Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/th3n7zWs5JCWOeG2MgZimrsa70w.roa
File: th3n7zWs5JCWOeG2MgZimrsa70w.roa (raw, json)
Hash identifier: B/uJ7VSJPraCVTU1wZdy7vq7oej+YJmcFr2mDgiQ9FE=
Subject key identifier: B6:1D:E7:EF:35:AC:E4:90:96:39:E1:B6:32:06:62:9A:BB:1A:EF:4C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01943B73919A41BCFAA351DE68915FC3735A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/th3n7zWs5JCWOeG2MgZimrsa70w.roa
Signing time: Mon 06 Jan 2025 11:50:17 +0000
ROA not before: Mon 06 Jan 2025 11:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140641
IP address blocks: 185.108.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 13:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:73:91:9a:41:bc:fa:a3:51:de:68:91:5f:c3:73:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 6 11:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b61de7ef35ace4909639e1b63206629abb1aef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:bc:8d:d0:aa:3f:e9:6e:f1:5b:e8:6f:8a:
75:4b:68:57:b0:7d:f8:fc:a4:88:7d:c0:d1:74:05:
a4:8c:c7:ee:f1:75:d1:61:5e:f6:99:5f:45:e0:e8:
18:ee:18:8b:0c:46:6d:e5:75:13:44:f2:d1:75:8c:
b7:ca:2a:b7:54:1b:13:d8:37:40:cb:83:3b:f5:f6:
f7:11:a6:76:d7:d6:3a:be:0a:c3:a4:88:fc:e1:7e:
d5:54:78:1c:f5:f4:d7:51:8f:7d:1a:ca:b6:81:11:
f1:32:44:1e:05:50:49:2d:c8:7f:44:e1:21:cb:7b:
cc:aa:28:cd:01:ca:bd:a7:72:7e:9f:1c:33:85:c6:
82:4e:3f:b7:30:fa:b6:4d:20:f1:52:7c:dd:36:45:
22:58:63:36:20:6f:6c:38:f9:9c:49:64:6b:73:f2:
d4:82:2e:42:46:19:7b:85:c3:55:7c:0b:ff:a4:2d:
30:60:48:67:7d:4b:d4:6d:16:ba:5a:44:88:53:8b:
22:75:be:2f:55:d2:c3:a9:d7:fc:c9:28:fd:0c:15:
1b:ce:45:9b:79:a9:7d:ef:3e:85:78:d6:4f:83:a3:
eb:77:c9:3f:1e:75:f0:d5:05:fb:ef:24:49:13:31:
04:61:29:4f:ec:0f:77:a3:9b:f4:a2:c1:59:ed:6f:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:E7:EF:35:AC:E4:90:96:39:E1:B6:32:06:62:9A:BB:1A:EF:4C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/th3n7zWs5JCWOeG2MgZimrsa70w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fc:e3:d3:00:26:ef:32:40:c5:ab:6b:ca:75:9f:e5:7c:32:
78:3d:19:14:88:ab:67:a8:51:60:21:0a:cc:d3:1f:09:70:5a:
01:26:11:dd:28:99:71:50:ca:d7:0c:7a:7f:25:a4:21:ee:28:
51:80:29:a3:22:00:08:0b:97:a8:10:b0:8e:67:ac:ff:95:3b:
cf:36:0c:13:03:bd:2f:10:32:c5:c9:5c:61:f2:a8:82:bb:c7:
76:28:ac:47:87:86:f1:32:77:ec:c5:37:d9:e9:63:f0:20:02:
60:64:7d:87:03:a2:54:6c:0c:89:43:12:1d:00:8f:85:75:d9:
ba:6c:73:d5:8b:5d:b7:b9:3c:70:db:1b:8c:1f:bf:3c:88:83:
d5:3c:d8:67:ad:37:0b:d5:c2:ac:27:ee:8d:b4:55:73:11:4f:
7b:37:ef:e8:5d:57:90:2f:b2:84:23:c9:cb:e0:42:fe:af:f9:
98:d5:9c:01:b7:3c:cb:01:9e:dc:8f:d2:63:ea:11:64:05:94:
00:b8:39:ed:72:e4:00:4a:74:ac:ee:de:2f:2d:dc:d3:f1:4e:
4c:32:15:82:a3:19:61:60:80:f3:95:74:e8:74:de:3f:2b:3a:
1f:56:1c:58:27:65:98:be:f5:71:d8:47:41:8b:ec:c7:c5:bd:
ca:7d:e3:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQ7c5GaQbz6o1HeaJFfw3NaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTA2MTE1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjFkZTdlZjM1YWNlNDkwOTYzOWUxYjYzMjA2NjI5YWJiMWFlZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs+8jdCqP+lu8Vvob4p1S2hXsH34
/KSIfcDRdAWkjMfu8XXRYV72mV9F4OgY7hiLDEZt5XUTRPLRdYy3yiq3VBsT2DdA
y4M79fb3EaZ219Y6vgrDpIj84X7VVHgc9fTXUY99Gsq2gRHxMkQeBVBJLch/ROEh
y3vMqijNAcq9p3J+nxwzhcaCTj+3MPq2TSDxUnzdNkUiWGM2IG9sOPmcSWRrc/LU
gi5CRhl7hcNVfAv/pC0wYEhnfUvUbRa6WkSIU4sidb4vVdLDqdf8ySj9DBUbzkWb
eal97z6FeNZPg6Prd8k/HnXw1QX77yRJEzEEYSlP7A93o5v0osFZ7W+yvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLYd5+81rOSQljnhtjIGYpq7Gu9MMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdGgzbjd6V3M1SkNXT2VHMk1nWmltcnNhNzB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWzMMA0G
CSqGSIb3DQEBCwUAA4IBAQCn/OPTACbvMkDFq2vKdZ/lfDJ4PRkUiKtnqFFgIQrM
0x8JcFoBJhHdKJlxUMrXDHp/JaQh7ihRgCmjIgAIC5eoELCOZ6z/lTvPNgwTA70v
EDLFyVxh8qiCu8d2KKxHh4bxMnfsxTfZ6WPwIAJgZH2HA6JUbAyJQxIdAI+Fddm6
bHPVi123uTxw2xuMH788iIPVPNhnrTcL1cKsJ+6NtFVzEU97N+/oXVeQL7KEI8nL
4EL+r/mY1ZwBtzzLAZ7cj9Jj6hFkBZQAuDntcuQASnSs7t4vLdzT8U5MMhWCoxlh
YIDzlXTodN4/KzofVhxYJ2WYvvVx2EdBi+zHxb3KfeOz
-----END CERTIFICATE-----
Generated at Thu May 8 06:33:48 2025 by rpki-client