Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jz37GKCs0zvJC_rV7b6acuHUjSA.roa
File: Jz37GKCs0zvJC_rV7b6acuHUjSA.roa (raw, json)
Hash identifier: XCU4N3sjVuU4ptEXRUUkMEVPQnhXRjsaBMarHtUyjUA=
Subject key identifier: 27:3D:FB:18:A0:AC:D3:3B:C9:0B:FA:D5:ED:BE:9A:72:E1:D4:8D:20
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0193E362C40EB4E3B5D360B25050560A88EB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jz37GKCs0zvJC_rV7b6acuHUjSA.roa
Signing time: Fri 20 Dec 2024 09:25:20 +0000
ROA not before: Fri 20 Dec 2024 09:25:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 185.251.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:62:c4:0e:b4:e3:b5:d3:60:b2:50:50:56:0a:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 20 09:25:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=273dfb18a0acd33bc90bfad5edbe9a72e1d48d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:6c:10:b0:f8:d7:28:7c:99:1e:3e:2a:48:
20:bd:f7:0a:67:76:b9:e7:1a:ae:c2:87:0c:9f:37:
fe:e9:cf:35:f4:e0:68:ad:a6:fc:7f:65:5a:97:30:
46:43:5a:f7:94:c6:38:80:10:c5:ef:3e:20:e8:39:
06:e0:28:cc:41:c7:5c:7f:b7:46:97:cf:4a:b8:dd:
62:8b:f9:98:65:c4:a3:4c:d9:89:cb:ce:12:b3:cf:
d7:13:5b:4b:bd:c5:0e:3c:59:fe:0b:ce:56:5c:92:
9b:88:c8:e4:94:f9:55:a9:48:a6:e3:35:91:ef:d4:
f2:44:04:71:2a:e4:10:8b:98:14:db:2b:21:09:bf:
08:0f:4b:c7:b5:87:18:d6:cc:2b:4f:cd:0a:bd:24:
fd:29:0d:31:4c:25:27:8b:85:ac:3a:83:02:f2:b6:
28:c6:45:6f:96:91:3b:b2:e6:1a:5f:95:35:be:6a:
91:df:1f:07:8f:95:1f:24:37:48:47:81:20:44:80:
62:9a:04:8e:f7:36:b3:0b:23:cc:77:c2:fa:af:d7:
d6:ff:fe:b7:99:3e:39:7b:47:80:b0:8c:66:b1:57:
c7:42:9a:e2:aa:f3:17:7d:3e:f5:e2:9f:3f:93:cc:
53:33:7c:fe:c8:0f:64:1b:c8:50:25:67:e5:7a:3c:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:FB:18:A0:AC:D3:3B:C9:0B:FA:D5:ED:BE:9A:72:E1:D4:8D:20
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Jz37GKCs0zvJC_rV7b6acuHUjSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
88:eb:5f:7a:8f:5f:41:46:6e:9d:44:d3:10:69:98:e8:35:9e:
0b:3d:2f:ae:30:5a:e4:4c:78:21:4b:54:bc:01:11:e3:c5:ee:
13:86:11:b9:80:82:b9:60:70:ce:0a:df:e8:9c:43:91:95:ec:
3d:7d:ec:a6:13:b6:c2:f7:54:21:32:4b:b0:ce:a3:93:8b:c1:
13:e1:0c:29:4a:dc:c3:35:ab:f4:e1:62:63:70:fa:2b:a2:d1:
b8:ea:88:7f:6d:19:52:1b:0d:a2:8a:87:cc:1a:74:ef:f8:7d:
6e:be:05:17:d7:dc:36:b7:57:73:ba:74:51:12:ad:fc:92:af:
75:80:bb:f6:4e:c4:5c:6c:74:d7:ed:ea:e9:bb:4b:5f:f8:d6:
39:3b:b8:e6:4c:d7:b2:9d:c8:7f:55:b1:40:2d:77:73:55:c1:
e3:04:57:84:85:55:7f:bc:62:d7:1a:aa:d0:cc:f5:33:3d:04:
95:17:86:6d:30:b7:a4:79:d0:28:63:cf:ce:3a:52:3f:8e:ef:
5f:3a:d6:77:6c:48:da:6e:58:5b:8d:bd:7f:ec:64:b0:e1:7e:
0a:d9:df:8a:ad:1d:89:01:9d:8d:9f:fd:b1:47:05:2b:4c:2c:
f0:75:c6:a9:87:67:64:f7:7d:80:fc:31:6a:d2:37:13:72:fb:
8e:a2:d4:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPjYsQOtOO102CyUFBWCojrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQxMjIwMDkyNTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzNkZmIxOGEwYWNkMzNiYzkwYmZhZDVlZGJlOWE3MmUxZDQ4ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMBsELD41yh8mR4+KkggvfcKZ3a5
5xquwocMnzf+6c819OBorab8f2ValzBGQ1r3lMY4gBDF7z4g6DkG4CjMQcdcf7dG
l89KuN1ii/mYZcSjTNmJy84Ss8/XE1tLvcUOPFn+C85WXJKbiMjklPlVqUim4zWR
79TyRARxKuQQi5gU2yshCb8ID0vHtYcY1swrT80KvST9KQ0xTCUni4WsOoMC8rYo
xkVvlpE7suYaX5U1vmqR3x8Hj5UfJDdIR4EgRIBimgSO9zazCyPMd8L6r9fW//63
mT45e0eAsIxmsVfHQpriqvMXfT714p8/k8xTM3z+yA9kG8hQJWflejxtrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCc9+xigrNM7yQv61e2+mnLh1I0gMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSnozN0dLQ3MwenZKQ19yVjdiNmFjdUhValNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufvmMA0G
CSqGSIb3DQEBCwUAA4IBAQCI6196j19BRm6dRNMQaZjoNZ4LPS+uMFrkTHghS1S8
ARHjxe4ThhG5gIK5YHDOCt/onEORlew9feymE7bC91QhMkuwzqOTi8ET4QwpStzD
Nav04WJjcPorotG46oh/bRlSGw2iiofMGnTv+H1uvgUX19w2t1dzunRREq38kq91
gLv2TsRcbHTX7erpu0tf+NY5O7jmTNeynch/VbFALXdzVcHjBFeEhVV/vGLXGqrQ
zPUzPQSVF4ZtMLekedAoY8/OOlI/ju9fOtZ3bEjablhbjb1/7GSw4X4K2d+KrR2J
AZ2Nn/2xRwUrTCzwdcaph2dk932A/DFq0jcTcvuOotR8
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:27:07 2025 by rpki-client