Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/CA-c9cywUcEJCCu7WvhF-wAPtGs.roa
File: CA-c9cywUcEJCCu7WvhF-wAPtGs.roa (raw, json)
Hash identifier: 6jgMFCJby/3YtMakmaID2W0eIuzdYdQRS9kKnPdYly8=
Subject key identifier: 08:0F:9C:F5:CC:B0:51:C1:09:08:2B:BB:5A:F8:45:FB:00:0F:B4:6B
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018CC9BA718000D69C96DB4351AC4BE6D7DC
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/CA-c9cywUcEJCCu7WvhF-wAPtGs.roa
Signing time: Tue 02 Jan 2024 10:31:28 +0000
ROA not before: Tue 02 Jan 2024 10:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42338
IP address blocks: 185.203.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 07:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:71:80:00:d6:9c:96:db:43:51:ac:4b:e6:d7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 10:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=080f9cf5ccb051c109082bbb5af845fb000fb46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:89:2b:77:c0:aa:36:63:81:69:c4:48:ba:
08:ed:aa:68:a1:cc:61:da:93:d0:de:da:9c:8f:df:
00:37:17:51:c6:fd:d6:de:7b:e2:79:28:93:3a:70:
05:be:2b:e7:9a:ae:b7:46:4f:ab:17:ed:c2:a1:eb:
62:91:4d:e5:e5:5d:f0:91:48:6c:dc:53:5f:de:78:
0c:5f:e2:c6:58:91:df:12:8e:b1:dd:d4:d6:50:ea:
7e:7b:f6:ff:0a:07:35:29:fc:36:63:e7:1d:e6:fe:
a2:93:bf:b0:27:f6:0f:f0:99:fc:9e:6c:52:31:ea:
b2:65:52:e4:eb:36:04:8d:f8:e5:3c:89:d2:d0:99:
e0:98:f9:49:ee:0b:16:02:8b:9d:6f:ab:ce:84:7d:
ef:a6:ca:ab:c4:80:de:bc:98:03:50:e5:d6:92:da:
12:03:6f:bc:3e:76:7d:e4:47:cf:63:6d:d6:e0:6e:
fd:79:3d:c5:13:14:94:85:91:d8:f7:f0:ea:bf:d8:
0c:3a:1c:d9:24:30:fe:85:0b:de:00:ee:94:aa:4a:
33:63:16:60:91:eb:6e:59:63:89:de:5e:3a:a6:f5:
c9:9e:ab:bf:3c:b9:ea:3c:2c:e9:ff:56:a6:3b:8f:
f5:21:09:81:11:47:87:0c:b5:ac:88:f4:34:1c:1a:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0F:9C:F5:CC:B0:51:C1:09:08:2B:BB:5A:F8:45:FB:00:0F:B4:6B
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/CA-c9cywUcEJCCu7WvhF-wAPtGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b4:66:19:ef:ea:d5:a5:fe:be:b0:3b:17:56:8c:15:49:bf:
92:47:9a:52:52:36:e6:ca:01:79:1a:02:3a:7e:97:0c:39:ce:
a8:24:37:80:e3:4d:38:21:bd:1a:2a:68:3b:e1:66:1d:41:89:
90:8c:79:25:c6:a8:e8:43:5b:42:d1:1f:2d:d3:11:84:69:52:
07:c2:62:86:95:3f:1e:68:48:ca:b9:cb:d3:7c:e5:de:35:d0:
9b:83:30:c6:da:a7:c0:5e:03:3c:33:2f:18:0f:b0:0c:90:32:
8b:a4:b9:5e:17:ec:07:b6:bb:29:6e:5f:f2:cc:6f:1c:cd:cc:
0f:92:7c:c7:3f:3d:8b:f6:9d:10:52:00:f7:64:49:9f:e9:23:
ee:81:52:b3:78:c2:f6:ad:49:9a:89:fa:2e:7b:61:f7:27:32:
60:ae:4b:13:c5:29:e1:fb:a4:ea:99:60:30:2b:6d:2a:5a:3e:
75:f8:89:dc:02:d7:df:dd:ab:c2:8a:c6:15:9e:f5:27:f5:a4:
3e:6b:f5:1d:6a:01:c6:bc:5d:fa:96:da:54:94:64:8c:7e:b2:
56:6b:15:ca:2c:af:52:2d:59:ea:e8:d8:cd:b3:3a:d7:d6:40:
4c:39:92:b5:9b:72:5d:1d:cc:be:a4:e4:3e:84:1b:11:0b:49:
38:32:5a:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJunGAANaclttDUaxL5tfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjQwMTAyMTAzMTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODBmOWNmNWNjYjA1MWMxMDkwODJiYmI1YWY4NDVmYjAwMGZiNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbuJK3fAqjZjgWnESLoI7apoocxh
2pPQ3tqcj98ANxdRxv3W3nvieSiTOnAFvivnmq63Rk+rF+3CoetikU3l5V3wkUhs
3FNf3ngMX+LGWJHfEo6x3dTWUOp+e/b/Cgc1Kfw2Y+cd5v6ik7+wJ/YP8Jn8nmxS
MeqyZVLk6zYEjfjlPInS0JngmPlJ7gsWAoudb6vOhH3vpsqrxIDevJgDUOXWktoS
A2+8PnZ95EfPY23W4G79eT3FExSUhZHY9/Dqv9gMOhzZJDD+hQveAO6UqkozYxZg
ketuWWOJ3l46pvXJnqu/PLnqPCzp/1amO4/1IQmBEUeHDLWsiPQ0HBrG/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgPnPXMsFHBCQgru1r4RfsAD7RrMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvQ0EtYzljeXdVY0VKQ0N1N1d2aEYtd0FQdEdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucshMA0G
CSqGSIb3DQEBCwUAA4IBAQAdtGYZ7+rVpf6+sDsXVowVSb+SR5pSUjbmygF5GgI6
fpcMOc6oJDeA4004Ib0aKmg74WYdQYmQjHklxqjoQ1tC0R8t0xGEaVIHwmKGlT8e
aEjKucvTfOXeNdCbgzDG2qfAXgM8My8YD7AMkDKLpLleF+wHtrspbl/yzG8czcwP
knzHPz2L9p0QUgD3ZEmf6SPugVKzeML2rUmaifoue2H3JzJgrksTxSnh+6TqmWAw
K20qWj51+IncAtff3avCisYVnvUn9aQ+a/UdagHGvF36ltpUlGSMfrJWaxXKLK9S
LVnq6NjNszrX1kBMOZK1m3JdHcy+pOQ+hBsRC0k4Mlpv
-----END CERTIFICATE-----
Generated at Tue May 6 06:17:36 2025 by rpki-client