Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ryERjGCk4gb2T-KDjQaL0qL87ko.roa
File: ryERjGCk4gb2T-KDjQaL0qL87ko.roa (raw, json)
Hash identifier: Dk4b9LLxcLJMjq9t7VOvLbFww2bjbBFe99Cz3Mrtn/U=
Subject key identifier: AF:21:11:8C:60:A4:E2:06:F6:4F:E2:83:8D:06:8B:D2:A2:FC:EE:4A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193E0183C8EFE24475106662E66DFE8801D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ryERjGCk4gb2T-KDjQaL0qL87ko.roa
Signing time: Thu 19 Dec 2024 18:05:04 +0000
ROA not before: Thu 19 Dec 2024 18:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199239
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:18:3c:8e:fe:24:47:51:06:66:2e:66:df:e8:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 18:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af21118c60a4e206f64fe2838d068bd2a2fcee4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:e4:a1:ee:7c:0e:9c:c2:a2:d1:6c:e3:5c:
5a:66:23:b9:04:f7:9d:80:32:19:f8:09:e3:c2:7c:
1c:7b:a8:e7:13:af:ff:18:77:20:7d:0e:0a:37:f1:
f8:d3:ea:26:a7:fe:c8:2e:39:0a:b7:94:59:07:fb:
26:09:c1:a3:83:b1:cc:7f:51:94:89:72:62:95:81:
e8:82:da:80:e0:0c:2a:1c:52:60:09:97:c3:7e:00:
c6:2f:97:ad:61:bf:00:e2:c8:d0:53:8b:e3:dd:d6:
36:a9:8f:04:a1:ab:e2:5c:42:0e:d9:7e:95:7d:88:
d7:17:d5:0a:e2:73:a5:aa:c7:59:01:df:fa:1f:39:
68:d6:75:6c:2d:da:cb:94:5e:62:08:76:c0:cc:03:
f6:8f:2f:86:53:c2:83:09:02:50:a9:a5:02:f8:b1:
08:44:7d:8d:6e:09:bc:b3:69:7c:0e:91:78:24:6a:
3f:bc:74:e9:cf:af:82:29:6d:04:78:1f:53:e2:79:
cd:82:71:63:86:0d:0e:91:e9:39:79:c1:15:35:c7:
a2:48:82:ca:ab:e5:0f:05:00:a3:89:96:8c:42:cd:
6d:4a:c4:5c:87:ec:14:28:18:d0:8a:4b:55:2b:25:
16:c3:21:a2:49:f9:63:60:de:42:21:43:39:95:84:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:11:8C:60:A4:E2:06:F6:4F:E2:83:8D:06:8B:D2:A2:FC:EE:4A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ryERjGCk4gb2T-KDjQaL0qL87ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
27:28:66:ee:81:b4:50:24:64:b5:aa:88:24:77:a4:de:d0:9b:
b1:e3:22:b7:14:af:16:12:dd:ee:81:ff:81:13:a1:08:b8:d6:
ad:0c:ad:95:31:51:cd:12:38:54:41:30:38:83:0e:75:df:d2:
98:ef:3e:78:87:a1:34:21:e1:0d:42:36:fb:a2:d4:91:0d:36:
f9:92:bd:d0:65:62:a6:c3:6f:2b:d8:bd:29:a8:be:af:42:3d:
2c:e0:c8:eb:be:90:ed:58:bf:29:07:1e:69:4c:7f:b4:37:8b:
30:9b:28:b7:a6:3a:dd:bb:83:d8:a7:75:31:a9:36:ec:71:24:
43:be:90:cc:68:86:36:07:60:bf:e8:77:37:32:47:17:48:9d:
87:65:60:df:4e:51:cf:f1:e9:44:46:76:33:39:a1:99:cc:c3:
fe:d8:5e:74:bf:1a:54:4f:5a:3a:0e:42:0f:ae:17:0d:2b:a9:
34:62:4e:ee:ba:fb:1f:cc:de:27:d2:02:b2:8b:f7:20:8c:52:
55:9b:d7:40:7e:60:ae:81:f6:91:86:da:4f:41:d5:a2:12:4b:
e2:4d:51:02:4f:37:02:3c:68:fe:71:68:fd:d5:02:50:7d:fc:
24:65:3e:ed:9a:d0:51:06:ea:48:2d:6e:ab:16:a5:76:0c:19:
9b:57:0c:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPgGDyO/iRHUQZmLmbf6IAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjE5MTgwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjIxMTE4YzYwYTRlMjA2ZjY0ZmUyODM4ZDA2OGJkMmEyZmNlZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlbkoe58DpzCotFs41xaZiO5BPed
gDIZ+Anjwnwce6jnE6//GHcgfQ4KN/H40+omp/7ILjkKt5RZB/smCcGjg7HMf1GU
iXJilYHogtqA4AwqHFJgCZfDfgDGL5etYb8A4sjQU4vj3dY2qY8EoaviXEIO2X6V
fYjXF9UK4nOlqsdZAd/6Hzlo1nVsLdrLlF5iCHbAzAP2jy+GU8KDCQJQqaUC+LEI
RH2Nbgm8s2l8DpF4JGo/vHTpz6+CKW0EeB9T4nnNgnFjhg0Okek5ecEVNceiSILK
q+UPBQCjiZaMQs1tSsRch+wUKBjQiktVKyUWwyGiSfljYN5CIUM5lYTilQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK8hEYxgpOIG9k/ig40Gi9Ki/O5KMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcnlFUmpHQ2s0Z2IyVC1LRGpRYUwwcUw4N2tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueKtAwQA
ueKvMA0GCSqGSIb3DQEBCwUAA4IBAQAnKGbugbRQJGS1qogkd6Te0Jux4yK3FK8W
Et3ugf+BE6EIuNatDK2VMVHNEjhUQTA4gw5139KY7z54h6E0IeENQjb7otSRDTb5
kr3QZWKmw28r2L0pqL6vQj0s4MjrvpDtWL8pBx5pTH+0N4swmyi3pjrdu4PYp3Ux
qTbscSRDvpDMaIY2B2C/6Hc3MkcXSJ2HZWDfTlHP8elERnYzOaGZzMP+2F50vxpU
T1o6DkIPrhcNK6k0Yk7uuvsfzN4n0gKyi/cgjFJVm9dAfmCugfaRhtpPQdWiEkvi
TVECTzcCPGj+cWj91QJQffwkZT7tmtBRBupILW6rFqV2DBmbVwwx
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:49:34 2025 by rpki-client