Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/1MEf07YVtvdvT_RYZvwJduhsf_g.roa
File: 1MEf07YVtvdvT_RYZvwJduhsf_g.roa (raw, json)
Hash identifier: FHoa/VmMVfqX6enCbKb6FDihsQTpMaEQ3oSfHtNdDCk=
Subject key identifier: D4:C1:1F:D3:B6:15:B6:F7:6F:4F:F4:58:66:FC:09:76:E8:6C:7F:F8
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 0194266C14CC66E195493EE532ACDEC41AC3
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/1MEf07YVtvdvT_RYZvwJduhsf_g.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.92.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 21:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:14:cc:66:e1:95:49:3e:e5:32:ac:de:c4:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c11fd3b615b6f76f4ff45866fc0976e86c7ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:a3:5e:e1:b7:54:84:53:6a:74:6b:2a:30:
2e:a7:54:67:f6:1b:3d:00:6e:1d:4a:6c:c0:13:74:
a4:a5:bd:b7:3d:bc:84:f0:73:6d:69:84:a3:9e:3a:
14:84:fe:1f:08:3d:30:69:79:14:c0:c7:21:4d:48:
6a:c8:df:15:13:08:64:24:7f:a6:40:ab:f3:b5:24:
d4:20:18:dc:90:b6:8a:dd:e5:18:43:42:86:80:53:
c8:dd:72:f8:bd:fa:b3:1a:9f:41:a9:08:de:df:99:
7b:e1:0f:34:4b:93:83:f4:48:40:1c:d4:69:cd:47:
6e:66:d9:58:82:3e:68:61:40:2b:89:1e:1a:2e:18:
77:e9:c4:56:58:82:ac:42:d4:ec:7a:52:65:20:d8:
a2:65:29:59:67:1f:a5:4b:8c:46:14:28:7e:e7:25:
c0:bd:6b:47:90:49:73:d8:2b:54:af:8d:18:45:64:
05:84:47:27:99:6e:14:ee:2d:f8:40:48:f0:8c:53:
e0:cb:0e:11:85:0b:0f:cf:b9:92:0b:f0:99:c5:d9:
d7:76:60:c0:42:d5:89:9b:fb:ba:bb:14:09:21:c6:
ad:ef:5f:91:f9:9d:a8:2e:82:fe:54:d7:73:b7:d3:
0d:f2:76:15:fe:8b:19:a1:91:78:f7:94:ee:8d:7d:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:1F:D3:B6:15:B6:F7:6F:4F:F4:58:66:FC:09:76:E8:6C:7F:F8
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/1MEf07YVtvdvT_RYZvwJduhsf_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.13.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2b:89:11:1e:f8:17:4c:9c:0a:31:60:1c:12:16:9c:96:e9:
2c:9e:10:c5:8e:ff:52:ff:17:19:80:15:0d:b4:8e:d0:e9:00:
2c:9b:f3:75:21:73:7b:b5:cc:d4:66:f3:89:2c:0e:45:16:f9:
5c:6e:81:ec:a9:13:97:f2:3f:c7:e9:c6:25:b4:d1:43:7c:6f:
12:34:7d:88:ee:90:7f:71:ac:a6:8c:5f:4f:f1:ae:ac:cc:21:
8c:c2:57:3a:e5:f3:f1:94:57:53:8e:36:98:26:e5:85:c3:dc:
75:ee:cf:a7:ad:cf:ab:9e:38:ec:9c:01:1a:0b:5b:46:96:60:
74:3a:48:65:c1:b8:72:66:60:1d:29:06:f3:53:d7:28:13:d1:
c2:93:55:b7:d5:4f:65:d4:63:32:c9:6c:da:d4:c5:61:19:ed:
ae:d7:5b:5a:3f:98:94:a7:ac:db:6c:21:75:a9:79:3b:30:8e:
88:6f:4c:e5:2d:f1:a1:11:40:14:d3:9d:cd:27:43:89:83:85:
3b:56:59:ba:b3:d1:53:61:65:d9:15:be:41:5c:ff:ec:a4:1c:
ee:8d:79:90:17:be:fa:be:93:22:1f:f6:18:4c:5a:b4:f9:82:
9c:3e:a8:26:83:40:f9:6c:48:7d:b1:8d:09:c3:dc:13:a2:8f:
5b:33:6d:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBTMZuGVST7lMqzexBrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGIyMDAzMDkwMWZmMmRmNGViZDFmNDllNDg5MWNiMjhm
ZTA3MzAwHhcNMjUwMTAyMDk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGMxMWZkM2I2MTViNmY3NmY0ZmY0NTg2NmZjMDk3NmU4NmM3ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oWjXuG3VIRTanRrKjAup1Rn9hs9
AG4dSmzAE3Skpb23PbyE8HNtaYSjnjoUhP4fCD0waXkUwMchTUhqyN8VEwhkJH+m
QKvztSTUIBjckLaK3eUYQ0KGgFPI3XL4vfqzGp9BqQje35l74Q80S5OD9EhAHNRp
zUduZtlYgj5oYUAriR4aLhh36cRWWIKsQtTselJlINiiZSlZZx+lS4xGFCh+5yXA
vWtHkElz2CtUr40YRWQFhEcnmW4U7i34QEjwjFPgyw4RhQsPz7mSC/CZxdnXdmDA
QtWJm/u6uxQJIcat71+R+Z2oLoL+VNdzt9MN8nYV/osZoZF495TujX2FEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNTBH9O2Fbb3b0/0WGb8CXbobH/4MB8GA1UdIwQY
MBaAFN7bIAMJAf8t9OvR9J5Ikcso/gcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEt
ZTNiZmE3MmQ3ZWY4LzEvMU1FZjA3WVZ0dmR2VF9SWVp2d0pkdWhzZl9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEtZTNiZmE3MmQ3ZWY4
LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVwNMA0G
CSqGSIb3DQEBCwUAA4IBAQCvK4kRHvgXTJwKMWAcEhacluksnhDFjv9S/xcZgBUN
tI7Q6QAsm/N1IXN7tczUZvOJLA5FFvlcboHsqROX8j/H6cYltNFDfG8SNH2I7pB/
caymjF9P8a6szCGMwlc65fPxlFdTjjaYJuWFw9x17s+nrc+rnjjsnAEaC1tGlmB0
OkhlwbhyZmAdKQbzU9coE9HCk1W31U9l1GMyyWza1MVhGe2u11taP5iUp6zbbCF1
qXk7MI6Ib0zlLfGhEUAU053NJ0OJg4U7Vlm6s9FTYWXZFb5BXP/spBzujXmQF776
vpMiH/YYTFq0+YKcPqgmg0D5bEh9sY0Jw9wToo9bM21Y
-----END CERTIFICATE-----
Generated at Wed May 7 16:51:55 2025 by rpki-client