Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/au2s5A8Rljc-m_SbO--2ifkezVI.roa
File: au2s5A8Rljc-m_SbO--2ifkezVI.roa (raw, json)
Hash identifier: UeiYHnIeIZDbFKspeb2YzsJ2pB8eDxonDgWkhDf3Tjw=
Subject key identifier: 6A:ED:AC:E4:0F:11:96:37:3E:9B:F4:9B:3B:EF:B6:89:F9:1E:CD:52
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01939C56FB80A467A4EB5189C6A77C0B4DB7
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/au2s5A8Rljc-m_SbO--2ifkezVI.roa
Signing time: Fri 06 Dec 2024 14:19:26 +0000
ROA not before: Fri 06 Dec 2024 14:19:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 185.104.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:56:fb:80:a4:67:a4:eb:51:89:c6:a7:7c:0b:4d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 6 14:19:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aedace40f1196373e9bf49b3befb689f91ecd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:30:3d:ed:5a:61:0c:5c:e4:04:ad:16:38:
7f:91:50:05:39:35:e7:90:04:c6:0c:98:3a:7a:0e:
f8:41:64:39:b2:66:0c:d3:e8:23:8c:6c:8e:19:9e:
23:7b:9c:3e:ec:54:7b:74:16:e5:4d:a5:cc:2b:f6:
07:c5:3d:b2:1b:16:2a:c0:6c:0e:4b:3b:e8:ed:a5:
34:cc:94:54:9f:89:d9:38:21:a4:c6:8a:a2:7d:c8:
43:b3:bc:d7:c1:46:1a:21:54:e5:67:05:9a:ae:4f:
56:16:f3:51:08:cf:a4:dc:6d:19:59:21:30:a2:b2:
1a:cb:c2:80:c3:30:0b:d2:39:16:d4:c7:9a:b1:42:
23:54:2c:b1:1e:b4:4d:6a:56:a5:2c:9e:de:fa:70:
e3:bf:4b:31:c8:05:81:df:1d:f5:83:2e:dc:2e:68:
b0:e4:b3:09:38:24:79:ea:c3:a6:b2:a0:4a:f0:f6:
e6:77:1a:a0:a6:bc:bc:48:08:89:f7:ba:2d:3f:50:
1e:5b:fa:c8:26:a2:17:c4:1d:c3:3c:b3:50:e0:25:
45:7c:60:fb:19:0d:b3:87:dc:25:d0:95:cc:39:b2:
46:56:98:9f:66:8d:9a:f2:22:fe:9d:9c:6d:9c:ea:
ba:d6:0c:e6:23:8d:53:2e:84:f8:c4:6a:47:ce:ba:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:AC:E4:0F:11:96:37:3E:9B:F4:9B:3B:EF:B6:89:F9:1E:CD:52
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/au2s5A8Rljc-m_SbO--2ifkezVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b2:5a:12:4f:91:8f:48:64:25:16:a3:7c:9b:5b:22:e0:33:
4c:c1:1a:bc:07:7c:af:91:60:55:ed:cf:2d:a8:2a:d7:8c:af:
af:6a:b7:ea:75:14:9a:f9:aa:14:e4:d7:c2:a9:1e:70:f3:93:
f6:54:a0:67:ea:3a:b9:2c:49:0f:61:12:46:c8:33:fb:e4:19:
23:54:59:98:98:f9:ba:1d:92:fc:e6:50:90:4b:1f:8d:ac:e2:
63:33:3c:32:a7:1a:ba:35:f7:e2:17:f0:6a:ba:b3:81:6d:af:
eb:51:36:b3:51:04:a0:51:99:ba:ef:8a:32:46:f3:7c:f5:9c:
80:86:a5:05:9b:71:ec:6e:39:6a:79:0f:42:98:5d:be:af:3e:
dd:03:6e:30:a7:26:ec:84:f4:6d:18:ab:b5:d2:c1:a8:4f:91:
52:ca:59:16:0f:84:77:b1:50:66:80:ec:fb:a9:6f:10:09:61:
bd:46:31:53:5c:3d:99:15:ab:87:7f:ce:37:66:69:6d:cf:1e:
2d:bc:ba:68:21:03:0a:fd:ab:9f:e8:45:78:35:a4:be:19:49:
b3:f2:2f:5d:bb:d2:51:1c:1d:df:cb:da:dd:71:89:14:a1:9f:
46:e2:67:de:e9:29:eb:10:04:fb:cc:e5:fb:c5:7e:17:9a:2f:
8e:78:54:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOcVvuApGek61GJxqd8C023MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjQxMjA2MTQxOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWVkYWNlNDBmMTE5NjM3M2U5YmY0OWIzYmVmYjY4OWY5MWVjZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/kwPe1aYQxc5AStFjh/kVAFOTXn
kATGDJg6eg74QWQ5smYM0+gjjGyOGZ4je5w+7FR7dBblTaXMK/YHxT2yGxYqwGwO
Szvo7aU0zJRUn4nZOCGkxoqifchDs7zXwUYaIVTlZwWark9WFvNRCM+k3G0ZWSEw
orIay8KAwzAL0jkW1MeasUIjVCyxHrRNalalLJ7e+nDjv0sxyAWB3x31gy7cLmiw
5LMJOCR56sOmsqBK8Pbmdxqgpry8SAiJ97otP1AeW/rIJqIXxB3DPLNQ4CVFfGD7
GQ2zh9wl0JXMObJGVpifZo2a8iL+nZxtnOq61gzmI41TLoT4xGpHzrpqCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGrtrOQPEZY3Ppv0mzvvton5Hs1SMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvYXUyczVBOFJsamMtbV9TYk8tLTJpZmtlelZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWiZMA0G
CSqGSIb3DQEBCwUAA4IBAQAOsloST5GPSGQlFqN8m1si4DNMwRq8B3yvkWBV7c8t
qCrXjK+varfqdRSa+aoU5NfCqR5w85P2VKBn6jq5LEkPYRJGyDP75BkjVFmYmPm6
HZL85lCQSx+NrOJjMzwypxq6NffiF/BqurOBba/rUTazUQSgUZm674oyRvN89ZyA
hqUFm3HsbjlqeQ9CmF2+rz7dA24wpybshPRtGKu10sGoT5FSylkWD4R3sVBmgOz7
qW8QCWG9RjFTXD2ZFauHf843Zmltzx4tvLpoIQMK/auf6EV4NaS+GUmz8i9du9JR
HB3fy9rdcYkUoZ9G4mfe6SnrEAT7zOX7xX4Xmi+OeFQ1
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:04 2025 by rpki-client