Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/gCZ6AR7qGfhGP9PFiy4gyelo2Ao.roa
File: gCZ6AR7qGfhGP9PFiy4gyelo2Ao.roa (raw, json)
Hash identifier: jJi+VxuRpHNEr/2ZGfVyPxPEHiQ+7WLz1p6zV16q3F8=
Subject key identifier: 80:26:7A:01:1E:EA:19:F8:46:3F:D3:C5:8B:2E:20:C9:E9:68:D8:0A
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01942826420A19FEC448683C4038088F4AA9
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/gCZ6AR7qGfhGP9PFiy4gyelo2Ao.roa
Signing time: Thu 02 Jan 2025 17:53:03 +0000
ROA not before: Thu 02 Jan 2025 17:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20057
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:42:0a:19:fe:c4:48:68:3c:40:38:08:8f:4a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80267a011eea19f8463fd3c58b2e20c9e968d80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:6e:6c:78:48:0f:0b:7b:9a:3c:32:6f:8b:
39:fd:e3:19:7f:f2:9f:1f:fd:cc:e4:5e:3d:36:ef:
8a:a2:c5:d0:5a:d0:a2:4d:7d:67:48:70:67:2d:0d:
c8:7b:13:66:2b:de:ea:5a:2d:8f:c4:a1:ea:89:5a:
da:6e:df:34:ca:b6:69:a5:e8:d4:1e:c9:3f:f2:05:
90:f0:ab:f8:bf:d0:bd:e9:d5:d4:b1:67:29:05:d6:
49:04:d8:25:63:ae:46:bf:87:0b:92:6e:2a:a3:a9:
22:80:4a:0e:54:5e:07:f7:d9:bd:95:0d:04:6b:5e:
b7:0c:91:c6:eb:8c:5e:44:8a:2e:91:e6:cc:14:b8:
c8:f9:fd:96:93:65:82:07:d6:b0:ab:98:3f:5e:71:
66:79:f3:f5:46:f0:18:18:6b:f9:d0:b2:90:fe:e2:
a1:d5:a9:20:34:2a:74:5c:ac:76:45:47:25:5b:52:
f9:d8:16:cc:e8:e4:c2:b1:95:e3:25:b6:9e:d4:45:
97:bb:e9:ac:a8:c8:49:61:bf:ee:b6:c7:79:e6:eb:
0e:d6:39:25:bf:d6:c3:9d:5b:17:e3:bd:b2:a6:19:
73:90:a7:65:9d:3c:2c:61:18:3f:28:2f:63:62:96:
e9:82:ab:23:94:e8:8f:71:dc:34:ef:b1:b9:29:02:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:26:7A:01:1E:EA:19:F8:46:3F:D3:C5:8B:2E:20:C9:E9:68:D8:0A
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/gCZ6AR7qGfhGP9PFiy4gyelo2Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:32:fd:07:95:81:1d:2d:8e:88:e0:bd:e4:fa:a6:d3:d3:53:
46:4a:29:ec:85:05:09:27:18:0a:5b:6a:d0:c3:bb:c4:79:d2:
9f:1f:c9:18:da:34:5a:91:bd:fd:0e:83:ff:6e:9d:44:4a:f1:
b3:f8:75:fd:2f:79:b0:12:57:77:28:c9:73:66:e7:df:17:e7:
84:84:55:db:e6:07:9e:56:f3:bf:42:b1:eb:c4:2c:c8:46:69:
c8:66:60:a7:ba:83:d9:81:30:8f:e5:e9:a2:0e:6b:d5:64:f2:
a1:f7:7d:a9:20:c7:ec:4b:13:41:cb:fc:c9:db:0a:0e:17:06:
d0:1e:62:21:44:89:9e:df:de:b4:09:e3:d8:8b:68:c3:9e:c8:
9b:89:e3:74:3c:f0:bf:8b:76:d4:84:17:98:84:ac:8c:55:b2:
40:50:f3:8c:5d:ef:d6:36:0b:17:59:4b:37:88:c8:a4:c0:36:
95:63:dc:7b:1a:4e:99:01:b1:52:0f:6e:aa:7f:11:15:be:93:
92:3e:62:ca:17:34:d0:29:9d:5f:b5:a2:68:f5:a6:55:bb:be:
97:08:31:ba:56:27:ba:00:d4:7c:63:26:38:af:91:6d:cd:06:
2e:66:a3:96:95:c5:ba:34:e6:44:aa:75:07:df:51:3c:d0:fd:
5d:54:79:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJkIKGf7ESGg8QDgIj0qpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwMTAyMTc1MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDI2N2EwMTFlZWExOWY4NDYzZmQzYzU4YjJlMjBjOWU5NjhkODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCRubHhIDwt7mjwyb4s5/eMZf/Kf
H/3M5F49Nu+KosXQWtCiTX1nSHBnLQ3IexNmK97qWi2PxKHqiVrabt80yrZppejU
Hsk/8gWQ8Kv4v9C96dXUsWcpBdZJBNglY65Gv4cLkm4qo6kigEoOVF4H99m9lQ0E
a163DJHG64xeRIoukebMFLjI+f2Wk2WCB9awq5g/XnFmefP1RvAYGGv50LKQ/uKh
1akgNCp0XKx2RUclW1L52BbM6OTCsZXjJbae1EWXu+msqMhJYb/utsd55usO1jkl
v9bDnVsX472yphlzkKdlnTwsYRg/KC9jYpbpgqsjlOiPcdw077G5KQJLyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIAmegEe6hn4Rj/TxYsuIMnpaNgKMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvZ0NaNkFSN3FHZmhHUDlQRml5NGd5ZWxvMkFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVzRMA0G
CSqGSIb3DQEBCwUAA4IBAQCmMv0HlYEdLY6I4L3k+qbT01NGSinshQUJJxgKW2rQ
w7vEedKfH8kY2jRakb39DoP/bp1ESvGz+HX9L3mwEld3KMlzZuffF+eEhFXb5gee
VvO/QrHrxCzIRmnIZmCnuoPZgTCP5emiDmvVZPKh932pIMfsSxNBy/zJ2woOFwbQ
HmIhRIme3960CePYi2jDnsibieN0PPC/i3bUhBeYhKyMVbJAUPOMXe/WNgsXWUs3
iMikwDaVY9x7Gk6ZAbFSD26qfxEVvpOSPmLKFzTQKZ1ftaJo9aZVu76XCDG6Vie6
ANR8YyY4r5FtzQYuZqOWlcW6NOZEqnUH31E80P1dVHml
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:06:52 2025 by rpki-client