dh_rTgvMLfyLcVW9sVEOSJAPNmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.160.0/21
185.197.80.0/22
IPv6:
2a0a:7840::/29
Signature Algorithm: sha256WithRSAEncryption
3d:4e:2b:df:5d:a7:ea:ef:eb:db:e7:26:41:18:8e:e6:77:92:
55:da:b1:2b:88:38:bd:2e:93:e7:eb:9f:5c:4d:c8:e3:e3:a9:
6e:bc:e1:48:60:47:f2:8f:57:e8:dd:ee:30:c0:e2:43:e2:b2:
b5:c8:6b:ea:5e:1d:c6:5f:64:8e:e0:ae:6a:d0:88:eb:5c:7c:
b9:82:b0:95:88:85:5e:bf:7b:bb:0a:ea:cf:90:35:56:0e:4a:
94:ca:60:11:04:fa:a1:66:61:b5:5c:34:06:87:19:64:86:89:
d9:55:d2:59:d6:ed:18:63:d5:eb:9d:6f:80:24:29:df:98:1b:
08:20:7d:6d:13:79:ac:3d:e7:da:c8:c9:37:f8:a2:21:ca:53:
8a:86:94:d7:40:20:95:ea:cc:1e:7f:f8:4d:98:98:cd:a3:16:
86:b1:db:55:44:5a:65:7a:63:36:71:57:fb:d9:e9:9c:03:8b:
47:9b:1c:85:3f:7a:22:5c:f2:6d:de:66:61:c1:d8:01:99:3e:
91:3f:4b:29:d1:28:dc:4c:23:c1:72:97:07:c4:7f:db:53:8c:
38:94:19:89:fc:c9:da:4e:7c:0a:11:ba:59:f1:65:10:39:90:
d2:a0:19:4f:ed:e6:9a:60:82:c4:a2:73:25:d0:a7:bc:cb:18:
fd:04:66:8d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzI366SlAgjdlQvbvxt9fBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjI1OTlkOTVlYzkxOTMyN2ZmNjg3NDJkNmM0OWMyYTZh
NTQ4ODgwHhcNMjQwMTAyMDYzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTFmZWI0ZTBiY2MyZGZjOGI3MTU1YmRiMTUxMGU0ODkwMGYzNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQJGpRb9Kcv/L1WLRRz3P1wLp+Dt
xn6Hq7lhz5JgkKgLrR9f7uatGylqsMQk3J5VjWNSu118L1vUUm65ZeliCVbwItNH
0anqKjIM3TrH/KLbbGmseLzvn6oGXjyrBR/qIf14H7D2dUoh1Js+nDLUiSWsZuuH
gfFlms0oXjbyO7UODXWYmHEY0ShIHzW+dj4g/EmMAFMKePA0orWvqQmJ0r38AFck
b/78nQ44tJSE4/ZDZ5YfILFoXeu93NHaF+Znbind2Vg4FRhfaUSHPWw8aRtC1QDj
IUoOp9agNoli5pLeTU+S6EsQGtKdE2kzsVBOvt9DC7/hgpzX5ph6Bt4mXwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA4f604LzC38i3FVvbFRDkiQDzZhMB8GA1UdIwQY
MBaAFHPyWZ2V7JGTJ/9odC1sScKmpUiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTct
MTgzMDlkOGE0YzYzLzEvRGhfclRndk1MZnlMY1ZXOXNWRU9TSkFQTm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTctMTgzMDlkOGE0YzYz
LzEvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXuigAwQC
ucVQMA0EAgACMAcDBQMqCnhAMA0GCSqGSIb3DQEBCwUAA4IBAQA9TivfXafq7+vb
5yZBGI7md5JV2rEriDi9LpPn659cTcjj46luvOFIYEfyj1fo3e4wwOJD4rK1yGvq
Xh3GX2SO4K5q0IjrXHy5grCViIVev3u7CurPkDVWDkqUymARBPqhZmG1XDQGhxlk
honZVdJZ1u0YY9XrnW+AJCnfmBsIIH1tE3msPefayMk3+KIhylOKhpTXQCCV6swe
f/hNmJjNoxaGsdtVRFplemM2cVf72emcA4tHmxyFP3oiXPJt3mZhwdgBmT6RP0sp
0SjcTCPBcpcHxH/bU4w4lBmJ/MnaTnwKEbpZ8WUQOZDSoBlP7eaaYILEonMl0Ke8
yxj9BGaN
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:58 2025 by rpki-client