Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/iY9OEKWlNNraFJZ66bOfv5h4SBY.roa
File: iY9OEKWlNNraFJZ66bOfv5h4SBY.roa (raw, json)
Hash identifier: qiiyPbORa8eM2x8m+DGXMF/H7kr++lov/llHrBlcwPI=
Subject key identifier: 89:8F:4E:10:A5:A5:34:DA:DA:14:96:7A:E9:B3:9F:BF:98:78:48:16
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 018CC348998C8EF1C7F32D77D5741710277D
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/iY9OEKWlNNraFJZ66bOfv5h4SBY.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.228.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:99:8c:8e:f1:c7:f3:2d:77:d5:74:17:10:27:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=898f4e10a5a534dada14967ae9b39fbf98784816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:30:ea:9e:cc:0a:48:31:e3:93:5a:c1:1d:
ef:eb:71:c3:5c:1b:16:02:15:7f:e3:cc:71:9a:79:
cd:22:63:51:85:e1:17:07:f9:b6:48:3f:8f:32:20:
2f:cc:de:b0:e2:11:e4:ac:dc:1f:6c:40:6a:9c:78:
7d:18:0e:6b:b0:b9:66:e1:4c:46:84:30:f3:fc:f1:
cd:76:12:b9:51:6b:cc:25:a3:5f:50:f4:a9:45:6d:
b8:38:c2:c3:30:7e:56:4f:4a:5e:b1:09:7d:62:56:
bc:55:45:f6:c6:6c:6a:92:a5:03:0b:13:37:9d:0c:
51:db:94:8f:1a:33:61:09:ff:39:60:94:08:27:18:
cf:5c:8c:de:df:45:94:55:ad:1d:84:56:83:0f:d0:
6a:38:9b:47:61:66:35:47:76:73:5b:8a:be:a2:6b:
33:3e:c8:1c:47:61:15:5c:34:d2:fd:65:7e:3d:c9:
ef:09:b3:c4:6f:36:d0:52:19:37:c2:f6:85:6a:b1:
5e:f4:7a:55:88:22:8e:c9:19:57:b8:53:5c:0f:a3:
1b:c2:3e:76:20:89:6c:4e:2b:1f:85:92:98:d9:d3:
e9:86:e9:5e:e6:06:36:d7:3e:91:22:0f:1c:1e:d0:
22:4f:95:4f:35:e2:65:56:75:ce:b8:3d:dd:34:24:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:4E:10:A5:A5:34:DA:DA:14:96:7A:E9:B3:9F:BF:98:78:48:16
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/iY9OEKWlNNraFJZ66bOfv5h4SBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
67:10:76:9a:f2:1a:cb:de:0e:5f:4d:42:b5:e3:f7:fb:1d:03:
ea:45:b1:4d:a2:4f:1d:53:a4:7e:37:50:0a:91:50:1f:71:b7:
4a:a5:bf:61:66:47:43:fd:62:11:36:bd:73:65:b9:97:53:b4:
4b:96:b7:4c:cb:1d:93:f7:3a:8f:63:d1:32:44:c7:51:47:26:
d0:b7:16:f5:0f:71:8a:2b:ff:cf:97:23:6c:59:14:ba:6d:64:
21:d1:61:ec:47:93:1b:3b:74:8c:b7:1f:50:07:c7:b0:34:65:
1e:7b:3f:f6:79:dd:6a:55:da:bf:0f:ad:b3:80:55:d6:e6:bd:
b3:89:3b:a7:79:f0:cc:5c:8d:5f:92:76:7c:69:de:76:49:e3:
1d:0d:c0:55:cb:8e:9b:dc:b1:e1:da:5c:fa:a2:68:0d:33:62:
d1:15:79:6a:e8:d0:dd:41:1f:b5:0a:0e:00:ba:26:51:7f:ed:
b5:28:07:54:f3:ec:f4:f8:21:91:d3:61:a2:73:1e:63:5d:7e:
1d:24:dd:f6:e1:db:a2:fa:2b:ed:f9:8a:64:e5:74:9e:87:5c:
01:ba:46:51:c3:d7:59:05:b4:97:c9:36:60:67:05:9b:59:06:
92:f3:4b:0a:28:d6:fa:c6:78:02:82:b3:30:7a:75:a6:1a:c5:
88:90:86:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJmMjvHH8y131XQXECd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjQwMTAxMDQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OThmNGUxMGE1YTUzNGRhZGExNDk2N2FlOWIzOWZiZjk4Nzg0ODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9gw6p7MCkgx45NawR3v63HDXBsW
AhV/48xxmnnNImNRheEXB/m2SD+PMiAvzN6w4hHkrNwfbEBqnHh9GA5rsLlm4UxG
hDDz/PHNdhK5UWvMJaNfUPSpRW24OMLDMH5WT0pesQl9Yla8VUX2xmxqkqUDCxM3
nQxR25SPGjNhCf85YJQIJxjPXIze30WUVa0dhFaDD9BqOJtHYWY1R3ZzW4q+omsz
PsgcR2EVXDTS/WV+PcnvCbPEbzbQUhk3wvaFarFe9HpViCKOyRlXuFNcD6Mbwj52
IIlsTisfhZKY2dPphule5gY21z6RIg8cHtAiT5VPNeJlVnXOuD3dNCRHIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImPThClpTTa2hSWeumzn7+YeEgWMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvaVk5T0VLV2xOTnJhRkpaNjZiT2Z2NWg0U0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQCMA0G
CSqGSIb3DQEBCwUAA4IBAQBnEHaa8hrL3g5fTUK14/f7HQPqRbFNok8dU6R+N1AK
kVAfcbdKpb9hZkdD/WIRNr1zZbmXU7RLlrdMyx2T9zqPY9EyRMdRRybQtxb1D3GK
K//PlyNsWRS6bWQh0WHsR5MbO3SMtx9QB8ewNGUeez/2ed1qVdq/D62zgFXW5r2z
iTunefDMXI1fknZ8ad52SeMdDcBVy46b3LHh2lz6omgNM2LRFXlq6NDdQR+1Cg4A
uiZRf+21KAdU8+z0+CGR02Gicx5jXX4dJN324dui+ivt+Ypk5XSeh1wBukZRw9dZ
BbSXyTZgZwWbWQaS80sKKNb6xngCgrMwenWmGsWIkIbd
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:49 2025 by rpki-client