Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/A6P6N9iHYVPkK4vI8MV7iCmgSmg.roa
File: A6P6N9iHYVPkK4vI8MV7iCmgSmg.roa (raw, json)
Hash identifier: p3LqcVU3qTPeRHB89JuLVzBt8C7uopfG/fMdYv8iAoM=
Subject key identifier: 03:A3:FA:37:D8:87:61:53:E4:2B:8B:C8:F0:C5:7B:88:29:A0:4A:68
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0191757142B7C3BB71E92640ED86EA9588F9
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/A6P6N9iHYVPkK4vI8MV7iCmgSmg.roa
Signing time: Wed 21 Aug 2024 14:57:22 +0000
ROA not before: Wed 21 Aug 2024 14:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.221.84.0/24 maxlen: 24
212.32.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:71:42:b7:c3:bb:71:e9:26:40:ed:86:ea:95:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Aug 21 14:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03a3fa37d8876153e42b8bc8f0c57b8829a04a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:76:47:0d:0c:5c:51:d2:fc:47:92:95:7d:
f6:bc:d9:3b:ba:7a:3c:7f:0c:21:47:74:ad:5a:e6:
fa:b0:82:c5:2a:ac:6e:bf:29:a0:da:c0:ce:76:14:
54:7e:9f:fd:db:14:9b:02:7d:8d:4c:33:80:eb:d7:
5a:de:f5:d0:e2:f5:14:e8:b3:b0:81:bf:f3:0a:fd:
93:35:ca:ac:bb:16:b1:00:0a:b6:cd:9d:56:62:b1:
70:a8:43:55:e3:e1:24:fa:95:38:6b:8b:c3:0d:6d:
40:16:82:6c:e7:fa:8e:5f:6c:ca:d4:74:bd:a9:f2:
5d:ba:9a:e6:b3:92:54:51:85:a0:22:9b:bd:52:ce:
93:a7:39:f1:6f:bf:e8:f1:5f:3a:41:83:05:ea:c5:
38:8c:b8:2c:a5:2c:7b:44:22:d0:59:57:8a:be:f6:
af:a9:2f:75:34:ec:08:30:29:a2:33:d8:69:65:6f:
81:3e:26:d8:52:02:a2:f7:d0:e5:af:98:53:90:32:
2d:05:b5:e9:c5:6b:cd:ea:03:03:a6:1b:d6:da:6e:
7e:d1:82:ee:80:9c:32:0a:f6:55:81:87:31:ef:96:
61:e4:25:b0:b7:ed:d2:c0:4f:50:98:50:ff:61:a6:
10:e5:c7:86:59:4e:b0:1c:17:01:0e:62:db:f2:07:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:FA:37:D8:87:61:53:E4:2B:8B:C8:F0:C5:7B:88:29:A0:4A:68
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/A6P6N9iHYVPkK4vI8MV7iCmgSmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.84.0/24
212.32.0.0/21
Signature Algorithm: sha256WithRSAEncryption
78:03:a2:c4:a3:cd:b2:85:d5:b0:65:78:45:e2:7d:05:75:3a:
65:f3:69:13:ea:3c:fd:51:48:71:78:a0:5c:f0:5e:9e:b4:47:
42:c7:e6:20:ea:d4:97:23:e4:d2:04:d0:71:36:b0:d5:14:2c:
83:7e:cf:87:01:53:83:c5:cd:82:0f:3d:2e:86:8a:4b:07:18:
13:75:47:6c:4f:04:21:6b:3d:e7:d4:45:db:07:23:99:b7:e4:
44:9e:f8:2e:46:33:76:ce:97:46:30:1b:70:cd:91:ee:91:db:
af:2b:c1:d9:d9:4d:5c:cb:b7:21:ef:41:03:fd:d0:7c:2c:17:
d8:66:fa:aa:44:84:ba:4a:58:24:c2:dc:e7:56:c4:95:0f:12:
2a:ea:9b:5e:98:ac:a1:e7:78:58:d1:f5:98:02:30:71:33:24:
2b:81:ab:93:eb:a9:3a:9f:b9:fd:8b:6b:75:24:38:0c:b1:e6:
8c:7e:f7:f0:16:03:4f:cf:7f:26:3c:57:e8:e8:ac:43:42:90:
4b:fb:05:60:b5:29:32:56:16:53:0d:88:95:8d:99:7c:63:79:
ec:7b:98:e9:f8:cc:79:82:52:81:58:7e:31:49:ef:9f:42:ee:
6d:8b:43:27:5f:56:6f:55:ad:d7:4d:36:ec:5a:bf:fb:2f:71:
a2:5b:83:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZF1cUK3w7tx6SZA7YbqlYj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjQwODIxMTQ1NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2EzZmEzN2Q4ODc2MTUzZTQyYjhiYzhmMGM1N2I4ODI5YTA0YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bt2Rw0MXFHS/EeSlX32vNk7uno8
fwwhR3StWub6sILFKqxuvymg2sDOdhRUfp/92xSbAn2NTDOA69da3vXQ4vUU6LOw
gb/zCv2TNcqsuxaxAAq2zZ1WYrFwqENV4+Ek+pU4a4vDDW1AFoJs5/qOX2zK1HS9
qfJduprms5JUUYWgIpu9Us6Tpznxb7/o8V86QYMF6sU4jLgspSx7RCLQWVeKvvav
qS91NOwIMCmiM9hpZW+BPibYUgKi99Dlr5hTkDItBbXpxWvN6gMDphvW2m5+0YLu
gJwyCvZVgYcx75Zh5CWwt+3SwE9QmFD/YaYQ5ceGWU6wHBcBDmLb8gfSOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAOj+jfYh2FT5CuLyPDFe4gpoEpoMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvQTZQNk45aUhZVlBrSzR2SThNVjdpQ21nU21nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud1UAwQD
1CAAMA0GCSqGSIb3DQEBCwUAA4IBAQB4A6LEo82yhdWwZXhF4n0FdTpl82kT6jz9
UUhxeKBc8F6etEdCx+Yg6tSXI+TSBNBxNrDVFCyDfs+HAVODxc2CDz0uhopLBxgT
dUdsTwQhaz3n1EXbByOZt+REnvguRjN2zpdGMBtwzZHukduvK8HZ2U1cy7ch70ED
/dB8LBfYZvqqRIS6SlgkwtznVsSVDxIq6ptemKyh53hY0fWYAjBxMyQrgauT66k6
n7n9i2t1JDgMseaMfvfwFgNPz38mPFfo6KxDQpBL+wVgtSkyVhZTDYiVjZl8Y3ns
e5jp+Mx5glKBWH4xSe+fQu5ti0MnX1ZvVa3XTTbsWr/7L3GiW4NH
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:02 2025 by rpki-client