Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/RqaVFqy6GXc5P0yFGNcRH8k36gE.roa
File: RqaVFqy6GXc5P0yFGNcRH8k36gE.roa (raw, json)
Hash identifier: fsfn81FIndGa7texrCSDv7KRjE/WiiMWmOP8jzC+EzQ=
Subject key identifier: 46:A6:95:16:AC:BA:19:77:39:3F:4C:85:18:D7:11:1F:C9:37:EA:01
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 0192A9F065BE4615DE2117EB2BF1C1E506A7
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/RqaVFqy6GXc5P0yFGNcRH8k36gE.roa
Signing time: Sun 20 Oct 2024 12:39:17 +0000
ROA not before: Sun 20 Oct 2024 12:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212253
IP address blocks: 185.222.22.0/24 maxlen: 24
2a12:e5c0:10::/46 maxlen: 46
Validation: Failed, certificate revoked on Sun 20 Oct 2024 15:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a9:f0:65:be:46:15:de:21:17:eb:2b:f1:c1:e5:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Oct 20 12:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46a69516acba1977393f4c8518d7111fc937ea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:54:72:7b:50:5e:da:71:72:91:95:60:22:
d3:79:6f:94:16:2a:fd:71:74:92:76:9e:82:ff:07:
ed:88:b4:33:2d:09:f2:1c:fa:60:95:f1:f6:3b:0d:
2a:fc:38:9b:45:77:8c:8d:fc:95:14:cd:fd:38:b0:
07:bd:91:75:7e:cf:32:06:39:53:2a:f9:35:83:06:
12:11:41:05:93:bd:60:40:71:f8:2d:23:2e:78:59:
ed:f8:24:99:98:8a:93:04:7b:af:90:42:49:00:f9:
0c:19:bc:5a:59:5e:1c:fb:fd:29:22:93:cb:52:b0:
a6:b2:b3:56:75:b7:c0:ec:6a:b5:f5:4d:b6:66:b9:
95:10:08:bc:ec:ea:fc:26:35:5d:3f:13:ae:60:9f:
23:21:22:b8:e2:86:73:0a:46:7c:58:c6:83:91:a1:
a8:9e:91:0a:0d:59:1e:6e:2a:dc:0b:a9:a2:0a:fa:
b3:f8:8e:10:42:bb:a8:99:93:9f:1d:25:7c:b4:ec:
51:f4:e3:ca:c4:e9:4d:3d:f6:5a:57:b9:00:72:38:
4b:61:57:ed:17:2b:db:1b:54:58:02:05:cb:78:03:
5d:26:4e:e4:fb:6b:11:50:a2:57:40:a2:ba:38:3a:
ae:e3:92:7c:0c:ee:e5:88:99:2b:ce:2f:ca:4b:0c:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A6:95:16:AC:BA:19:77:39:3F:4C:85:18:D7:11:1F:C9:37:EA:01
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/RqaVFqy6GXc5P0yFGNcRH8k36gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.22.0/24
IPv6:
2a12:e5c0:10::/46
Signature Algorithm: sha256WithRSAEncryption
90:5b:ea:3c:52:23:3d:dd:8a:99:ec:9e:44:c3:b2:54:3f:14:
07:a3:b8:a7:97:fc:1a:88:6a:e9:f6:81:81:8a:d3:5b:df:56:
0c:18:96:d6:00:14:20:f6:62:25:4b:75:9e:ed:21:48:24:c3:
9a:c2:10:18:98:ab:0c:af:ad:cd:30:41:6a:3c:b4:94:0d:99:
09:f4:39:04:d3:05:53:ba:af:d9:ba:9a:be:d9:58:03:22:c5:
08:fc:80:70:ed:6c:d1:23:86:7c:b0:14:6b:bc:51:c0:08:df:
7c:b2:dc:48:db:28:d3:5f:85:de:59:08:23:65:9a:bb:01:f6:
7a:e0:00:77:b4:6a:24:9d:75:62:4a:a0:9b:50:c2:cd:7c:40:
e9:79:1b:e2:e9:38:86:e1:74:8c:4c:a1:1a:78:b4:37:3a:8b:
ef:43:82:4e:5a:80:21:c8:87:bf:c8:0d:db:d0:de:2f:b6:59:
72:ad:56:d3:a3:d9:26:95:b6:5c:4e:43:86:2a:69:18:30:72:
0a:62:38:8e:e7:11:a6:4a:ba:1e:2e:d8:a4:81:7c:1b:36:89:
67:84:1c:cc:00:5b:a7:42:4c:61:52:5b:0e:12:ca:7b:dd:71:
11:52:86:14:9f:6d:b0:97:82:ab:70:78:1e:00:b1:84:94:22:
c8:e6:e0:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZKp8GW+RhXeIRfrK/HB5QanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDM5ZDc0YjE3ZTY5MWRkMWIwNTIyMWM2MDk4Y2FmNWVl
OTNhMzYwHhcNMjQxMDIwMTIzOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmE2OTUxNmFjYmExOTc3MzkzZjRjODUxOGQ3MTExZmM5MzdlYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/NUcntQXtpxcpGVYCLTeW+UFir9
cXSSdp6C/wftiLQzLQnyHPpglfH2Ow0q/DibRXeMjfyVFM39OLAHvZF1fs8yBjlT
Kvk1gwYSEUEFk71gQHH4LSMueFnt+CSZmIqTBHuvkEJJAPkMGbxaWV4c+/0pIpPL
UrCmsrNWdbfA7Gq19U22ZrmVEAi87Or8JjVdPxOuYJ8jISK44oZzCkZ8WMaDkaGo
npEKDVkebircC6miCvqz+I4QQruomZOfHSV8tOxR9OPKxOlNPfZaV7kAcjhLYVft
FyvbG1RYAgXLeANdJk7k+2sRUKJXQKK6ODqu45J8DO7liJkrzi/KSwwoNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEamlRasuhl3OT9MhRjXER/JN+oBMB8GA1UdIwQY
MBaAFGHTnXSxfmkd0bBSIcYJjK9e6To2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQt
OTgwNTExZGMwNWFlLzEvUnFhVkZxeTZHWGM1UDB5RkdOY1JIOGszNmdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQtOTgwNTExZGMwNWFl
LzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAud4WMA8E
AgACMAkDBwIqEuXAABAwDQYJKoZIhvcNAQELBQADggEBAJBb6jxSIz3dipnsnkTD
slQ/FAejuKeX/BqIaun2gYGK01vfVgwYltYAFCD2YiVLdZ7tIUgkw5rCEBiYqwyv
rc0wQWo8tJQNmQn0OQTTBVO6r9m6mr7ZWAMixQj8gHDtbNEjhnywFGu8UcAI33yy
3EjbKNNfhd5ZCCNlmrsB9nrgAHe0aiSddWJKoJtQws18QOl5G+LpOIbhdIxMoRp4
tDc6i+9Dgk5agCHIh7/IDdvQ3i+2WXKtVtOj2SaVtlxOQ4YqaRgwcgpiOI7nEaZK
uh4u2KSBfBs2iWeEHMwAW6dCTGFSWw4SynvdcRFShhSfbbCXgqtweB4AsYSUIsjm
4JE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:33 2025 by rpki-client