Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/yuKETS2JQhvzRHqio8ftXHlr3Go.roa
File: yuKETS2JQhvzRHqio8ftXHlr3Go.roa (raw, json)
Hash identifier: H5v5L3hs04N/PN0O2tprb4Gz1HldX6HXVI4uvsenoMw=
Subject key identifier: CA:E2:84:4D:2D:89:42:1B:F3:44:7A:A2:A3:C7:ED:5C:79:6B:DC:6A
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0194228D94301C21DA6C179A3081D47B7D64
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/yuKETS2JQhvzRHqio8ftXHlr3Go.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203008
IP address blocks: 185.110.133.0/24 maxlen: 24
185.110.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 00:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:94:30:1c:21:da:6c:17:9a:30:81:d4:7b:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae2844d2d89421bf3447aa2a3c7ed5c796bdc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:3e:99:c1:55:81:e4:9d:f6:b6:d9:4c:c8:
b4:01:40:35:5a:2d:18:56:e9:64:23:b4:b0:5d:53:
25:d9:e8:e4:c3:11:8c:a6:64:82:05:f9:70:76:9e:
12:46:56:0c:01:62:64:4b:12:24:b6:e0:70:64:51:
fe:32:91:b0:70:40:30:e2:80:73:73:29:28:9b:80:
d0:64:c7:65:17:4e:cb:37:ea:23:ef:4e:e4:b7:0b:
9d:23:15:6e:69:b3:f5:d9:0e:19:19:7a:9e:29:bc:
b0:b4:86:76:5d:36:96:d5:6e:a9:16:0b:9d:35:17:
32:55:69:10:f1:e6:41:3a:cc:11:6e:29:a1:42:e1:
c4:c7:a5:9f:b4:cc:08:e5:42:f2:52:37:c9:c6:12:
ad:a3:1e:87:22:88:60:2c:4d:f6:9b:df:78:dd:06:
cc:b6:c1:3f:88:91:c8:32:b6:64:e2:30:91:03:27:
37:9d:1b:ec:6e:4e:f9:76:70:24:3c:06:5b:5a:20:
a9:9d:e2:de:10:1a:8b:57:8c:c6:99:e7:97:37:c2:
24:8e:4d:51:11:09:33:95:b8:83:9f:b0:03:4a:bc:
f9:80:65:d3:1f:63:50:5e:79:83:a8:72:46:f4:db:
de:4d:d1:6b:29:30:2e:14:47:b8:bb:2f:f1:b8:70:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E2:84:4D:2D:89:42:1B:F3:44:7A:A2:A3:C7:ED:5C:79:6B:DC:6A
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/yuKETS2JQhvzRHqio8ftXHlr3Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.133.0-185.110.134.255
Signature Algorithm: sha256WithRSAEncryption
c6:03:d8:a7:38:35:6e:7d:66:7d:34:4c:fe:55:21:45:e4:df:
67:ab:49:d5:72:72:70:fd:7a:97:04:8d:a8:03:92:cc:f0:56:
78:66:02:59:1f:1f:89:fd:5f:a6:54:19:93:20:7f:97:26:a9:
7c:b2:34:9e:16:7b:73:fa:ca:29:c1:a7:6e:6c:2b:e7:34:27:
97:cf:51:ec:44:96:c3:2a:31:df:4d:b4:28:23:85:23:cf:79:
eb:d8:0b:80:83:d4:fc:4e:f4:d0:c0:11:3c:94:ae:c0:87:75:
df:0f:51:e0:28:54:e3:05:04:c6:cc:ef:2c:4a:ca:50:8f:6d:
f7:c2:76:2f:2a:b5:0b:95:89:fb:7a:7d:e1:cd:b6:d1:46:af:
a9:40:b8:47:97:40:3d:77:87:aa:d0:64:14:aa:2d:ec:bd:b4:
40:9c:be:fa:17:f3:f8:97:4c:e2:cd:bf:0e:dd:66:fa:fb:6b:
54:25:db:25:cd:1e:b0:66:ac:b8:32:66:54:03:ce:a6:b8:51:
75:8b:ec:fc:b6:a6:b8:92:19:a7:a5:81:a5:31:66:6c:1e:11:
41:27:3a:49:e6:48:cb:8d:ce:b0:03:9c:a9:cf:83:16:3e:e8:
f8:db:a3:0d:bb:39:75:fa:12:d4:f2:80:92:10:0d:ea:f1:44:
d5:66:a5:eb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQijZQwHCHabBeaMIHUe31kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjUwMTAxMTU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWUyODQ0ZDJkODk0MjFiZjM0NDdhYTJhM2M3ZWQ1Yzc5NmJkYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXo+mcFVgeSd9rbZTMi0AUA1Wi0Y
VulkI7SwXVMl2ejkwxGMpmSCBflwdp4SRlYMAWJkSxIktuBwZFH+MpGwcEAw4oBz
cykom4DQZMdlF07LN+oj707ktwudIxVuabP12Q4ZGXqeKbywtIZ2XTaW1W6pFgud
NRcyVWkQ8eZBOswRbimhQuHEx6WftMwI5ULyUjfJxhKtox6HIohgLE32m9943QbM
tsE/iJHIMrZk4jCRAyc3nRvsbk75dnAkPAZbWiCpneLeEBqLV4zGmeeXN8Ikjk1R
EQkzlbiDn7ADSrz5gGXTH2NQXnmDqHJG9NveTdFrKTAuFEe4uy/xuHAixQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMrihE0tiUIb80R6oqPH7Vx5a9xqMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEveXVLRVRTMkpRaHZ6UkhxaW84ZnRYSGxyM0dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5boUD
BAC5boYwDQYJKoZIhvcNAQELBQADggEBAMYD2Kc4NW59Zn00TP5VIUXk32erSdVy
cnD9epcEjagDkszwVnhmAlkfH4n9X6ZUGZMgf5cmqXyyNJ4We3P6yinBp25sK+c0
J5fPUexElsMqMd9NtCgjhSPPeevYC4CD1PxO9NDAETyUrsCHdd8PUeAoVOMFBMbM
7yxKylCPbffCdi8qtQuVift6feHNttFGr6lAuEeXQD13h6rQZBSqLey9tECcvvoX
8/iXTOLNvw7dZvr7a1Ql2yXNHrBmrLgyZlQDzqa4UXWL7Py2priSGaelgaUxZmwe
EUEnOknmSMuNzrADnKnPgxY+6Pjbow27OXX6EtTygJIQDerxRNVmpes=
-----END CERTIFICATE-----
Generated at Thu May 15 13:52:49 2025 by rpki-client