Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/FU3DYeLRb3f2SbFXikB_j9WUSIM.roa
File: FU3DYeLRb3f2SbFXikB_j9WUSIM.roa (raw, json)
Hash identifier: zA18Wc14f+GwBGf8QL1d/0/WJBysbLMU8CjbBvwvsbw=
Subject key identifier: 15:4D:C3:61:E2:D1:6F:77:F6:49:B1:57:8A:40:7F:8F:D5:94:48:83
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 01941F8C99BF652D2C2F8E3BF829ADC2684B
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/FU3DYeLRb3f2SbFXikB_j9WUSIM.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.25.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 13:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:bf:65:2d:2c:2f:8e:3b:f8:29:ad:c2:68:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=154dc361e2d16f77f649b1578a407f8fd5944883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:49:d4:5b:11:c8:af:d3:be:4a:f2:a7:90:
11:92:fd:5a:13:bc:01:d3:c3:ce:d6:43:f0:e3:fe:
29:33:19:ce:1a:ff:b4:32:7d:fc:94:da:0b:64:8a:
46:d8:5e:69:be:1c:62:bf:cf:e0:4b:83:67:21:38:
4a:dd:48:7f:f2:8a:a4:a5:c9:18:94:f5:ed:ce:b4:
53:80:16:05:0e:d6:0e:9b:d1:e1:35:3e:08:65:f1:
61:d1:2d:85:c7:64:30:69:38:90:a9:34:d7:3a:6c:
1f:10:bd:b2:fe:15:0f:62:a8:77:72:03:5d:86:9b:
51:26:e6:da:6f:75:9c:7f:28:ee:86:77:b9:67:4c:
68:e9:46:30:52:2e:3a:04:93:b8:d0:ef:b7:b3:71:
8d:8e:d5:ab:06:a0:80:ce:32:cc:3f:92:ad:b8:55:
52:b1:f6:77:7c:e7:19:8f:98:6b:f9:35:9d:80:29:
d9:34:b7:7b:75:c8:b7:cd:36:fd:61:d2:8b:37:4f:
51:9a:a4:a3:4f:59:c9:86:7f:63:f2:ce:1a:9a:de:
86:69:45:3d:8c:14:25:1b:f7:19:81:da:e8:f3:51:
bb:5b:91:bc:e7:31:51:66:63:e8:85:2d:24:84:d8:
a5:ff:48:31:3e:52:0d:1f:26:1b:10:cc:1f:1b:12:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:C3:61:E2:D1:6F:77:F6:49:B1:57:8A:40:7F:8F:D5:94:48:83
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/FU3DYeLRb3f2SbFXikB_j9WUSIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
22:78:10:df:82:98:98:02:5c:a5:8e:c2:50:3d:78:41:d2:22:
60:8d:5b:c5:6e:b7:61:e3:32:0e:b4:f4:cf:41:3b:0c:ed:5b:
16:83:62:11:e1:55:83:bc:f5:04:c0:ec:7d:d2:20:d8:80:8f:
08:ec:92:bc:29:d0:21:a8:72:70:0f:c4:e6:26:df:8e:57:f3:
73:14:48:c1:1d:25:0b:6a:71:22:66:85:9c:f7:90:73:af:6e:
34:b0:6f:85:4e:48:4c:54:09:a8:c3:d7:b7:52:db:29:74:fc:
70:8a:8d:90:c0:1e:2d:a5:31:65:6f:36:2e:de:d9:00:e9:ce:
cb:a4:1a:5e:24:1c:ea:8c:99:44:55:b3:a4:66:c3:e6:94:0f:
4d:7d:e0:67:9e:25:7d:05:8a:3f:e0:f6:35:5d:e3:65:23:44:
ec:76:63:cd:20:56:1b:91:11:3b:fa:86:67:ef:5c:8e:35:c4:
7a:5c:88:04:7c:a8:11:38:4b:bf:d0:02:01:0c:49:4a:68:9b:
f3:35:df:30:af:08:2a:a5:87:80:3f:ca:24:c2:ac:5b:bb:f7:
d7:0b:5f:e7:ec:bf:af:53:b1:6d:fc:c2:2a:b1:62:3e:29:27:
1d:65:ef:82:14:67:59:20:56:b6:f2:42:91:86:d7:1b:b0:93:
06:b3:82:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJm/ZS0sL447+CmtwmhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5
NDIyMGUwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTRkYzM2MWUyZDE2Zjc3ZjY0OWIxNTc4YTQwN2Y4ZmQ1OTQ0ODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjJJ1FsRyK/Tvkryp5ARkv1aE7wB
08PO1kPw4/4pMxnOGv+0Mn38lNoLZIpG2F5pvhxiv8/gS4NnIThK3Uh/8oqkpckY
lPXtzrRTgBYFDtYOm9HhNT4IZfFh0S2Fx2QwaTiQqTTXOmwfEL2y/hUPYqh3cgNd
hptRJubab3Wcfyjuhne5Z0xo6UYwUi46BJO40O+3s3GNjtWrBqCAzjLMP5KtuFVS
sfZ3fOcZj5hr+TWdgCnZNLd7dci3zTb9YdKLN09RmqSjT1nJhn9j8s4amt6GaUU9
jBQlG/cZgdro81G7W5G85zFRZmPohS0khNil/0gxPlINHyYbEMwfGxJ1kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVNw2Hi0W939kmxV4pAf4/VlEiDMB8GA1UdIwQY
MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt
NDE4YWY5MGFjYjhhLzEvRlUzRFllTFJiM2YyU2JGWGlrQl9qOVdVU0lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh
LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc0YMA0G
CSqGSIb3DQEBCwUAA4IBAQAieBDfgpiYAlyljsJQPXhB0iJgjVvFbrdh4zIOtPTP
QTsM7VsWg2IR4VWDvPUEwOx90iDYgI8I7JK8KdAhqHJwD8TmJt+OV/NzFEjBHSUL
anEiZoWc95Bzr240sG+FTkhMVAmow9e3UtspdPxwio2QwB4tpTFlbzYu3tkA6c7L
pBpeJBzqjJlEVbOkZsPmlA9NfeBnniV9BYo/4PY1XeNlI0TsdmPNIFYbkRE7+oZn
71yONcR6XIgEfKgROEu/0AIBDElKaJvzNd8wrwgqpYeAP8okwqxbu/fXC1/n7L+v
U7Ft/MIqsWI+KScdZe+CFGdZIFa28kKRhtcbsJMGs4IV
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:14:51 2025 by rpki-client