
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/ap1vGv5FVFouLBwR3lU3wRaFRr8.roa
File: ap1vGv5FVFouLBwR3lU3wRaFRr8.roa (raw, json)
Hash identifier: IeRhZyyx3cb9PDsJdoDR7nsv4A+HyzPxPVumv4EZXrE=
Subject key identifier: 6A:9D:6F:1A:FE:45:54:5A:2E:2C:1C:11:DE:55:37:C1:16:85:46:BF
Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial: 018CC8DE365D5C7558EEB36B22E4AE25DB8E
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/ap1vGv5FVFouLBwR3lU3wRaFRr8.roa
Signing time: Tue 02 Jan 2024 06:30:55 +0000
ROA not before: Tue 02 Jan 2024 06:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49402
IP address blocks: 193.169.48.0/23 maxlen: 23
185.56.221.0/24 maxlen: 24
185.56.222.0/24 maxlen: 24
185.56.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:36:5d:5c:75:58:ee:b3:6b:22:e4:ae:25:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a9d6f1afe45545a2e2c1c11de5537c1168546bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:18:1f:32:f6:73:46:66:52:7e:2a:4d:58:
f2:25:8f:f2:bc:da:b5:2d:91:17:93:b0:e5:63:e1:
3a:13:82:89:f6:ca:3d:3f:75:e6:dd:75:bf:23:24:
9d:66:6c:eb:67:3f:ec:e3:5c:86:4e:00:d8:07:2d:
b4:72:08:29:07:90:40:9e:dc:e6:ea:1d:f7:f5:ed:
a7:21:f1:19:b3:2b:0e:1d:3f:ce:a2:52:5d:40:78:
db:51:8b:d7:f4:be:59:6b:96:62:ac:6c:6c:00:62:
ec:d3:f9:3a:10:c8:c6:e0:27:60:99:c8:5f:aa:e7:
ac:4b:a2:49:24:3b:37:c2:56:5a:f4:59:73:64:01:
b5:ac:be:f3:0a:2b:ed:2a:dd:42:c8:48:0c:1a:f6:
54:1e:78:36:1b:ea:e9:56:38:e8:b0:fd:cf:12:46:
de:8e:b8:33:e4:32:ab:1d:81:f4:55:32:9f:18:82:
ed:f0:a3:a9:2b:a6:ee:f7:22:fb:f5:6e:cc:2a:e2:
d4:3f:4b:c7:d6:5b:26:8c:a8:a6:78:de:2c:f7:97:
69:26:55:59:ed:67:e3:e4:58:f3:e6:f5:2b:6c:54:
79:64:1a:43:24:2c:17:95:23:a4:51:71:de:ed:d9:
ce:fe:bd:97:2d:70:ca:11:32:ad:2a:63:c2:cb:41:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9D:6F:1A:FE:45:54:5A:2E:2C:1C:11:DE:55:37:C1:16:85:46:BF
X509v3 Authority Key Identifier:
keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/ap1vGv5FVFouLBwR3lU3wRaFRr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.220.0-185.56.222.255
193.169.48.0/23
Signature Algorithm: sha256WithRSAEncryption
65:65:34:16:6f:92:32:03:21:f4:f6:84:c7:8d:2a:7d:05:35:
42:15:5b:aa:6a:f6:12:56:4b:38:fd:a3:2b:57:2f:bd:3b:92:
af:53:2f:79:6b:8a:c4:77:0f:4f:54:75:2c:49:bc:17:6c:dd:
29:aa:a5:d2:12:03:ad:c1:09:9c:05:0f:3f:0b:d6:8a:24:29:
79:21:83:85:96:46:87:82:12:46:75:8f:1f:a4:fe:df:a1:65:
53:fa:cc:05:ab:c9:03:56:24:15:42:e4:9e:a0:be:71:bb:3c:
c6:fa:e4:85:ec:26:e8:0c:48:85:22:ac:d4:08:93:d5:f3:34:
bb:ce:be:b3:bb:a0:79:ff:bd:06:b9:d0:30:dd:83:e5:e0:6c:
f2:0b:55:6f:8d:c8:c9:20:e0:c4:c5:4f:1d:a8:60:79:87:5f:
00:20:1a:0e:d2:fe:66:f0:13:0b:e0:80:0b:5a:06:be:bf:eb:
c6:64:5d:23:08:2a:d0:3a:52:82:9a:0a:b2:d8:a6:94:f1:fd:
3d:c1:1f:75:8b:0e:66:a4:95:73:3e:f7:89:b0:8a:ae:19:6c:
33:66:a5:46:8a:d0:05:dd:c6:86:23:85:dd:8d:50:e6:7b:56:
d8:2f:cb:d3:9a:99:11:2e:12:69:e1:5b:6b:58:bd:c3:5f:c0:
ce:6e:e6:eb
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzI3jZdXHVY7rNrIuSuJduOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YWY2YTA2MDUwZTRjYTI2YjJmZGQxM2E3YzBhZDE0NmNk
MjZkYzgwHhcNMjQwMTAyMDYzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTlkNmYxYWZlNDU1NDVhMmUyYzFjMTFkZTU1MzdjMTE2ODU0NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNUYHzL2c0ZmUn4qTVjyJY/yvNq1
LZEXk7DlY+E6E4KJ9so9P3Xm3XW/IySdZmzrZz/s41yGTgDYBy20cggpB5BAntzm
6h339e2nIfEZsysOHT/OolJdQHjbUYvX9L5Za5ZirGxsAGLs0/k6EMjG4Cdgmchf
quesS6JJJDs3wlZa9FlzZAG1rL7zCivtKt1CyEgMGvZUHng2G+rpVjjosP3PEkbe
jrgz5DKrHYH0VTKfGILt8KOpK6bu9yL79W7MKuLUP0vH1lsmjKimeN4s95dpJlVZ
7Wfj5Fjz5vUrbFR5ZBpDJCwXlSOkUXHe7dnO/r2XLXDKETKtKmPCy0GHnQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGqdbxr+RVRaLiwcEd5VN8EWhUa/MB8GA1UdIwQY
MBaAFBivagYFDkyiay/dE6fArRRs0m3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMt
MDM5NmU4N2Y1MjAyLzEvYXAxdkd2NUZWRm91TEJ3UjNsVTN3UmFGUnI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMtMDM5NmU4N2Y1MjAy
LzEvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5ONwD
BAC5ON4DBAHBqTAwDQYJKoZIhvcNAQELBQADggEBAGVlNBZvkjIDIfT2hMeNKn0F
NUIVW6pq9hJWSzj9oytXL707kq9TL3lrisR3D09UdSxJvBds3SmqpdISA63BCZwF
Dz8L1ookKXkhg4WWRoeCEkZ1jx+k/t+hZVP6zAWryQNWJBVC5J6gvnG7PMb65IXs
JugMSIUirNQIk9XzNLvOvrO7oHn/vQa50DDdg+XgbPILVW+NyMkg4MTFTx2oYHmH
XwAgGg7S/mbwEwvggAtaBr6/68ZkXSMIKtA6UoKaCrLYppTx/T3BH3WLDmaklXM+
94mwiq4ZbDNmpUaK0AXdxoYjhd2NUOZ7Vtgvy9OamREuEmnhW2tYvcNfwM5u5us=
-----END CERTIFICATE-----
Generated at Wed May 7 10:14:54 2025 by rpki-client