Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5Ioby8vitPnfqmYXw-3-WpY5fJ4.roa
File: 5Ioby8vitPnfqmYXw-3-WpY5fJ4.roa (raw, json)
Hash identifier: iZvRK6EHvGahM/IbDUqldtrOD2+UpEHVCRlpY1oCpgQ=
Subject key identifier: E4:8A:1B:CB:CB:E2:B4:F9:DF:AA:66:17:C3:ED:FE:5A:96:39:7C:9E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84C3D7652C2C5B632FDFCD3A55636
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5Ioby8vitPnfqmYXw-3-WpY5fJ4.roa
Signing time: Thu 02 Jan 2025 11:48:17 +0000
ROA not before: Thu 02 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 05:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4c:3d:76:52:c2:c5:b6:32:fd:fc:d3:a5:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e48a1bcbcbe2b4f9dfaa6617c3edfe5a96397c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:32:f2:b8:d9:0a:8b:f5:90:29:87:5a:56:
1f:f8:13:6b:1d:9b:3e:88:35:c9:98:f1:dd:40:1d:
ef:49:ed:0d:18:2f:c3:f8:cc:f5:34:23:33:54:5c:
1c:6e:ed:65:fe:dc:6f:81:d4:a7:e8:c2:10:92:08:
c3:90:64:d1:c9:4b:65:b7:e4:6f:5d:20:d7:88:4b:
7a:47:cf:35:7c:6c:54:3a:40:68:70:9b:b7:ae:6f:
b7:cc:89:0b:45:e3:ad:7d:9e:4f:d6:d7:cc:d1:d1:
ca:0d:40:6e:da:d0:99:ed:8d:99:c0:e2:45:b1:07:
bc:04:73:a7:1e:75:2e:f9:b4:d0:87:7c:64:15:a0:
b2:30:15:36:c3:6b:a9:5a:77:8e:95:9e:bf:9d:a8:
70:95:e6:8a:50:48:ec:33:e9:b6:c5:59:b4:e2:c9:
aa:31:d7:d7:5e:b3:bc:d1:9e:1a:27:81:a1:34:fa:
b3:4f:16:4a:72:95:9c:48:92:07:c0:41:ed:09:06:
43:d6:cf:e3:e0:f0:1c:da:c5:5d:f3:24:50:32:b0:
56:9a:15:1c:11:93:e2:37:e7:c2:68:64:9a:6d:ea:
f4:5d:ec:53:a7:6c:ed:ef:5f:ac:0c:59:75:94:56:
b7:ad:43:6e:b2:93:4e:03:f7:74:f1:3b:fc:b0:69:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8A:1B:CB:CB:E2:B4:F9:DF:AA:66:17:C3:ED:FE:5A:96:39:7C:9E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5Ioby8vitPnfqmYXw-3-WpY5fJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d7:d5:f2:8d:60:24:88:38:7b:f1:27:6a:65:5d:d6:65:af:
82:a7:8f:82:55:af:bd:11:db:74:b3:17:82:ba:6c:d3:ea:0f:
de:6f:dd:76:80:d8:5e:9c:6f:e9:d8:4f:b1:9c:87:0f:a9:46:
74:28:7b:c7:72:92:18:d2:b0:d5:6f:ef:d7:af:3c:9f:4f:76:
1a:1c:67:00:02:61:7d:de:6a:9a:d6:12:52:b1:05:b4:5e:61:
2a:c5:e5:9d:c7:9d:ed:6b:25:32:ac:99:cd:e6:18:ec:6b:74:
45:d1:a1:fd:53:46:4f:f2:f3:44:df:bd:55:76:d4:08:0c:ea:
fa:3e:7b:a0:d5:0f:af:90:a7:e9:13:2f:ef:63:6d:4e:2e:f6:
61:5b:08:a9:28:de:cc:a4:21:4e:fb:ca:dd:38:93:81:3b:08:
3b:0a:92:e7:a6:7d:cf:48:28:74:5c:4a:74:e8:c3:49:bd:cf:
f1:a5:80:91:3e:4f:11:4d:e7:ce:52:fb:4e:cc:75:e5:8e:0d:
5f:d8:67:eb:75:a3:1b:41:64:55:05:38:57:56:df:68:d8:4c:
e9:85:22:2d:86:5e:bb:13:07:24:d4:cc:6c:c5:40:f8:53:72:
fb:14:a4:f1:fd:3f:e3:eb:07:1f:5e:44:39:6c:bb:6d:47:4a:
50:b1:c7:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2Ew9dlLCxbYy/fzTpVY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDhhMWJjYmNiZTJiNGY5ZGZhYTY2MTdjM2VkZmU1YTk2Mzk3YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2sy8rjZCov1kCmHWlYf+BNrHZs+
iDXJmPHdQB3vSe0NGC/D+Mz1NCMzVFwcbu1l/txvgdSn6MIQkgjDkGTRyUtlt+Rv
XSDXiEt6R881fGxUOkBocJu3rm+3zIkLReOtfZ5P1tfM0dHKDUBu2tCZ7Y2ZwOJF
sQe8BHOnHnUu+bTQh3xkFaCyMBU2w2upWneOlZ6/nahwleaKUEjsM+m2xVm04smq
MdfXXrO80Z4aJ4GhNPqzTxZKcpWcSJIHwEHtCQZD1s/j4PAc2sVd8yRQMrBWmhUc
EZPiN+fCaGSaber0XexTp2zt71+sDFl1lFa3rUNuspNOA/d08Tv8sGkA+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOSKG8vL4rT536pmF8Pt/lqWOXyeMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvNUlvYnk4dml0UG5mcW1ZWHctMy1XcFk1Zko0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVwsMA0G
CSqGSIb3DQEBCwUAA4IBAQCP19XyjWAkiDh78SdqZV3WZa+Cp4+CVa+9Edt0sxeC
umzT6g/eb912gNhenG/p2E+xnIcPqUZ0KHvHcpIY0rDVb+/XrzyfT3YaHGcAAmF9
3mqa1hJSsQW0XmEqxeWdx53tayUyrJnN5hjsa3RF0aH9U0ZP8vNE371VdtQIDOr6
Pnug1Q+vkKfpEy/vY21OLvZhWwipKN7MpCFO+8rdOJOBOwg7CpLnpn3PSCh0XEp0
6MNJvc/xpYCRPk8RTefOUvtOzHXljg1f2GfrdaMbQWRVBThXVt9o2EzphSIthl67
Ewck1MxsxUD4U3L7FKTx/T/j6wcfXkQ5bLttR0pQsceP
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:18:42 2025 by rpki-client