Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/SreTOsgMPzwu08Mb2UJHZsw_zUk.roa
File: SreTOsgMPzwu08Mb2UJHZsw_zUk.roa (raw, json)
Hash identifier: ivTOQROJ6z+jw8vNiE946Kmg1Q0X/kZFHMuJD8apPjY=
Subject key identifier: 4A:B7:93:3A:C8:0C:3F:3C:2E:D3:C3:1B:D9:42:47:66:CC:3F:CD:49
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 0193E7EAB914BC9B1F8E4C9EE22A5A514B28
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/SreTOsgMPzwu08Mb2UJHZsw_zUk.roa
Signing time: Sat 21 Dec 2024 06:32:19 +0000
ROA not before: Sat 21 Dec 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e7:ea:b9:14:bc:9b:1f:8e:4c:9e:e2:2a:5a:51:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Dec 21 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ab7933ac80c3f3c2ed3c31bd9424766cc3fcd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:18:e5:67:ce:fa:6b:bb:be:70:e5:cd:5b:
02:1d:1b:b1:92:89:68:6a:39:c2:06:ce:8e:89:48:
7f:40:6b:ec:dc:97:1d:5b:20:c9:30:07:1d:2e:81:
7d:9e:14:16:21:e2:96:20:23:95:b7:39:49:29:e9:
82:62:74:d9:48:b3:bb:50:51:2d:da:18:12:68:89:
2f:ea:f2:0d:be:38:87:d1:db:13:cc:ea:8c:ee:e7:
9d:88:1b:70:76:17:71:d4:81:f4:49:a5:86:c7:d1:
3d:f1:6a:5e:13:98:0e:ef:78:22:d4:2e:c4:ec:b9:
08:a4:92:91:20:bf:05:87:62:f1:02:50:28:35:93:
0b:2c:41:27:89:e3:92:10:07:b5:9c:de:a8:c0:6e:
14:ae:3b:3c:32:7c:fb:25:ca:24:55:70:92:78:6a:
cf:0e:39:64:e3:ba:aa:7a:0e:c4:15:5e:6d:a0:31:
f7:e6:b8:0c:b4:0e:9a:a6:d7:02:fe:e9:3d:00:dd:
c6:2e:49:16:08:7e:4e:61:13:dd:0e:5b:0d:16:33:
26:b1:a5:39:f7:f1:5f:b2:cc:c2:62:44:99:f2:ff:
00:81:9e:77:66:2f:2a:46:af:9f:2c:db:8e:68:e3:
2c:31:7d:da:4d:75:b9:5e:81:7c:dc:1e:9e:ce:f5:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:93:3A:C8:0C:3F:3C:2E:D3:C3:1B:D9:42:47:66:CC:3F:CD:49
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/SreTOsgMPzwu08Mb2UJHZsw_zUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e6:40:f7:c0:f3:46:e4:a7:57:da:fa:1c:af:95:4d:a1:a5:
66:e4:04:56:18:c5:14:91:93:53:59:9c:52:99:7d:9d:86:6a:
3e:d4:f4:c8:d1:91:61:0c:04:a7:de:02:94:b2:14:5d:a0:02:
f2:ad:03:70:a5:19:d4:b2:4f:cc:fc:d8:ac:fe:98:77:d3:01:
50:69:c2:ce:cf:82:3e:b4:91:9b:5a:fc:3e:d8:df:6d:60:e7:
d9:ec:e6:ef:e5:15:d7:37:44:a7:cb:e9:33:eb:92:8c:f5:93:
62:76:98:39:cc:86:9e:d1:36:3b:a5:93:90:e8:93:09:fd:30:
f0:09:7e:a1:0c:f5:de:ae:4c:b2:31:5c:ef:a2:f3:3e:04:46:
3d:e2:51:f7:7e:cd:6d:7b:57:a5:f1:de:a6:40:c9:49:ce:7f:
35:9b:0a:41:c8:46:e8:08:7b:7c:40:8f:26:02:a7:53:74:d4:
a0:13:2c:9a:d7:51:48:b4:7b:26:1e:44:29:80:bf:5c:5f:ea:
64:45:13:75:f6:a9:4c:a9:df:10:5d:ab:74:0d:da:2b:ef:27:
db:44:ec:e6:eb:3c:e1:70:18:5b:07:65:dd:cd:12:6f:4d:08:
52:bc:18:c9:15:ea:f0:54:53:93:cd:f2:d9:a9:3c:e1:38:24:
8a:e7:3e:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPn6rkUvJsfjkye4ipaUUsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjQxMjIxMDYzMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWI3OTMzYWM4MGMzZjNjMmVkM2MzMWJkOTQyNDc2NmNjM2ZjZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyEY5WfO+mu7vnDlzVsCHRuxkolo
ajnCBs6OiUh/QGvs3JcdWyDJMAcdLoF9nhQWIeKWICOVtzlJKemCYnTZSLO7UFEt
2hgSaIkv6vINvjiH0dsTzOqM7uediBtwdhdx1IH0SaWGx9E98WpeE5gO73gi1C7E
7LkIpJKRIL8Fh2LxAlAoNZMLLEEnieOSEAe1nN6owG4Urjs8Mnz7JcokVXCSeGrP
Djlk47qqeg7EFV5toDH35rgMtA6aptcC/uk9AN3GLkkWCH5OYRPdDlsNFjMmsaU5
9/FfsszCYkSZ8v8AgZ53Zi8qRq+fLNuOaOMsMX3aTXW5XoF83B6ezvWrjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEq3kzrIDD88LtPDG9lCR2bMP81JMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvU3JlVE9zZ01Qend1MDhNYjJVSkhac3dfelVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudySMA0G
CSqGSIb3DQEBCwUAA4IBAQA/5kD3wPNG5KdX2vocr5VNoaVm5ARWGMUUkZNTWZxS
mX2dhmo+1PTI0ZFhDASn3gKUshRdoALyrQNwpRnUsk/M/Nis/ph30wFQacLOz4I+
tJGbWvw+2N9tYOfZ7Obv5RXXN0Sny+kz65KM9ZNidpg5zIae0TY7pZOQ6JMJ/TDw
CX6hDPXerkyyMVzvovM+BEY94lH3fs1te1el8d6mQMlJzn81mwpByEboCHt8QI8m
AqdTdNSgEyya11FItHsmHkQpgL9cX+pkRRN19qlMqd8QXat0Ddor7yfbROzm6zzh
cBhbB2XdzRJvTQhSvBjJFerwVFOTzfLZqTzhOCSK5z58
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:25 2025 by rpki-client