Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nTT3_JlTNEhfz1BBweFpVGy7Ffk.roa
File: nTT3_JlTNEhfz1BBweFpVGy7Ffk.roa (raw, json)
Hash identifier: 1+85ZRvhWTgC47hTH4EGjiFZV2+3mIxbl2CsYoyKP+E=
Subject key identifier: 9D:34:F7:FC:99:53:34:48:5F:CF:50:41:C1:E1:69:54:6C:BB:15:F9
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01951925A4C1C82A49615A65F0401BA1F9B6
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nTT3_JlTNEhfz1BBweFpVGy7Ffk.roa
Signing time: Tue 18 Feb 2025 13:00:52 +0000
ROA not before: Tue 18 Feb 2025 13:00:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202804
IP address blocks: 185.20.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 13:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:25:a4:c1:c8:2a:49:61:5a:65:f0:40:1b:a1:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Feb 18 13:00:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d34f7fc995334485fcf5041c1e169546cbb15f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:d2:dd:c5:93:23:f8:30:f4:34:e0:8c:d5:
93:47:32:13:00:e4:58:4a:1b:26:42:ed:20:48:8f:
a0:c9:65:3d:d9:28:36:46:05:bf:cc:60:1a:c0:98:
3a:2b:b9:b3:e6:56:c8:63:81:44:f0:80:8a:c2:1c:
f2:db:76:03:64:ac:e8:bc:7e:90:ed:03:bb:5e:f8:
0f:0a:82:bc:0a:c3:f5:de:40:fa:e2:90:fc:aa:0f:
bc:01:d3:a2:d7:1f:b9:b7:e2:ab:be:49:58:11:03:
8e:01:22:83:ff:d8:d4:20:42:e5:a3:2c:70:07:a2:
ea:eb:4b:20:a3:ac:4a:5c:a6:c5:f6:b3:49:64:fe:
84:e1:c8:33:22:79:53:f0:2d:a1:29:ae:13:98:f8:
b2:c3:0b:49:3d:3d:19:55:cf:7b:64:da:0b:af:e2:
18:45:1e:bb:7b:53:a5:a4:67:91:70:da:5d:bb:a1:
cc:8d:5b:6d:44:94:6f:0c:e3:c2:e0:af:a3:04:d0:
23:61:a1:13:0d:45:79:ad:45:12:2f:ca:c6:fd:19:
cd:12:b0:76:88:b1:cc:d3:7e:fd:6e:fe:92:d7:f6:
05:66:7b:01:ae:f3:e0:59:1e:3b:f2:b9:6c:84:60:
56:bd:43:87:b4:3a:52:17:b3:10:e2:80:f0:06:f4:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:F7:FC:99:53:34:48:5F:CF:50:41:C1:E1:69:54:6C:BB:15:F9
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nTT3_JlTNEhfz1BBweFpVGy7Ffk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ac:b1:e7:9d:02:9c:cd:78:3b:e9:bb:01:e8:7d:52:c1:a4:
94:9a:d3:32:44:05:48:8a:3e:c0:a0:c9:01:54:a6:d6:1f:aa:
de:48:4b:fc:47:e8:80:b7:2e:a3:99:03:f4:ba:5f:73:c8:f2:
84:0f:e6:ab:59:ef:de:1a:33:cd:65:24:d4:08:67:4c:e4:0f:
a1:42:14:1b:e1:5e:8c:ff:40:74:7e:58:b7:79:28:9e:ad:c2:
2f:48:0b:75:f5:dd:2b:17:7e:85:ec:1d:22:39:f1:6d:92:02:
47:0a:b1:e8:3c:1f:fb:84:e7:ee:85:da:c5:ce:e5:be:41:96:
d5:e5:78:1e:4a:26:76:1e:f4:9c:92:72:32:d8:97:d4:8e:1d:
b8:db:1e:3f:c6:9d:3d:88:9f:ab:71:77:22:66:e5:a7:ea:8a:
86:76:52:43:8e:59:d3:d1:e3:f3:f7:e1:61:72:af:d5:37:f6:
54:89:89:22:54:32:66:a9:92:76:c0:1d:59:ef:99:3a:8d:37:
fb:8e:8c:37:41:50:48:8c:d9:c4:7b:38:50:fc:9c:ee:42:3f:
30:b1:c2:89:97:d1:be:ee:55:5b:fe:56:bd:f9:2d:24:07:1f:
2c:1b:a1:d8:4c:7d:76:69:44:b5:bf:bc:8e:34:57:57:6d:a2:
5f:14:c5:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUZJaTByCpJYVpl8EAbofm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMjE4MTMwMDUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDM0ZjdmYzk5NTMzNDQ4NWZjZjUwNDFjMWUxNjk1NDZjYmIxNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0bS3cWTI/gw9DTgjNWTRzITAORY
ShsmQu0gSI+gyWU92Sg2RgW/zGAawJg6K7mz5lbIY4FE8ICKwhzy23YDZKzovH6Q
7QO7XvgPCoK8CsP13kD64pD8qg+8AdOi1x+5t+KrvklYEQOOASKD/9jUIELloyxw
B6Lq60sgo6xKXKbF9rNJZP6E4cgzInlT8C2hKa4TmPiywwtJPT0ZVc97ZNoLr+IY
RR67e1OlpGeRcNpdu6HMjVttRJRvDOPC4K+jBNAjYaETDUV5rUUSL8rG/RnNErB2
iLHM0379bv6S1/YFZnsBrvPgWR478rlshGBWvUOHtDpSF7MQ4oDwBvSr8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ009/yZUzRIX89QQcHhaVRsuxX5MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvblRUM19KbFRORWhmejFCQndlRnBWR3k3RmZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRROMA0G
CSqGSIb3DQEBCwUAA4IBAQCPrLHnnQKczXg76bsB6H1SwaSUmtMyRAVIij7AoMkB
VKbWH6reSEv8R+iAty6jmQP0ul9zyPKED+arWe/eGjPNZSTUCGdM5A+hQhQb4V6M
/0B0fli3eSiercIvSAt19d0rF36F7B0iOfFtkgJHCrHoPB/7hOfuhdrFzuW+QZbV
5XgeSiZ2HvScknIy2JfUjh242x4/xp09iJ+rcXciZuWn6oqGdlJDjlnT0ePz9+Fh
cq/VN/ZUiYkiVDJmqZJ2wB1Z75k6jTf7jow3QVBIjNnEezhQ/JzuQj8wscKJl9G+
7lVb/la9+S0kBx8sG6HYTH12aUS1v7yONFdXbaJfFMUL
-----END CERTIFICATE-----
Generated at Wed May 7 05:36:36 2025 by rpki-client