Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jX-3MP8CEO0s1xELT1RHUE2eknU.roa
File: jX-3MP8CEO0s1xELT1RHUE2eknU.roa (raw, json)
Hash identifier: B6052KilcGx8EHfR30qrh+jg+X5dWsJuc3lqQPaJYe0=
Subject key identifier: 8D:7F:B7:30:FF:02:10:ED:2C:D7:11:0B:4F:54:47:50:4D:9E:92:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01917DF34EF94A1B8B1CAF5E5C8E8279F69E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jX-3MP8CEO0s1xELT1RHUE2eknU.roa
Signing time: Fri 23 Aug 2024 06:36:23 +0000
ROA not before: Fri 23 Aug 2024 06:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21840
IP address blocks: 185.222.161.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7d:f3:4e:f9:4a:1b:8b:1c:af:5e:5c:8e:82:79:f6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 06:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7fb730ff0210ed2cd7110b4f5447504d9e9275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:58:a1:22:51:85:7c:72:20:36:16:11:46:
9a:dd:be:4c:46:c6:b7:1c:cd:c8:b0:82:9f:7c:a1:
95:d1:21:e4:06:92:56:c3:5b:aa:91:7c:b1:03:54:
da:59:0b:95:b7:ea:8e:0a:f6:16:be:fb:a6:cc:fd:
7b:82:70:9a:29:66:2f:84:16:20:e6:55:2b:e5:de:
cc:d6:4f:93:64:11:a0:fb:9f:44:b8:96:d3:83:4b:
12:a9:c3:a3:ea:87:55:b5:59:52:d4:47:ab:57:0c:
14:2d:02:23:ef:67:53:cc:67:86:74:59:67:3f:63:
21:22:ae:c5:59:02:9d:8d:1a:7c:30:20:79:cd:f3:
35:0a:4a:27:f8:60:1e:a6:c9:11:23:5d:fb:3b:b8:
73:b1:9b:a0:32:3f:52:0c:bc:07:7b:d4:9e:4a:0b:
20:86:bb:85:14:9e:92:6f:47:46:93:05:79:d2:3b:
b7:ef:39:b7:cb:43:43:ed:35:89:e9:85:90:0e:dc:
88:77:62:d6:53:25:d7:d7:49:ec:0b:6d:af:f0:9f:
14:24:55:fe:1d:d3:5a:d4:17:2d:0c:3d:84:c8:28:
f8:4f:88:0a:3f:ed:94:bd:d8:17:5b:cf:a2:22:28:
d2:68:fc:48:88:67:10:d2:91:67:96:ba:d7:04:a8:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:B7:30:FF:02:10:ED:2C:D7:11:0B:4F:54:47:50:4D:9E:92:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jX-3MP8CEO0s1xELT1RHUE2eknU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.161.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:4e:81:fe:93:a5:c5:f1:60:ce:54:87:31:7f:94:b7:7b:f7:
f5:2c:7d:a9:f5:f6:0c:04:a5:25:82:e1:a2:af:6a:7f:67:61:
ae:be:cc:7b:e8:d0:12:db:af:0f:ea:a6:d4:4e:38:31:b2:71:
54:42:1a:6e:3d:4d:f3:34:b6:26:4f:97:73:8b:ed:c3:8d:c7:
14:bc:f5:67:a3:75:74:44:c1:1f:37:a0:94:73:23:a4:f5:9d:
5d:55:4c:cf:e5:eb:32:cb:50:e0:8a:b9:88:25:f3:07:a4:80:
19:40:6b:9c:d5:87:9c:af:3f:b1:c9:ab:48:5e:9f:8e:47:c7:
f9:af:21:35:9f:16:9c:64:a8:72:3e:e3:ae:79:f4:93:fb:9f:
e7:26:05:1b:7f:a3:4b:c8:51:1a:3e:e7:7f:f3:5a:29:f1:59:
77:e7:14:84:e7:89:da:71:28:7e:e7:f1:2e:fd:fc:60:be:67:
ac:b5:5f:03:9e:7c:b9:39:9e:81:12:fb:89:6e:12:a6:51:84:
31:55:77:9c:0a:5c:d0:d1:93:f9:a3:df:65:09:46:94:80:36:
b3:92:b1:ea:28:93:b0:4f:6e:cd:5f:fb:ef:68:6d:56:ee:fe:
5e:22:d9:38:b8:a7:2f:6b:9f:68:74:f8:20:aa:c6:d0:4f:f3:
fe:5b:5d:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZF98075ShuLHK9eXI6CefaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwODIzMDYzNjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDdmYjczMGZmMDIxMGVkMmNkNzExMGI0ZjU0NDc1MDRkOWU5Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pFYoSJRhXxyIDYWEUaa3b5MRsa3
HM3IsIKffKGV0SHkBpJWw1uqkXyxA1TaWQuVt+qOCvYWvvumzP17gnCaKWYvhBYg
5lUr5d7M1k+TZBGg+59EuJbTg0sSqcOj6odVtVlS1EerVwwULQIj72dTzGeGdFln
P2MhIq7FWQKdjRp8MCB5zfM1Ckon+GAepskRI137O7hzsZugMj9SDLwHe9SeSgsg
hruFFJ6Sb0dGkwV50ju37zm3y0ND7TWJ6YWQDtyId2LWUyXX10nsC22v8J8UJFX+
HdNa1BctDD2EyCj4T4gKP+2UvdgXW8+iIijSaPxIiGcQ0pFnlrrXBKifEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI1/tzD/AhDtLNcRC09UR1BNnpJ1MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvalgtM01QOENFTzBzMXhFTFQxUkhVRTJla25VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud6hAwQA
1FfMMA0GCSqGSIb3DQEBCwUAA4IBAQC2ToH+k6XF8WDOVIcxf5S3e/f1LH2p9fYM
BKUlguGir2p/Z2Guvsx76NAS268P6qbUTjgxsnFUQhpuPU3zNLYmT5dzi+3DjccU
vPVno3V0RMEfN6CUcyOk9Z1dVUzP5esyy1DgirmIJfMHpIAZQGuc1Yecrz+xyatI
Xp+OR8f5ryE1nxacZKhyPuOuefST+5/nJgUbf6NLyFEaPud/81op8Vl35xSE54na
cSh+5/Eu/fxgvmestV8Dnny5OZ6BEvuJbhKmUYQxVXecClzQ0ZP5o99lCUaUgDaz
krHqKJOwT27NX/vvaG1W7v5eItk4uKcva59odPggqsbQT/P+W11W
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:29 2025 by rpki-client