Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YYzcT3DYe9IqZ0ZDJ8RyCU3AjX8.roa
File: YYzcT3DYe9IqZ0ZDJ8RyCU3AjX8.roa (raw, json)
Hash identifier: AG5ANWOv55ZSWeWDZJOnCwhlAe3MH7IhiiLawFphlHw=
Subject key identifier: 61:8C:DC:4F:70:D8:7B:D2:2A:67:46:43:27:C4:72:09:4D:C0:8D:7F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019388135C85AD188B31A5B8157E57210C39
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YYzcT3DYe9IqZ0ZDJ8RyCU3AjX8.roa
Signing time: Mon 02 Dec 2024 15:53:10 +0000
ROA not before: Mon 02 Dec 2024 15:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:13:5c:85:ad:18:8b:31:a5:b8:15:7e:57:21:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 2 15:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=618cdc4f70d87bd22a67464327c472094dc08d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fd:c7:6f:a2:1e:c7:96:2c:72:6b:42:9f:07:
fc:08:3d:53:3d:8e:bb:08:7c:05:5e:58:92:bb:50:
54:d2:e8:6a:21:48:12:90:e8:ca:bc:4a:1b:5e:09:
3a:5d:e0:ce:bb:f8:c4:f8:cf:1e:d7:83:3e:79:2e:
44:71:e3:e3:ac:48:13:2f:db:18:d6:5a:ac:09:b6:
59:d9:97:74:24:fc:a0:4e:62:f4:b9:00:7b:2b:ee:
0c:50:8e:50:21:39:06:97:be:05:2e:8f:b3:86:fc:
ba:cf:96:b6:f1:bc:3f:9a:2d:89:8d:f2:d6:e6:ff:
b8:92:73:48:39:ea:88:6a:42:31:c8:a2:49:5a:e6:
95:19:0d:52:c5:9c:55:10:53:87:f2:f2:31:9f:06:
c3:9b:f5:48:fd:91:e3:04:e1:3a:fc:12:c7:d0:3a:
6c:17:c0:76:c4:63:d7:5c:92:ae:28:c2:a0:8b:54:
e5:0e:6e:e1:58:a9:1e:47:73:c1:6f:7b:6c:42:ba:
89:84:0c:9d:a6:5e:8f:29:2c:ad:03:95:ff:1e:ed:
3b:86:1d:15:04:58:77:9e:f1:66:bd:10:56:4e:21:
4f:95:9f:4b:d3:3e:fb:04:86:a0:3a:60:4e:e3:e7:
df:65:00:39:90:a8:a4:0c:aa:95:d9:c8:7c:ef:bd:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8C:DC:4F:70:D8:7B:D2:2A:67:46:43:27:C4:72:09:4D:C0:8D:7F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YYzcT3DYe9IqZ0ZDJ8RyCU3AjX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:64:84:a7:b6:52:d4:26:77:e8:68:42:f3:06:0d:db:b9:20:
31:35:86:0f:99:97:3e:34:46:7e:e8:ef:87:0d:a1:bf:ec:9c:
ce:0a:b7:2d:80:fc:04:a3:b7:7f:a8:d7:a3:9e:ad:7f:06:47:
bc:d6:80:fd:ce:d5:b8:4a:23:c7:90:56:bd:af:63:f4:1d:d2:
44:da:64:ca:44:27:63:60:b9:d7:17:15:fa:18:83:fd:48:e8:
f1:fc:f4:9c:32:0f:c0:ed:56:e1:93:12:1b:67:34:32:88:92:
62:d8:74:ad:cc:3a:54:03:36:03:53:db:c4:eb:ea:84:b5:f2:
b3:16:a1:a3:73:1f:2d:02:af:fd:95:06:3e:dc:17:c7:a2:6d:
5c:65:0f:3e:33:b2:7f:e4:50:50:d2:b5:92:31:6f:50:0e:02:
c2:08:f2:86:41:71:9f:6b:4b:68:e5:14:9f:af:6f:30:9a:29:
c2:51:c3:d9:be:7b:f8:71:ef:6c:8c:df:8d:f8:f9:57:4e:b9:
54:68:03:d1:13:4b:c8:7a:10:b9:4e:51:41:d2:2a:1c:5f:e2:
90:53:4e:ad:88:bc:d8:51:94:2d:d5:92:9d:9f:c3:f7:39:ab:
a6:5d:51:fb:2c:d3:3f:4d:34:c9:d5:7e:54:8d:19:3b:7b:e0:
23:34:ba:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOIE1yFrRiLMaW4FX5XIQw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQxMjAyMTU1MzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MThjZGM0ZjcwZDg3YmQyMmE2NzQ2NDMyN2M0NzIwOTRkYzA4ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8v3Hb6Iex5YscmtCnwf8CD1TPY67
CHwFXliSu1BU0uhqIUgSkOjKvEobXgk6XeDOu/jE+M8e14M+eS5EcePjrEgTL9sY
1lqsCbZZ2Zd0JPygTmL0uQB7K+4MUI5QITkGl74FLo+zhvy6z5a28bw/mi2JjfLW
5v+4knNIOeqIakIxyKJJWuaVGQ1SxZxVEFOH8vIxnwbDm/VI/ZHjBOE6/BLH0Dps
F8B2xGPXXJKuKMKgi1TlDm7hWKkeR3PBb3tsQrqJhAydpl6PKSytA5X/Hu07hh0V
BFh3nvFmvRBWTiFPlZ9L0z77BIagOmBO4+ffZQA5kKikDKqV2ch8773+9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGM3E9w2HvSKmdGQyfEcglNwI1/MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvWVl6Y1QzRFllOUlxWjBaREo4UnlDVTNBalg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufZxMA0G
CSqGSIb3DQEBCwUAA4IBAQC5ZISntlLUJnfoaELzBg3buSAxNYYPmZc+NEZ+6O+H
DaG/7JzOCrctgPwEo7d/qNejnq1/Bke81oD9ztW4SiPHkFa9r2P0HdJE2mTKRCdj
YLnXFxX6GIP9SOjx/PScMg/A7VbhkxIbZzQyiJJi2HStzDpUAzYDU9vE6+qEtfKz
FqGjcx8tAq/9lQY+3BfHom1cZQ8+M7J/5FBQ0rWSMW9QDgLCCPKGQXGfa0to5RSf
r28wminCUcPZvnv4ce9sjN+N+PlXTrlUaAPRE0vIehC5TlFB0iocX+KQU06tiLzY
UZQt1ZKdn8P3OaumXVH7LNM/TTTJ1X5UjRk7e+AjNLrq
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:41 2025 by rpki-client