Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/C8c_DzinsSkKGWrgh0JIA1Vedew.roa
File: C8c_DzinsSkKGWrgh0JIA1Vedew.roa (raw, json)
Hash identifier: zMVvUacgSqgOEQSUf/Zun9pYBOCGW2wZhOSpHLkAdgY=
Subject key identifier: 0B:C7:3F:0F:38:A7:B1:29:0A:19:6A:E0:87:42:48:03:55:5E:75:EC
Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial: 018FEDEB3D17256BC65857948250C1E8D284
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/C8c_DzinsSkKGWrgh0JIA1Vedew.roa
Signing time: Thu 06 Jun 2024 14:19:27 +0000
ROA not before: Thu 06 Jun 2024 14:19:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43646
IP address blocks: 91.197.164.0/22 maxlen: 22
94.247.232.0/21 maxlen: 21
95.81.128.0/18 maxlen: 18
185.215.136.0/22 maxlen: 22
185.241.96.0/22 maxlen: 22
213.205.96.0/19 maxlen: 19
217.71.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 06 Jun 2024 14:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:eb:3d:17:25:6b:c6:58:57:94:82:50:c1:e8:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Validity
Not Before: Jun 6 14:19:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bc73f0f38a7b1290a196ae087424803555e75ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:51:f9:93:00:b9:15:96:b4:8f:3f:99:9a:
80:24:ae:fe:dc:89:b4:8f:a9:d4:02:6a:4b:be:7a:
73:f8:06:33:f7:c5:da:53:d6:97:7a:c1:65:7a:0e:
a5:ae:73:33:61:38:67:d7:c2:12:46:e7:af:8d:98:
4c:67:c8:bf:43:63:af:0d:ff:db:d5:91:5a:48:97:
a0:95:b6:d0:ec:1f:7f:87:dd:4f:74:c8:8f:b1:b8:
ad:7a:86:16:23:e0:fe:5b:75:84:11:a2:32:d9:20:
9a:c5:dd:74:58:cf:ce:3e:66:51:8e:91:66:89:09:
7e:2c:32:72:45:5f:c6:71:45:2f:18:f7:4e:47:6a:
6b:2c:13:47:fe:cf:c6:b2:90:b0:22:a5:37:ba:d8:
05:7b:bb:35:19:2a:88:a6:e2:84:2d:ee:06:a0:a0:
87:8e:8d:14:8f:31:11:fe:21:ed:45:0d:33:64:e4:
f4:77:ba:b1:1a:d2:91:ef:3a:1f:86:16:c8:35:49:
57:aa:9b:c1:5b:9d:54:d6:33:e1:20:0e:98:46:b3:
56:7e:97:9d:45:96:f1:72:c3:4d:a9:6f:cf:c0:21:
99:a5:9e:30:79:05:4e:ac:f8:a5:d5:f9:d4:bf:2f:
d7:41:43:fc:b4:78:c1:d1:2c:37:40:f8:8d:c5:56:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C7:3F:0F:38:A7:B1:29:0A:19:6A:E0:87:42:48:03:55:5E:75:EC
X509v3 Authority Key Identifier:
keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/C8c_DzinsSkKGWrgh0JIA1Vedew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.164.0/22
94.247.232.0/21
95.81.128.0/18
185.215.136.0/22
185.241.96.0/22
213.205.96.0/19
217.71.208.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:ce:c4:68:56:1f:d2:5b:8a:21:a9:75:fe:8c:ef:1b:b8:8d:
9d:44:1e:93:8b:9a:c1:d5:63:cc:aa:37:85:2f:a2:b8:f9:d9:
0d:fd:1c:9c:73:05:44:61:53:e0:22:ae:b7:5b:21:96:b3:48:
24:c0:2e:ea:28:83:b8:9d:b8:50:8a:4f:04:09:cc:47:55:a9:
30:aa:6c:80:c7:00:30:cf:c0:8a:de:db:04:06:da:ee:a7:be:
17:52:34:bc:ff:4a:17:26:ce:a4:bb:03:79:ba:7e:75:cf:17:
ff:a9:8f:a2:21:b0:26:82:5a:18:4a:15:aa:dc:7e:0b:79:63:
34:f5:df:70:fa:71:3d:bc:2e:78:e0:bd:34:43:c9:37:c4:cd:
81:ae:3f:88:bc:f9:28:71:c1:1a:f7:50:60:c5:7b:5b:2d:a1:
88:c5:93:1c:ba:af:74:10:07:7a:e5:05:32:69:f4:8b:24:82:
16:12:34:0a:d6:d5:db:9a:e9:37:55:fd:a7:83:bc:93:56:6d:
a2:d6:76:3a:46:10:51:ab:97:de:7d:7c:4b:3d:f2:6e:ae:62:
5b:d4:f2:c5:1c:87:90:01:af:0f:16:91:ee:c7:13:13:a5:81:
c0:5c:d5:da:e8:e2:30:af:b5:97:8c:2c:1f:7a:52:b1:59:c5:
db:66:54:28
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY/t6z0XJWvGWFeUglDB6NKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMGNhMzQ4YWM4OTFjMzM2ZDhjNzk0NWE1YmQ1YjMzMjVl
YjVmMGIwHhcNMjQwNjA2MTQxOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmM3M2YwZjM4YTdiMTI5MGExOTZhZTA4NzQyNDgwMzU1NWU3NWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3JR+ZMAuRWWtI8/mZqAJK7+3Im0
j6nUAmpLvnpz+AYz98XaU9aXesFleg6lrnMzYThn18ISRuevjZhMZ8i/Q2OvDf/b
1ZFaSJeglbbQ7B9/h91PdMiPsbiteoYWI+D+W3WEEaIy2SCaxd10WM/OPmZRjpFm
iQl+LDJyRV/GcUUvGPdOR2prLBNH/s/GspCwIqU3utgFe7s1GSqIpuKELe4GoKCH
jo0UjzER/iHtRQ0zZOT0d7qxGtKR7zofhhbINUlXqpvBW51U1jPhIA6YRrNWfped
RZbxcsNNqW/PwCGZpZ4weQVOrPil1fnUvy/XQUP8tHjB0Sw3QPiNxVZx2wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFAvHPw84p7EpChlq4IdCSANVXnXsMB8GA1UdIwQY
MBaAFMsMo0isiRwzbYx5RaW9WzMl618LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEt
NDI1MjMyZmQ1NjQzLzEvQzhjX0R6aW5zU2tLR1dyZ2gwSklBMVZlZGV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEtNDI1MjMyZmQ1NjQz
LzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCW8WkAwQD
XvfoAwQGX1GAAwQCudeIAwQCufFgAwQF1c1gAwQD2UfQMA0GCSqGSIb3DQEBCwUA
A4IBAQCqzsRoVh/SW4ohqXX+jO8buI2dRB6Ti5rB1WPMqjeFL6K4+dkN/RyccwVE
YVPgIq63WyGWs0gkwC7qKIO4nbhQik8ECcxHVakwqmyAxwAwz8CK3tsEBtrup74X
UjS8/0oXJs6kuwN5un51zxf/qY+iIbAmgloYShWq3H4LeWM09d9w+nE9vC544L00
Q8k3xM2Brj+IvPkoccEa91BgxXtbLaGIxZMcuq90EAd65QUyafSLJIIWEjQK1tXb
muk3Vf2ng7yTVm2i1nY6RhBRq5fefXxLPfJurmJb1PLFHIeQAa8PFpHuxxMTpYHA
XNXa6OIwr7WXjCwfelKxWcXbZlQo
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:37:54 2025 by rpki-client