Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/oBIL-LKtPT9b3a5Dj45Izr6S6eY.roa
File: oBIL-LKtPT9b3a5Dj45Izr6S6eY.roa (raw, json)
Hash identifier: X81jPSzOFnYa6DzkVRLIvKAm0YHR7bfpg+B/NpzB3TA=
Subject key identifier: A0:12:0B:F8:B2:AD:3D:3F:5B:DD:AE:43:8F:8E:48:CE:BE:92:E9:E6
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018CC501110362F11064BAFCC337EFD741E5
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/oBIL-LKtPT9b3a5Dj45Izr6S6eY.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:11:03:62:f1:10:64:ba:fc:c3:37:ef:d7:41:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0120bf8b2ad3d3f5bddae438f8e48cebe92e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:12:1e:ea:a1:ec:9e:12:ee:a9:b6:f7:ec:
7c:13:da:e1:ac:eb:58:12:b6:5d:63:fc:95:4d:04:
fc:ff:a6:f3:32:7b:02:f4:22:45:c0:75:d9:95:35:
ba:8f:9b:9f:0a:1e:27:bc:14:f2:be:af:b1:b3:f0:
64:76:3a:ed:ca:f0:74:e3:3b:49:1c:95:e8:58:42:
83:20:7f:82:b9:aa:e4:60:14:2d:34:72:df:85:8a:
ed:a0:ea:a4:44:3d:56:cc:a1:17:9f:f5:59:03:35:
57:00:60:6a:fb:6b:81:98:72:5f:57:0a:0c:99:0c:
87:b5:c3:f9:79:48:e9:4e:dc:95:37:15:a1:ea:cd:
02:2d:1c:d7:37:a9:ff:ee:eb:ca:ef:21:d6:b8:19:
c7:5a:2b:12:d2:38:0a:21:24:a3:29:1b:1a:d4:12:
f5:b7:f3:37:51:1f:01:46:ce:e7:d7:ee:ee:fb:84:
a8:8b:f1:a0:5c:0b:7f:4a:86:77:4e:24:55:dc:fe:
00:bc:90:4d:f0:c9:5e:79:58:9e:0b:9a:88:c9:14:
e4:d4:39:59:bf:b6:9a:0f:e8:7e:5c:4d:61:52:c0:
69:74:43:8a:e1:5a:39:d3:f4:44:07:68:f2:be:28:
d7:23:44:a0:3d:ad:c8:3c:5f:26:02:1b:03:66:73:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:12:0B:F8:B2:AD:3D:3F:5B:DD:AE:43:8F:8E:48:CE:BE:92:E9:E6
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/oBIL-LKtPT9b3a5Dj45Izr6S6eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7c:d9:b2:65:46:91:6b:1d:b1:c7:ad:7c:3b:5c:2a:8a:30:
0c:49:c5:f8:7f:46:69:22:7c:c3:95:b2:17:d6:53:a9:2b:75:
c4:24:14:5f:6e:14:13:48:5b:e7:44:10:96:0d:94:ac:1b:e4:
84:3b:8e:e5:a3:f6:3d:dc:f1:63:25:b4:17:7c:a3:70:6d:5e:
10:59:25:31:25:4c:a3:67:ff:45:b4:70:da:03:1b:6d:08:55:
24:79:42:eb:48:ad:33:4e:5e:83:a6:b4:9a:d7:ef:38:cf:f7:
92:7c:50:7d:a4:fa:00:4d:f6:0e:9c:10:60:6c:45:8d:e6:54:
24:dd:15:5c:b6:bf:1b:dc:7c:58:49:8b:06:5c:11:ea:64:7d:
6c:6f:6c:8b:cc:98:f8:55:8d:fc:1b:e9:3d:1e:de:5c:bd:66:
93:c3:63:dd:2b:b8:81:5c:f4:7d:ed:e0:3f:ae:8b:87:63:bb:
a5:b3:c2:83:43:42:4c:a9:4f:75:07:bb:92:fe:be:6c:e2:67:
7e:3e:f3:50:79:6f:12:73:4a:45:80:49:42:ef:cf:53:cf:5f:
ab:60:bf:e1:ba:37:d7:f1:8c:c3:a6:bf:e5:0f:40:45:87:bc:
be:de:fa:cc:fb:7a:4f:bb:68:51:c7:ea:2b:75:c6:4c:78:05:
a0:6b:96:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAREDYvEQZLr8wzfv10HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjQwMTAxMTIzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDEyMGJmOGIyYWQzZDNmNWJkZGFlNDM4ZjhlNDhjZWJlOTJlOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvISHuqh7J4S7qm29+x8E9rhrOtY
ErZdY/yVTQT8/6bzMnsC9CJFwHXZlTW6j5ufCh4nvBTyvq+xs/BkdjrtyvB04ztJ
HJXoWEKDIH+CuarkYBQtNHLfhYrtoOqkRD1WzKEXn/VZAzVXAGBq+2uBmHJfVwoM
mQyHtcP5eUjpTtyVNxWh6s0CLRzXN6n/7uvK7yHWuBnHWisS0jgKISSjKRsa1BL1
t/M3UR8BRs7n1+7u+4Soi/GgXAt/SoZ3TiRV3P4AvJBN8MleeVieC5qIyRTk1DlZ
v7aaD+h+XE1hUsBpdEOK4Vo50/REB2jyvijXI0SgPa3IPF8mAhsDZnOrJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKASC/iyrT0/W92uQ4+OSM6+kunmMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvb0JJTC1MS3RQVDliM2E1RGo0NUl6cjZTNmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8EMA0G
CSqGSIb3DQEBCwUAA4IBAQBEfNmyZUaRax2xx618O1wqijAMScX4f0ZpInzDlbIX
1lOpK3XEJBRfbhQTSFvnRBCWDZSsG+SEO47lo/Y93PFjJbQXfKNwbV4QWSUxJUyj
Z/9FtHDaAxttCFUkeULrSK0zTl6DprSa1+84z/eSfFB9pPoATfYOnBBgbEWN5lQk
3RVctr8b3HxYSYsGXBHqZH1sb2yLzJj4VY38G+k9Ht5cvWaTw2PdK7iBXPR97eA/
rouHY7uls8KDQ0JMqU91B7uS/r5s4md+PvNQeW8Sc0pFgElC789Tz1+rYL/hujfX
8YzDpr/lD0BFh7y+3vrM+3pPu2hRx+ordcZMeAWga5Z8
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:20 2025 by rpki-client