Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/__BN4x-r09v7iKdeC8i5WJr8IQc.roa
File: __BN4x-r09v7iKdeC8i5WJr8IQc.roa (raw, json)
Hash identifier: BedCsajuluIUrCIHuxkQC/L/+oECty8dQ7rluAYYWoc=
Subject key identifier: FF:F0:4D:E3:1F:AB:D3:DB:FB:88:A7:5E:0B:C8:B9:58:9A:FC:21:07
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0193AD17412A0FFEB6CF7C0815EB96EE02AC
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/__BN4x-r09v7iKdeC8i5WJr8IQc.roa
Signing time: Mon 09 Dec 2024 20:23:22 +0000
ROA not before: Mon 09 Dec 2024 20:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214359
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:17:41:2a:0f:fe:b6:cf:7c:08:15:eb:96:ee:02:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Dec 9 20:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fff04de31fabd3dbfb88a75e0bc8b9589afc2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:65:a7:de:88:db:7e:e8:73:5d:61:f1:97:
3e:f4:97:f2:20:6c:3d:6c:fa:7e:41:f7:59:b9:57:
bf:2a:3b:5f:f2:9f:c4:3d:01:ab:fe:5e:d5:15:8d:
8d:96:f0:ac:a9:06:4f:f6:8c:f5:4a:d9:b5:85:bd:
d6:dd:e5:83:cb:cc:3f:83:9c:f9:f8:af:de:c7:f5:
74:5f:76:20:c1:b4:fc:4f:74:8c:3c:12:94:1c:4a:
e4:92:aa:a6:62:15:22:16:f8:89:05:41:c2:b4:16:
04:68:1f:57:00:f6:ac:d7:8e:fc:7e:13:99:c2:fc:
2e:c5:88:d1:26:9e:e5:15:2e:48:fd:5f:fb:06:4a:
c3:79:5b:cf:05:67:2d:64:f8:f2:a8:ca:f0:92:67:
1d:15:67:fd:1c:39:38:27:32:cf:aa:c0:d6:1a:e6:
e8:ff:8b:fd:f4:f8:5c:af:78:8e:a5:e7:72:8d:93:
8f:6a:59:e7:74:2d:99:53:0c:d5:ca:ae:db:4c:64:
c8:55:a9:53:91:d7:e3:a5:34:dc:70:5c:b9:b2:60:
38:eb:f8:03:03:c0:8d:28:fe:85:22:4c:0f:43:5f:
24:79:ce:8f:c6:74:18:25:c2:13:1c:9d:fe:9e:53:
e0:2d:2e:c9:0e:02:85:5b:52:12:f8:2d:9c:92:cc:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:4D:E3:1F:AB:D3:DB:FB:88:A7:5E:0B:C8:B9:58:9A:FC:21:07
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/__BN4x-r09v7iKdeC8i5WJr8IQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/24
185.122.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c7:d2:91:cb:01:c6:93:06:e6:e1:d7:3c:8f:3d:c0:09:c9:
5e:2f:5d:19:84:eb:58:fa:e2:9f:11:ce:c2:8d:bb:2c:94:7f:
30:c3:86:8f:a1:2b:33:be:fb:a4:0f:46:fd:a4:fa:c3:78:93:
6f:af:27:36:82:7d:c1:fa:33:8f:01:1b:ce:dd:e1:f6:b6:2c:
e9:fd:7f:8a:1b:5a:d8:2a:b1:b7:00:a7:9d:52:e0:c6:fe:2f:
54:0c:c9:1c:3a:2e:ec:29:39:c4:c0:1a:c1:f2:d3:77:5f:d2:
47:f1:ad:4d:3d:2a:8d:26:6b:19:b9:ea:6d:3f:19:23:9d:df:
dc:40:ad:a1:44:35:04:9d:29:47:10:66:c2:a1:fb:74:7e:c2:
54:ac:8f:9d:20:58:99:6c:94:d2:0c:59:b4:cf:f2:38:4d:47:
82:79:73:c8:ca:b2:ed:c3:68:0b:94:49:be:2d:3f:fa:4a:80:
7f:59:4e:9b:a5:c6:13:bf:e3:25:a1:af:a1:92:5b:3b:8e:0f:
92:d4:b5:44:ca:37:90:e1:4f:44:d0:9e:a2:7b:d2:a0:69:be:
a3:c1:0f:b0:de:33:a3:0b:c2:16:98:f3:36:4e:24:c1:3b:85:
ce:3a:e8:d7:5c:8f:c5:b3:f8:ef:67:6f:b8:b2:2e:1d:d0:fe:
62:dc:f8:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOtF0EqD/62z3wIFeuW7gKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjQxMjA5MjAyMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmYwNGRlMzFmYWJkM2RiZmI4OGE3NWUwYmM4Yjk1ODlhZmMyMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvNlp96I237oc11h8Zc+9JfyIGw9
bPp+QfdZuVe/Kjtf8p/EPQGr/l7VFY2NlvCsqQZP9oz1Stm1hb3W3eWDy8w/g5z5
+K/ex/V0X3YgwbT8T3SMPBKUHErkkqqmYhUiFviJBUHCtBYEaB9XAPas1478fhOZ
wvwuxYjRJp7lFS5I/V/7BkrDeVvPBWctZPjyqMrwkmcdFWf9HDk4JzLPqsDWGubo
/4v99Phcr3iOpedyjZOPalnndC2ZUwzVyq7bTGTIValTkdfjpTTccFy5smA46/gD
A8CNKP6FIkwPQ18kec6PxnQYJcITHJ3+nlPgLS7JDgKFW1IS+C2ckszPVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP/wTeMfq9Pb+4inXgvIuVia/CEHMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvX19CTjR4LXIwOXY3aUtkZUM4aTVXSnI4SVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXr8AwQA
uXr/MA0GCSqGSIb3DQEBCwUAA4IBAQA/x9KRywHGkwbm4dc8jz3ACcleL10ZhOtY
+uKfEc7CjbsslH8ww4aPoSszvvukD0b9pPrDeJNvryc2gn3B+jOPARvO3eH2tizp
/X+KG1rYKrG3AKedUuDG/i9UDMkcOi7sKTnEwBrB8tN3X9JH8a1NPSqNJmsZuept
Pxkjnd/cQK2hRDUEnSlHEGbCoft0fsJUrI+dIFiZbJTSDFm0z/I4TUeCeXPIyrLt
w2gLlEm+LT/6SoB/WU6bpcYTv+Mloa+hkls7jg+S1LVEyjeQ4U9E0J6ie9Kgab6j
wQ+w3jOjC8IWmPM2TiTBO4XOOujXXI/Fs/jvZ2+4si4d0P5i3PiB
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:09:09 2025 by rpki-client