Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-R7tJKKeHott5MMCecVuccynUY.roa
File: 7-R7tJKKeHott5MMCecVuccynUY.roa (raw, json)
Hash identifier: zaaGHqxslfem1jah6WSBs02gdztNNb/j1rAD39at/gU=
Subject key identifier: EF:E4:7B:B4:92:8A:78:7A:2D:B7:93:0C:09:E7:15:B9:C7:32:9D:46
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222051AE0BE18C8AB9DE71AD6700161E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-R7tJKKeHott5MMCecVuccynUY.roa
Signing time: Wed 01 Jan 2025 13:48:50 +0000
ROA not before: Wed 01 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213006
IP address blocks: 185.214.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 15:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:51:ae:0b:e1:8c:8a:b9:de:71:ad:67:00:16:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe47bb4928a787a2db7930c09e715b9c7329d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:1e:0c:99:e2:dd:f3:4c:2d:b9:29:1e:3d:
8f:1b:c6:e6:da:04:30:76:27:78:84:2a:af:00:22:
c9:36:16:d0:fa:c9:6c:bc:54:a2:e4:b9:43:b8:d7:
36:2d:55:4d:1a:c9:a3:c8:60:cb:f4:f2:ea:1e:c9:
14:c8:e4:86:47:ea:10:7b:70:90:c4:e7:14:50:e0:
b8:f1:c8:03:20:2a:f0:08:8b:de:2c:9c:f7:d5:df:
3e:4b:15:c3:10:e5:1c:05:97:0e:2c:10:37:de:2d:
bd:8f:79:d1:19:d2:a1:ad:3e:0a:dc:8a:26:72:9d:
21:11:a6:ad:ab:03:14:a9:2c:a7:ca:95:e6:58:15:
7d:51:60:b9:16:3b:f6:08:a1:7a:de:ac:09:29:1e:
99:d2:3b:c2:64:2b:cf:a5:82:fb:bc:80:31:c9:f4:
5f:74:8d:96:db:b3:ed:b8:ad:81:b6:d0:55:dd:49:
79:24:66:6c:77:71:93:92:6e:42:db:40:3f:e3:c4:
2b:46:65:7b:ac:8a:60:49:ce:95:7a:10:2a:e2:35:
69:50:fc:e2:27:1b:cc:09:d5:04:b4:12:7c:56:fb:
52:c3:f8:53:f3:da:84:6a:7b:1c:2e:df:23:a1:d7:
01:1a:83:51:28:76:13:54:4e:9a:6f:a7:35:eb:7f:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:7B:B4:92:8A:78:7A:2D:B7:93:0C:09:E7:15:B9:C7:32:9D:46
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-R7tJKKeHott5MMCecVuccynUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.84.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8d:22:33:0e:47:04:96:af:a4:ef:c4:fa:5a:5b:b2:c1:c3:
e5:69:f0:83:5b:94:cf:50:d8:33:0c:54:9e:fd:87:4f:c9:5f:
94:35:a6:86:19:ac:ab:7c:1e:67:42:36:32:cf:ab:ea:6f:68:
44:6e:2a:5c:f8:cc:82:64:80:71:12:51:e1:99:92:97:49:6c:
3f:be:06:6a:d4:a7:86:28:05:e5:01:45:bc:ff:2a:72:56:d5:
21:cb:37:e8:9a:93:30:f4:7f:9d:d3:9b:e0:e3:e5:82:5a:69:
6d:ac:c1:74:13:3f:10:70:07:84:c0:f1:a7:76:4b:f1:13:b4:
fe:dc:65:aa:40:1d:12:a0:1e:50:8c:e3:e3:d4:58:18:f8:e3:
04:ea:57:ff:c8:a1:41:76:e0:81:97:e4:97:49:7b:3a:ad:c4:
6e:75:13:43:ff:95:6e:69:e1:28:e3:23:bc:b9:85:04:7a:1f:
3d:18:42:4c:42:69:f8:17:17:12:fe:6a:44:0f:54:f1:06:5c:
d4:47:02:8e:92:a7:81:a0:77:5f:46:02:50:68:fa:03:35:cf:
dd:85:67:48:8b:55:9a:86:24:ba:d8:a3:70:41:92:12:ce:cd:
e8:16:ec:b8:7e:8e:58:65:2c:61:85:63:6d:54:e8:e5:ea:8e:
f0:55:b6:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIFGuC+GMirneca1nABYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTAxMTM0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmU0N2JiNDkyOGE3ODdhMmRiNzkzMGMwOWU3MTViOWM3MzI5ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEUeDJni3fNMLbkpHj2PG8bm2gQw
did4hCqvACLJNhbQ+slsvFSi5LlDuNc2LVVNGsmjyGDL9PLqHskUyOSGR+oQe3CQ
xOcUUOC48cgDICrwCIveLJz31d8+SxXDEOUcBZcOLBA33i29j3nRGdKhrT4K3Iom
cp0hEaatqwMUqSynypXmWBV9UWC5Fjv2CKF63qwJKR6Z0jvCZCvPpYL7vIAxyfRf
dI2W27PtuK2BttBV3Ul5JGZsd3GTkm5C20A/48QrRmV7rIpgSc6VehAq4jVpUPzi
JxvMCdUEtBJ8VvtSw/hT89qEanscLt8jodcBGoNRKHYTVE6ab6c163/M2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/ke7SSinh6LbeTDAnnFbnHMp1GMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNy1SN3RKS0tlSG90dDVNTUNlY1Z1Y2N5blVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZUMA0G
CSqGSIb3DQEBCwUAA4IBAQAhjSIzDkcElq+k78T6WluywcPlafCDW5TPUNgzDFSe
/YdPyV+UNaaGGayrfB5nQjYyz6vqb2hEbipc+MyCZIBxElHhmZKXSWw/vgZq1KeG
KAXlAUW8/ypyVtUhyzfompMw9H+d05vg4+WCWmltrMF0Ez8QcAeEwPGndkvxE7T+
3GWqQB0SoB5QjOPj1FgY+OME6lf/yKFBduCBl+SXSXs6rcRudRND/5VuaeEo4yO8
uYUEeh89GEJMQmn4FxcS/mpED1TxBlzURwKOkqeBoHdfRgJQaPoDNc/dhWdIi1Wa
hiS62KNwQZISzs3oFuy4fo5YZSxhhWNtVOjl6o7wVbZP
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:51 2025 by rpki-client