Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/Jbe2vJfJPwX0F7f_d9fIU8_L1Sw.roa
File: Jbe2vJfJPwX0F7f_d9fIU8_L1Sw.roa (raw, json)
Hash identifier: Fr0ZnCmxZmEwrNEcx7VWYrh5QAY25v2PX4UM26Ov9Aw=
Subject key identifier: 25:B7:B6:BC:97:C9:3F:05:F4:17:B7:FF:77:D7:C8:53:CF:CB:D5:2C
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 0191D1F99D4A03DFA8C4BFE8183E1008083B
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/Jbe2vJfJPwX0F7f_d9fIU8_L1Sw.roa
Signing time: Sun 08 Sep 2024 14:11:22 +0000
ROA not before: Sun 08 Sep 2024 14:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35819
IP address blocks: 149.126.14.0/24 maxlen: 24
149.126.15.0/24 maxlen: 24
185.133.180.0/24 maxlen: 24
185.133.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 09:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d1:f9:9d:4a:03:df:a8:c4:bf:e8:18:3e:10:08:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Sep 8 14:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25b7b6bc97c93f05f417b7ff77d7c853cfcbd52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:2b:e9:65:60:79:ba:6b:27:5d:76:4e:18:
c4:74:17:f9:fd:e4:4a:51:a7:f9:e1:f1:2b:a6:5e:
48:87:58:87:0b:32:d2:da:ae:eb:a5:c0:14:77:f3:
fa:f0:03:80:f8:f7:85:c4:1a:4d:86:b9:d8:c7:b2:
c5:ba:b9:b7:0b:2f:ef:0c:6f:ea:ae:eb:ee:76:04:
38:db:9c:56:cc:a7:b4:46:fc:78:46:6b:c0:37:4b:
66:ef:00:44:58:8c:d5:4d:10:e1:18:b8:98:66:be:
3c:fe:23:15:93:0a:3b:11:3a:8e:2a:52:a7:ad:9f:
1b:ba:40:09:71:6a:04:1f:98:4b:ca:09:30:5c:3d:
2b:1e:b4:1c:46:04:ec:bf:44:f9:43:4a:4a:49:c5:
6e:5b:33:d3:69:fb:d5:1b:f9:96:07:bc:d4:43:32:
ca:c0:4b:2d:a7:7b:bf:31:11:94:6d:86:1e:d2:79:
ba:e5:eb:10:87:46:e4:9b:40:e3:e5:40:9a:19:05:
84:7b:36:db:48:7b:6b:05:7e:d3:32:b3:0c:9e:5d:
19:64:53:6b:6e:97:f2:6a:ca:41:b7:cf:1d:e6:96:
99:09:6a:6b:8d:6d:38:30:16:79:49:58:51:2b:62:
0f:7f:38:2e:51:13:dc:c9:93:36:01:7d:23:be:27:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:B6:BC:97:C9:3F:05:F4:17:B7:FF:77:D7:C8:53:CF:CB:D5:2C
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/Jbe2vJfJPwX0F7f_d9fIU8_L1Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.14.0/23
185.133.180.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:5d:e3:84:ed:09:1a:99:fc:a1:76:2e:7d:93:27:6a:a7:94:
1f:9c:ac:ab:2b:f1:13:06:5d:48:11:06:5a:8d:28:23:64:db:
b0:99:2c:ff:c4:29:73:ba:8c:54:37:b9:85:ad:64:57:e6:54:
de:6a:d3:3d:7c:71:d2:b5:78:ff:c3:e0:62:0d:1e:62:bb:17:
47:8d:23:e1:55:07:48:21:64:e0:99:11:18:a3:11:74:e3:ac:
f6:74:c1:89:9a:7c:5e:f3:6f:c4:c7:0b:1e:83:6d:23:a9:b3:
20:e0:f2:f4:28:1a:19:9f:e2:28:11:54:f2:04:03:4a:8d:1b:
e8:5c:c6:f0:75:31:0d:87:37:b8:c9:97:24:0e:7f:22:e8:c9:
9c:e5:0a:72:57:7e:89:ec:aa:f1:ab:f0:75:b6:70:ce:b1:96:
09:2f:a9:8c:e2:e9:41:b2:77:87:cc:9c:76:42:36:92:d0:cd:
19:02:ad:31:83:a7:8e:8d:93:bf:15:97:c0:e3:ef:19:65:52:
e6:62:31:17:5d:f2:fe:1e:a1:8f:79:7b:21:e5:2c:e5:ea:44:
a1:8c:76:18:52:75:42:ea:54:1b:d7:5f:90:aa:21:85:14:d9:
72:c0:8e:2d:b7:c2:22:dc:24:0b:07:91:21:39:4f:38:42:75:
81:0a:02:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHR+Z1KA9+oxL/oGD4QCAg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjQwOTA4MTQxMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWI3YjZiYzk3YzkzZjA1ZjQxN2I3ZmY3N2Q3Yzg1M2NmY2JkNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FMr6WVgebprJ112ThjEdBf5/eRK
Uaf54fErpl5Ih1iHCzLS2q7rpcAUd/P68AOA+PeFxBpNhrnYx7LFurm3Cy/vDG/q
ruvudgQ425xWzKe0Rvx4RmvAN0tm7wBEWIzVTRDhGLiYZr48/iMVkwo7ETqOKlKn
rZ8bukAJcWoEH5hLygkwXD0rHrQcRgTsv0T5Q0pKScVuWzPTafvVG/mWB7zUQzLK
wEstp3u/MRGUbYYe0nm65esQh0bkm0Dj5UCaGQWEezbbSHtrBX7TMrMMnl0ZZFNr
bpfyaspBt88d5paZCWprjW04MBZ5SVhRK2IPfzguURPcyZM2AX0jvifgmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCW3tryXyT8F9Be3/3fXyFPPy9UsMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvSmJlMnZKZkpQd1gwRjdmX2Q5ZklVOF9MMVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlX4OAwQB
uYW0MA0GCSqGSIb3DQEBCwUAA4IBAQAMXeOE7Qkamfyhdi59kydqp5QfnKyrK/ET
Bl1IEQZajSgjZNuwmSz/xClzuoxUN7mFrWRX5lTeatM9fHHStXj/w+BiDR5iuxdH
jSPhVQdIIWTgmREYoxF046z2dMGJmnxe82/Exwseg20jqbMg4PL0KBoZn+IoEVTy
BANKjRvoXMbwdTENhze4yZckDn8i6Mmc5QpyV36J7Krxq/B1tnDOsZYJL6mM4ulB
sneHzJx2QjaS0M0ZAq0xg6eOjZO/FZfA4+8ZZVLmYjEXXfL+HqGPeXsh5Szl6kSh
jHYYUnVC6lQb11+QqiGFFNlywI4tt8Ii3CQLB5EhOU84QnWBCgKM
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:00 2025 by rpki-client