Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/l3yeJrlKL4w2dCv7o1inOVyn9os.roa
File: l3yeJrlKL4w2dCv7o1inOVyn9os.roa (raw, json)
Hash identifier: s964VSwm2OCXwFKg8z9IUotPavnQpbsK3q9gGKogmI4=
Subject key identifier: 97:7C:9E:26:B9:4A:2F:8C:36:74:2B:FB:A3:58:A7:39:5C:A7:F6:8B
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 018ECD25BF73C3386C90A38421A89624D24C
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/l3yeJrlKL4w2dCv7o1inOVyn9os.roa
Signing time: Thu 11 Apr 2024 12:33:06 +0000
ROA not before: Thu 11 Apr 2024 12:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200249
IP address blocks: 185.252.140.0/22 maxlen: 22
185.252.140.0/24 maxlen: 24
2a13:7840::/29 maxlen: 29
2a13:7840::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Jun 2024 09:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:25:bf:73:c3:38:6c:90:a3:84:21:a8:96:24:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Apr 11 12:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=977c9e26b94a2f8c36742bfba358a7395ca7f68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:6d:e8:47:0c:96:28:fb:d5:e0:b3:71:d2:
e9:6f:ef:00:18:ae:8e:1d:f4:08:4d:d9:0b:b6:bc:
03:34:a6:7c:05:97:1d:ce:0a:5b:d6:4d:e9:db:1e:
f0:0e:20:77:df:f3:1a:da:c3:9a:0f:b9:bd:9b:6d:
7d:8b:cc:c2:98:7b:ca:42:af:81:f8:aa:0c:25:5a:
2b:5b:10:de:2b:e4:8e:34:c4:ee:27:0b:b1:7a:b0:
42:33:ca:d0:50:f2:81:86:37:d3:da:1a:7b:18:f4:
ac:e9:3d:87:51:10:bf:48:b0:fe:66:96:dd:12:c3:
42:9e:26:81:e9:11:bc:54:4a:e6:39:8c:86:bd:40:
e9:5d:a0:b3:5e:a2:2e:25:1a:82:a3:b5:6e:04:e6:
4b:a9:ca:4e:55:0f:e9:af:44:44:54:35:ed:62:b8:
b7:35:76:ff:e7:1f:74:d9:5a:10:87:55:18:40:18:
4d:6b:3d:24:a5:14:34:20:d5:b4:5e:75:a4:25:a3:
b5:0d:12:3e:11:01:4a:83:88:a7:84:2f:9a:dd:4a:
27:26:df:58:22:87:57:73:9f:da:e5:78:13:de:9d:
87:dd:5c:f5:49:ff:64:70:d6:15:66:e9:c0:96:2a:
3c:56:7a:04:e7:e2:ff:85:91:b6:d9:4f:5b:21:17:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:9E:26:B9:4A:2F:8C:36:74:2B:FB:A3:58:A7:39:5C:A7:F6:8B
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/l3yeJrlKL4w2dCv7o1inOVyn9os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.140.0/22
IPv6:
2a13:7840::/29
Signature Algorithm: sha256WithRSAEncryption
45:ba:3c:7a:0e:e3:81:93:6c:44:d2:b1:b5:81:ef:21:b7:93:
b3:b9:75:c0:69:48:e6:6e:a0:0e:8e:0d:31:93:9e:4e:4c:33:
e6:4b:2a:ef:a3:21:d7:9a:21:10:52:e2:a9:de:30:97:b9:14:
a4:83:b8:78:8c:9d:d5:8e:80:71:43:a3:b8:e4:53:b7:c7:51:
b9:09:cd:de:f8:ad:e7:b4:9f:11:c4:11:c3:8e:ef:ee:2b:db:
ec:df:f6:fa:59:c2:cf:ed:f7:51:b7:f1:22:8a:f8:42:96:ca:
b9:de:cc:7c:ea:4d:dc:7b:d7:bc:15:ac:4f:2e:bc:39:d8:98:
e3:b9:7d:d9:1c:7c:ce:ec:37:a7:43:fb:5b:43:e1:b0:cd:4b:
76:12:bf:b8:75:4a:4e:05:65:60:85:35:fe:8b:a9:40:ba:89:
9f:a3:ef:33:94:22:ba:1a:fb:cd:c5:4e:70:7f:c8:21:99:99:
01:2a:73:97:04:71:bc:f4:79:a9:54:81:55:b5:17:35:a2:be:
eb:c3:f5:05:6c:a1:72:40:9c:d2:c7:97:13:0c:f8:88:bf:38:
5e:c3:de:54:93:41:3d:6f:37:3d:8c:db:94:50:39:1f:ef:3b:
cd:f1:fc:1b:51:1e:03:e9:2f:4c:92:56:8f:f1:b6:54:5d:c2:
40:95:6a:d4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY7NJb9zwzhskKOEIaiWJNJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx
YjZlMGMwHhcNMjQwNDExMTIzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzdjOWUyNmI5NGEyZjhjMzY3NDJiZmJhMzU4YTczOTVjYTdmNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTFt6EcMlij71eCzcdLpb+8AGK6O
HfQITdkLtrwDNKZ8BZcdzgpb1k3p2x7wDiB33/Ma2sOaD7m9m219i8zCmHvKQq+B
+KoMJVorWxDeK+SONMTuJwuxerBCM8rQUPKBhjfT2hp7GPSs6T2HURC/SLD+Zpbd
EsNCniaB6RG8VErmOYyGvUDpXaCzXqIuJRqCo7VuBOZLqcpOVQ/pr0REVDXtYri3
NXb/5x902VoQh1UYQBhNaz0kpRQ0INW0XnWkJaO1DRI+EQFKg4inhC+a3UonJt9Y
IodXc5/a5XgT3p2H3Vz1Sf9kcNYVZunAlio8VnoE5+L/hZG22U9bIRec6wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJd8nia5Si+MNnQr+6NYpzlcp/aLMB8GA1UdIwQY
MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt
MTM2NjU2YTNlZGU3LzEvbDN5ZUpybEtMNHcyZEN2N28xaW5PVnluOW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3
LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufyMMA0E
AgACMAcDBQMqE3hAMA0GCSqGSIb3DQEBCwUAA4IBAQBFujx6DuOBk2xE0rG1ge8h
t5OzuXXAaUjmbqAOjg0xk55OTDPmSyrvoyHXmiEQUuKp3jCXuRSkg7h4jJ3VjoBx
Q6O45FO3x1G5Cc3e+K3ntJ8RxBHDju/uK9vs3/b6WcLP7fdRt/EiivhClsq53sx8
6k3ce9e8FaxPLrw52JjjuX3ZHHzO7DenQ/tbQ+GwzUt2Er+4dUpOBWVghTX+i6lA
uomfo+8zlCK6GvvNxU5wf8ghmZkBKnOXBHG89HmpVIFVtRc1or7rw/UFbKFyQJzS
x5cTDPiIvzhew95Uk0E9bzc9jNuUUDkf7zvN8fwbUR4D6S9MklaP8bZUXcJAlWrU
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:32 2025 by rpki-client