Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/3uIxM_nOOBTKCVVAg1Th8IMks00.roa
File: 3uIxM_nOOBTKCVVAg1Th8IMks00.roa (raw, json)
Hash identifier: 0Js7MpInX0SV9QypLxwli6iAKiAufoWmyXj7oEQFBWY=
Subject key identifier: DE:E2:31:33:F9:CE:38:14:CA:09:55:40:83:54:E1:F0:83:24:B3:4D
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194282643C02C4D8D72FC29BF1A9BF78DE8
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/3uIxM_nOOBTKCVVAg1Th8IMks00.roa
Signing time: Thu 02 Jan 2025 17:53:03 +0000
ROA not before: Thu 02 Jan 2025 17:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:43:c0:2c:4d:8d:72:fc:29:bf:1a:9b:f7:8d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dee23133f9ce3814ca0955408354e1f08324b34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:f7:e3:c2:ef:a5:35:08:a1:f2:e0:7a:13:
66:03:19:72:07:e9:87:89:9c:0f:a0:1c:3a:13:7e:
11:fd:85:17:0a:a2:2f:f1:9c:d3:25:b5:04:f2:88:
89:24:03:c0:2f:56:4d:9d:fe:bd:9d:d7:5b:21:5b:
0e:26:5b:d9:86:6d:a3:8b:68:32:50:84:96:f1:a9:
ac:e3:39:45:1a:69:29:fd:d8:f0:e1:60:5d:ab:ac:
3c:00:99:0d:a1:44:31:60:4f:5d:1d:a3:6a:19:82:
27:60:b5:47:21:58:f6:9f:aa:0a:d8:2a:69:3d:a6:
31:bc:a4:a5:f1:3f:58:72:38:a2:06:4e:cb:18:3c:
7b:0b:ca:81:6e:d3:e8:b8:6e:ab:90:49:55:d7:fc:
23:d6:2e:17:30:1a:ee:27:40:3d:7c:8b:b8:36:91:
3c:cb:29:ad:de:83:88:81:c2:b9:33:15:26:6e:90:
15:42:7f:cc:86:ba:b9:83:50:cf:47:24:91:1f:9f:
ef:97:af:6e:76:01:bd:ba:92:d4:61:7a:84:e5:ba:
8a:c4:e4:24:2e:81:6d:ba:b5:30:ba:e0:eb:1c:1b:
63:2b:e5:4d:6c:63:39:fb:46:77:a4:68:7c:ee:80:
25:26:0a:86:dd:d5:01:e5:71:63:26:a1:9d:c1:91:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:31:33:F9:CE:38:14:CA:09:55:40:83:54:E1:F0:83:24:B3:4D
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/3uIxM_nOOBTKCVVAg1Th8IMks00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3f:63:49:61:24:52:fb:43:9a:3e:c8:37:52:c5:02:a0:9e:
a1:cc:f5:95:48:0e:5b:42:3e:1f:1b:fb:fa:b5:da:29:3f:f1:
41:ca:35:bb:12:f4:87:f0:c7:12:fb:51:87:60:06:79:83:d9:
01:fe:8d:dd:d8:1b:b0:fb:8e:68:bd:f6:7c:ba:c7:b2:ec:f1:
74:5f:b9:20:d3:6e:9e:44:2a:93:4b:c5:0f:3a:e4:a9:6c:fe:
91:bc:a1:41:88:8d:33:82:48:d4:77:95:37:3c:d7:08:f6:f6:
4f:87:17:6d:96:d3:eb:b5:cf:53:86:3e:9b:b4:7d:49:e2:06:
88:46:d7:fb:7c:4f:42:a9:7c:3a:07:78:31:df:f8:6b:5d:15:
6e:ce:79:5a:7a:54:9a:16:86:19:fb:47:5c:40:fc:39:05:aa:
b6:e1:f7:eb:a3:a1:31:d0:8b:fe:69:32:dd:af:84:3b:e4:a1:
99:81:30:35:b5:d5:02:9d:b7:21:27:e9:18:87:15:65:71:04:
60:b5:96:ae:ef:70:2d:45:73:28:20:56:b2:dc:06:0a:56:fa:
7a:1e:75:98:4e:fa:67:c3:e0:3a:b1:a2:6c:86:c9:f0:4d:ac:
45:77:cd:e9:5f:c4:cd:81:73:0d:b0:c4:41:2d:0f:a0:e1:28:
76:b9:be:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJkPALE2Ncvwpvxqb943oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwMTAyMTc1MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWUyMzEzM2Y5Y2UzODE0Y2EwOTU1NDA4MzU0ZTFmMDgzMjRiMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV3348LvpTUIofLgehNmAxlyB+mH
iZwPoBw6E34R/YUXCqIv8ZzTJbUE8oiJJAPAL1ZNnf69nddbIVsOJlvZhm2ji2gy
UISW8ams4zlFGmkp/djw4WBdq6w8AJkNoUQxYE9dHaNqGYInYLVHIVj2n6oK2Cpp
PaYxvKSl8T9YcjiiBk7LGDx7C8qBbtPouG6rkElV1/wj1i4XMBruJ0A9fIu4NpE8
yymt3oOIgcK5MxUmbpAVQn/Mhrq5g1DPRySRH5/vl69udgG9upLUYXqE5bqKxOQk
LoFturUwuuDrHBtjK+VNbGM5+0Z3pGh87oAlJgqG3dUB5XFjJqGdwZF2pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7iMTP5zjgUyglVQINU4fCDJLNNMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvM3VJeE1fbk9PQlRLQ1ZWQWcxVGg4SU1rczAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzRMA0G
CSqGSIb3DQEBCwUAA4IBAQCQP2NJYSRS+0OaPsg3UsUCoJ6hzPWVSA5bQj4fG/v6
tdopP/FByjW7EvSH8McS+1GHYAZ5g9kB/o3d2Buw+45ovfZ8usey7PF0X7kg026e
RCqTS8UPOuSpbP6RvKFBiI0zgkjUd5U3PNcI9vZPhxdtltPrtc9Thj6btH1J4gaI
Rtf7fE9CqXw6B3gx3/hrXRVuznlaelSaFoYZ+0dcQPw5Baq24ffro6Ex0Iv+aTLd
r4Q75KGZgTA1tdUCnbchJ+kYhxVlcQRgtZau73AtRXMoIFay3AYKVvp6HnWYTvpn
w+A6saJshsnwTaxFd83pX8TNgXMNsMRBLQ+g4Sh2ub6y
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:33 2025 by rpki-client