Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/X7LJQc9LBYBS5LVPDCOBg3GxfLg.roa
File: X7LJQc9LBYBS5LVPDCOBg3GxfLg.roa (raw, json)
Hash identifier: XY9zs9s5BzHQUq3C5SyGGdYrHKB2xkoXoUxn6yvZ6LQ=
Subject key identifier: 5F:B2:C9:41:CF:4B:05:80:52:E4:B5:4F:0C:23:81:83:71:B1:7C:B8
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 01938CE6664071AE19FC3CEEA90F82968B9B
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/X7LJQc9LBYBS5LVPDCOBg3GxfLg.roa
Signing time: Tue 03 Dec 2024 14:22:09 +0000
ROA not before: Tue 03 Dec 2024 14:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 22
185.162.148.0/24 maxlen: 24
185.162.149.0/24 maxlen: 24
185.162.150.0/24 maxlen: 24
185.162.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 15:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:e6:66:40:71:ae:19:fc:3c:ee:a9:0f:82:96:8b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Dec 3 14:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb2c941cf4b058052e4b54f0c23818371b17cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:18:93:94:27:94:91:2d:b1:c7:17:5c:30:
eb:b3:ef:8d:31:2c:a0:09:58:65:fa:65:be:bc:c9:
96:45:f1:8d:23:53:55:0b:3b:4f:b2:f1:a2:e1:86:
4b:5d:a3:11:1e:15:39:d9:c5:5c:17:f7:54:4b:e4:
98:42:42:dc:5e:03:2d:68:22:c0:14:1f:a9:22:8a:
f5:b0:ef:70:36:17:0c:84:2f:ba:b6:43:e6:3a:ce:
e4:d6:64:3d:34:57:3c:db:2c:de:bc:4e:d3:6c:03:
66:a9:53:da:e5:b7:ec:54:f2:5e:eb:f3:af:42:09:
d4:dd:0f:cd:d3:df:c6:59:7a:11:50:bf:77:37:62:
8b:f2:42:b4:97:a5:3d:37:ce:c1:35:28:70:52:32:
04:88:87:97:dd:02:94:f8:b1:aa:cc:53:55:ee:aa:
43:d0:a8:e7:17:a0:86:96:d6:be:9b:c7:2c:3c:a7:
c5:b8:ec:2e:6a:16:74:0c:9d:e4:32:92:e6:6a:34:
80:be:a7:59:ab:ab:9d:8b:9f:04:7d:bb:d4:dd:f7:
ea:ca:bd:a5:e6:11:93:73:03:43:60:99:fb:32:80:
35:8b:5e:e3:fc:68:7b:9c:d2:db:5c:d0:48:09:58:
dc:61:4f:46:17:12:95:6b:44:2b:e5:dc:42:19:a7:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:C9:41:CF:4B:05:80:52:E4:B5:4F:0C:23:81:83:71:B1:7C:B8
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/X7LJQc9LBYBS5LVPDCOBg3GxfLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
35:49:5d:9b:a7:cb:df:72:5c:c3:c5:bd:29:84:48:08:08:eb:
52:01:14:69:1b:1d:5f:3d:10:23:ed:36:70:2c:76:eb:e3:9d:
2b:99:42:38:5f:6c:12:47:7c:af:ca:a4:f6:af:18:20:03:ad:
af:5d:0d:2b:95:6a:f7:f6:2a:40:fd:69:52:55:b2:21:9d:f9:
51:16:dd:d2:2a:de:a8:77:80:c7:b4:2c:ba:2d:85:c1:a4:a0:
8d:ce:5e:9a:0a:75:1b:8d:60:ca:56:12:e3:67:0b:77:7c:81:
83:25:b5:c8:6a:59:a4:60:10:7c:7b:ce:99:47:3f:a4:78:5d:
7a:b3:8d:29:d5:96:7d:72:37:52:78:e4:a1:f8:89:ae:95:2e:
8d:1c:d4:94:0d:68:4f:07:20:71:df:68:1d:65:8f:b3:21:b2:
11:46:89:2c:95:97:21:87:1c:8f:d6:2b:89:e5:79:81:00:d3:
df:37:d0:13:4e:29:c8:8d:7e:59:ce:31:f6:72:eb:79:45:8e:
92:25:68:e9:0b:f3:fd:9e:ff:c3:02:78:61:26:d4:0b:a8:d1:
70:da:a3:84:15:74:98:fc:cb:49:9d:51:5a:08:ea:9a:6e:6d:
22:d0:eb:ad:88:82:0c:59:42:c3:fa:ed:7c:7e:cf:8e:ab:28:
39:a0:81:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOM5mZAca4Z/DzuqQ+CloubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5
MTEwNGYwHhcNMjQxMjAzMTQyMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmIyYzk0MWNmNGIwNTgwNTJlNGI1NGYwYzIzODE4MzcxYjE3Y2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYcYk5QnlJEtsccXXDDrs++NMSyg
CVhl+mW+vMmWRfGNI1NVCztPsvGi4YZLXaMRHhU52cVcF/dUS+SYQkLcXgMtaCLA
FB+pIor1sO9wNhcMhC+6tkPmOs7k1mQ9NFc82yzevE7TbANmqVPa5bfsVPJe6/Ov
QgnU3Q/N09/GWXoRUL93N2KL8kK0l6U9N87BNShwUjIEiIeX3QKU+LGqzFNV7qpD
0KjnF6CGlta+m8csPKfFuOwuahZ0DJ3kMpLmajSAvqdZq6udi58EfbvU3ffqyr2l
5hGTcwNDYJn7MoA1i17j/Gh7nNLbXNBICVjcYU9GFxKVa0Qr5dxCGafCdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF+yyUHPSwWAUuS1TwwjgYNxsXy4MB8GA1UdIwQY
MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt
NjNmNTAzNWYzNDQ2LzEvWDdMSlFjOUxCWUJTNUxWUERDT0JnM0d4ZkxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2
LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaKUMA0G
CSqGSIb3DQEBCwUAA4IBAQA1SV2bp8vfclzDxb0phEgICOtSARRpGx1fPRAj7TZw
LHbr450rmUI4X2wSR3yvyqT2rxggA62vXQ0rlWr39ipA/WlSVbIhnflRFt3SKt6o
d4DHtCy6LYXBpKCNzl6aCnUbjWDKVhLjZwt3fIGDJbXIalmkYBB8e86ZRz+keF16
s40p1ZZ9cjdSeOSh+ImulS6NHNSUDWhPByBx32gdZY+zIbIRRokslZchhxyP1iuJ
5XmBANPfN9ATTinIjX5ZzjH2cut5RY6SJWjpC/P9nv/DAnhhJtQLqNFw2qOEFXSY
/MtJnVFaCOqabm0i0OutiIIMWULD+u18fs+Oqyg5oIFt
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:17 2025 by rpki-client