Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KBYXpyx1h8qSFLIbqoj6WrY9juk.roa
File: KBYXpyx1h8qSFLIbqoj6WrY9juk.roa (raw, json)
Hash identifier: YLqCK8K3+pMSyyGf5HfBXNCHGxlxPyh/ray1le2JV5g=
Subject key identifier: 28:16:17:A7:2C:75:87:CA:92:14:B2:1B:AA:88:FA:5A:B6:3D:8E:E9
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 018D0DCBDD3716E53F71FA370646DE195FAD
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KBYXpyx1h8qSFLIbqoj6WrY9juk.roa
Signing time: Mon 15 Jan 2024 15:44:40 +0000
ROA not before: Mon 15 Jan 2024 15:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 185.121.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 08:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:cb:dd:37:16:e5:3f:71:fa:37:06:46:de:19:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jan 15 15:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=281617a72c7587ca9214b21baa88fa5ab63d8ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:70:16:bb:23:bb:07:ef:f4:13:bb:6c:0e:
95:7a:4c:cf:9e:c7:11:e4:56:f1:2a:51:6a:c6:93:
e8:e4:6d:c5:d5:92:80:5f:35:6d:06:3e:16:76:65:
5d:0b:16:53:99:b4:65:79:62:c6:7d:7f:74:98:4b:
d5:5f:73:fc:5d:2f:01:0c:e5:e2:af:b2:ee:02:7c:
0f:a4:01:e2:07:7a:da:02:92:ac:56:18:2e:a4:78:
36:bb:3b:a2:f5:32:4b:51:5f:ad:80:9d:f3:db:81:
31:2c:a9:89:5f:ee:05:65:7e:de:fd:d4:7a:59:63:
36:d3:fa:83:56:de:ac:b6:3b:78:8a:d3:06:81:1d:
4e:39:62:de:21:e5:64:30:1e:4b:76:56:2d:f1:d6:
16:88:70:7c:7d:7b:ae:64:70:b8:9b:c6:de:e5:5d:
fe:10:d4:f1:37:e4:47:8e:e8:05:a6:6d:96:dd:67:
e1:7e:0f:67:c0:59:ca:0c:1d:59:18:a3:4c:d1:7f:
8c:9e:fa:a3:ea:36:32:9d:72:ed:13:c2:e0:ae:40:
16:b8:b4:2f:71:08:2d:b7:c1:37:74:8c:e4:d2:b5:
a7:04:77:74:32:f5:a9:48:42:48:e6:57:76:2c:bd:
1d:db:3a:d9:98:5c:0b:9c:39:fe:03:4b:e6:a1:75:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:17:A7:2C:75:87:CA:92:14:B2:1B:AA:88:FA:5A:B6:3D:8E:E9
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KBYXpyx1h8qSFLIbqoj6WrY9juk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.225.0/24
Signature Algorithm: sha256WithRSAEncryption
38:58:56:fe:34:b2:b4:75:48:4a:05:af:82:51:81:13:c6:b9:
ae:98:b8:a6:28:32:57:c1:0e:13:b1:b9:53:21:e3:46:cd:9a:
d7:23:44:e7:8a:81:e8:6e:27:3e:bb:8d:17:6a:b6:ce:46:55:
4c:31:2c:3e:5d:1b:34:7e:bb:f4:9d:d0:fc:6d:b1:81:b5:8d:
8a:d7:9a:8f:bf:85:9b:0d:61:80:77:e9:21:d2:73:36:2d:29:
50:65:0b:be:32:b3:a2:33:6d:e5:d4:4d:9f:cb:37:8d:c5:9e:
03:35:85:a7:7d:8e:7f:ef:83:81:d5:47:23:4a:93:8d:d4:c2:
63:62:03:54:5a:b4:b7:4f:96:8f:9c:ad:1c:c1:30:80:c3:cc:
01:4c:e9:bc:48:d5:a6:75:5d:c9:24:14:83:a2:8e:81:ed:ab:
7a:a0:3a:6d:92:b2:74:3b:88:7f:33:5e:4b:71:80:1c:fb:17:
08:75:d2:c3:f1:1b:19:9b:aa:8e:7c:9a:7c:0d:ee:e6:72:1a:
d6:0b:5e:a4:28:5f:9e:d9:4b:75:0f:f9:a6:c6:a1:75:38:dc:
a0:79:03:fa:4f:96:5c:17:41:0b:e0:57:41:8f:ae:16:c7:6e:
a6:49:77:76:09:56:80:e6:de:0d:b0:7a:19:94:5d:1f:2e:71:
bf:b8:ec:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0Ny903FuU/cfo3BkbeGV+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2
OGFjNTUwHhcNMjQwMTE1MTU0NDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODE2MTdhNzJjNzU4N2NhOTIxNGIyMWJhYTg4ZmE1YWI2M2Q4ZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAithwFrsjuwfv9BO7bA6VekzPnscR
5FbxKlFqxpPo5G3F1ZKAXzVtBj4WdmVdCxZTmbRleWLGfX90mEvVX3P8XS8BDOXi
r7LuAnwPpAHiB3raApKsVhgupHg2uzui9TJLUV+tgJ3z24ExLKmJX+4FZX7e/dR6
WWM20/qDVt6stjt4itMGgR1OOWLeIeVkMB5LdlYt8dYWiHB8fXuuZHC4m8be5V3+
ENTxN+RHjugFpm2W3Wfhfg9nwFnKDB1ZGKNM0X+Mnvqj6jYynXLtE8LgrkAWuLQv
cQgtt8E3dIzk0rWnBHd0MvWpSEJI5ld2LL0d2zrZmFwLnDn+A0vmoXU/EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgWF6csdYfKkhSyG6qI+lq2PY7pMB8GA1UdIwQY
MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt
NDBlYWViYzFjNDdlLzEvS0JZWHB5eDFoOHFTRkxJYnFvajZXclk5anVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl
LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXnhMA0G
CSqGSIb3DQEBCwUAA4IBAQA4WFb+NLK0dUhKBa+CUYETxrmumLimKDJXwQ4TsblT
IeNGzZrXI0TnioHobic+u40XarbORlVMMSw+XRs0frv0ndD8bbGBtY2K15qPv4Wb
DWGAd+kh0nM2LSlQZQu+MrOiM23l1E2fyzeNxZ4DNYWnfY5/74OB1UcjSpON1MJj
YgNUWrS3T5aPnK0cwTCAw8wBTOm8SNWmdV3JJBSDoo6B7at6oDptkrJ0O4h/M15L
cYAc+xcIddLD8RsZm6qOfJp8De7mchrWC16kKF+e2Ut1D/mmxqF1ONygeQP6T5Zc
F0EL4FdBj64Wx26mSXd2CVaA5t4NsHoZlF0fLnG/uOyQ
-----END CERTIFICATE-----
Generated at Fri Oct 11 10:45:23 2024 by rpki-client on console-fra.rpki-client.org