Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/eHoQT4E9xOtaBGfVD949cxdpCgA.roa
File: eHoQT4E9xOtaBGfVD949cxdpCgA.roa (raw, json)
Hash identifier: 8nsNSJFIGi+Lw1nz4Hidg6rMQ7rExg/OfrlR57kJJyc=
Subject key identifier: 78:7A:10:4F:81:3D:C4:EB:5A:04:67:D5:0F:DE:3D:73:17:69:0A:00
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 018CC94BF0E2CC01D0DFD2E9CCBBB4EF476C
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/eHoQT4E9xOtaBGfVD949cxdpCgA.roa
Signing time: Tue 02 Jan 2024 08:30:46 +0000
ROA not before: Tue 02 Jan 2024 08:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20910
IP address blocks: 185.242.184.0/24 maxlen: 24
2a13:6000::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:f0:e2:cc:01:d0:df:d2:e9:cc:bb:b4:ef:47:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Jan 2 08:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=787a104f813dc4eb5a0467d50fde3d7317690a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:d4:4e:82:53:bd:7f:cf:15:90:eb:45:49:
c1:a5:c4:79:f3:85:66:19:51:86:a3:07:f0:bb:11:
a5:55:d7:db:92:6b:83:a3:1c:4c:64:95:7f:83:51:
7d:5f:5b:26:a4:b6:61:61:82:f2:50:cd:2a:4b:4e:
91:5a:ff:48:f4:ef:82:d1:7f:c8:b0:d8:92:7f:15:
ce:51:fe:91:37:16:ec:4b:9b:0f:fd:cd:62:45:a6:
99:28:1d:f2:ca:ab:d8:15:c5:37:83:15:20:1f:6b:
72:20:34:40:68:69:0c:ba:5c:96:05:ef:09:7e:e9:
ca:bd:0d:97:67:b2:eb:0d:33:c1:93:66:74:14:58:
92:7a:f7:2d:a7:f6:1d:ee:b9:07:0b:94:12:4c:72:
80:68:94:37:24:ea:25:f5:20:be:3c:de:e9:04:86:
4d:29:fe:2c:2a:27:57:99:04:c2:95:a7:f3:9a:98:
c8:57:19:92:53:1e:3c:11:b6:62:ec:fc:9d:71:dd:
22:f0:50:fd:21:c9:f3:7b:4d:96:5c:40:8a:46:ef:
49:af:49:cd:26:ac:88:a8:c5:30:a6:8e:2f:41:4e:
6b:6c:27:6b:44:95:c2:c9:29:98:86:c4:cc:ae:44:
cc:f0:60:9c:38:29:18:8d:92:e2:55:67:52:16:52:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7A:10:4F:81:3D:C4:EB:5A:04:67:D5:0F:DE:3D:73:17:69:0A:00
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/eHoQT4E9xOtaBGfVD949cxdpCgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.184.0/24
IPv6:
2a13:6000::/29
Signature Algorithm: sha256WithRSAEncryption
0f:79:e5:a8:c7:56:3a:c1:05:3e:60:b3:db:65:35:ac:86:50:
9b:56:e2:ca:6e:7b:9d:bd:6e:7f:f8:65:ed:70:30:ac:5f:46:
15:e8:75:22:77:a0:31:e5:e7:72:8a:58:d7:10:6e:85:97:d9:
5a:25:87:e5:2e:81:a1:ec:a9:29:97:bb:e4:cd:d5:e7:45:b8:
b6:68:89:d4:39:d5:f4:4d:16:19:69:86:c5:15:3b:9c:01:e3:
c8:13:d3:37:18:42:68:d7:0f:52:51:b3:c4:59:1c:7d:d4:a0:
ba:f6:21:85:b7:3b:ad:44:36:9d:ad:98:d0:d0:f1:6b:4c:e0:
28:05:a4:fd:6f:4b:53:72:ad:29:cd:2f:b2:5a:63:46:44:d9:
a0:16:05:32:62:2c:af:4a:b2:f7:b7:14:fe:d7:c0:b7:1d:46:
1b:31:e4:f1:9f:0f:79:29:1f:1a:78:48:13:49:10:a0:1f:07:
75:6c:ce:b0:7b:b6:29:68:08:d8:30:0d:0c:0e:04:de:26:8d:
5d:82:87:67:87:49:de:d9:0e:8c:ff:44:43:9b:6b:5d:2e:61:
10:b9:55:6a:24:ce:52:14:0f:82:fb:cc:ff:66:44:a5:d2:f0:
3d:60:16:43:be:d7:9e:c9:5f:eb:14:a4:c6:dc:46:0b:93:48:
2d:7c:69:10
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJS/DizAHQ39LpzLu070dsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2Y0YmM0MTY2MzlhN2UxYjZjNGYwMTk5ZTAyZTMxNjBh
MWU2NDIwHhcNMjQwMTAyMDgzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODdhMTA0ZjgxM2RjNGViNWEwNDY3ZDUwZmRlM2Q3MzE3NjkwYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSzUToJTvX/PFZDrRUnBpcR584Vm
GVGGowfwuxGlVdfbkmuDoxxMZJV/g1F9X1smpLZhYYLyUM0qS06RWv9I9O+C0X/I
sNiSfxXOUf6RNxbsS5sP/c1iRaaZKB3yyqvYFcU3gxUgH2tyIDRAaGkMulyWBe8J
funKvQ2XZ7LrDTPBk2Z0FFiSevctp/Yd7rkHC5QSTHKAaJQ3JOol9SC+PN7pBIZN
Kf4sKidXmQTClafzmpjIVxmSUx48EbZi7Pydcd0i8FD9Icnze02WXECKRu9Jr0nN
JqyIqMUwpo4vQU5rbCdrRJXCySmYhsTMrkTM8GCcOCkYjZLiVWdSFlKVSQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHh6EE+BPcTrWgRn1Q/ePXMXaQoAMB8GA1UdIwQY
MBaAFFU/S8QWY5p+G2xPAZngLjFgoeZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzkt
NWRkYWZiNTk1NGJhLzEvZUhvUVQ0RTl4T3RhQkdmVkQ5NDljeGRwQ2dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzktNWRkYWZiNTk1NGJh
LzEvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufK4MA0E
AgACMAcDBQMqE2AAMA0GCSqGSIb3DQEBCwUAA4IBAQAPeeWox1Y6wQU+YLPbZTWs
hlCbVuLKbnudvW5/+GXtcDCsX0YV6HUid6Ax5edyiljXEG6Fl9laJYflLoGh7Kkp
l7vkzdXnRbi2aInUOdX0TRYZaYbFFTucAePIE9M3GEJo1w9SUbPEWRx91KC69iGF
tzutRDadrZjQ0PFrTOAoBaT9b0tTcq0pzS+yWmNGRNmgFgUyYiyvSrL3txT+18C3
HUYbMeTxnw95KR8aeEgTSRCgHwd1bM6we7YpaAjYMA0MDgTeJo1dgodnh0ne2Q6M
/0RDm2tdLmEQuVVqJM5SFA+C+8z/ZkSl0vA9YBZDvteeyV/rFKTG3EYLk0gtfGkQ
-----END CERTIFICATE-----
Generated at Sun May 4 01:00:22 2025 by rpki-client