Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/ocK76IWxiHcB7ZVIFk1BZahfg3s.roa
File: ocK76IWxiHcB7ZVIFk1BZahfg3s.roa (raw, json)
Hash identifier: zznNXeqgpOMB1smbdcOwAT0+2PoRVkjfBDNzwUv4GBA=
Subject key identifier: A1:C2:BB:E8:85:B1:88:77:01:ED:95:48:16:4D:41:65:A8:5F:83:7B
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 019391C0C54C058BFB1B8566E2575BDE1088
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/ocK76IWxiHcB7ZVIFk1BZahfg3s.roa
Signing time: Wed 04 Dec 2024 12:59:09 +0000
ROA not before: Wed 04 Dec 2024 12:59:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204798
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 18:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:c0:c5:4c:05:8b:fb:1b:85:66:e2:57:5b:de:10:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Dec 4 12:59:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1c2bbe885b1887701ed9548164d4165a85f837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:0b:59:54:3d:da:0c:a0:df:38:63:1a:8f:
3d:c1:e1:da:ef:4d:35:88:ca:a9:f0:57:40:67:d9:
cd:23:0d:1c:5f:32:64:57:68:0e:9e:36:7f:74:4d:
fb:7b:26:7d:a3:0f:31:8d:10:ce:27:97:d5:57:c9:
06:03:57:4a:46:68:2d:e3:d4:c4:10:3b:84:a2:63:
91:a5:db:47:5e:4d:43:3d:37:ab:73:2e:ee:1d:78:
8e:68:bf:d7:c2:ec:8e:a5:80:4f:8c:30:25:55:56:
ea:d8:79:45:d6:bb:12:dc:5a:9e:60:24:a3:64:bf:
8c:fd:b9:3e:d6:4e:03:1f:c1:66:72:33:40:35:26:
59:01:35:2d:10:42:7e:37:ba:23:97:fc:64:f3:1c:
ff:a9:6d:34:e9:22:e5:8c:fb:95:d4:81:c3:e7:0d:
dc:b8:3d:88:bc:7f:02:96:1e:94:b4:ff:2d:a5:e4:
04:bb:12:16:d1:98:ab:d4:ee:cf:6a:d8:74:15:bf:
3a:52:c9:72:d2:27:99:b2:16:e5:7a:4c:ba:d0:eb:
b4:e4:5e:ec:70:77:5c:5a:38:7a:07:bb:fa:81:1a:
fe:1f:5a:0f:97:13:8e:2b:3f:ef:ac:86:b9:b3:f5:
c6:00:9b:58:10:d4:72:f8:bd:aa:64:73:61:34:a8:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:BB:E8:85:B1:88:77:01:ED:95:48:16:4D:41:65:A8:5F:83:7B
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/ocK76IWxiHcB7ZVIFk1BZahfg3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/24
185.122.255.0/24
185.133.224.0/22
Signature Algorithm: sha256WithRSAEncryption
ec:f0:65:e3:11:e9:a9:62:67:05:02:39:16:a1:75:3d:8e:59:
0a:ea:7a:fb:f1:32:88:f3:83:3e:1a:e9:8d:2f:59:59:bf:bc:
ac:8b:b6:03:1c:48:7d:a6:7c:f4:a0:fb:8c:f9:91:3a:68:06:
10:c8:0e:73:04:04:f9:43:50:f9:9d:40:d2:23:7b:b4:28:dc:
fc:8a:80:6e:b7:3c:65:79:b2:9c:17:66:2b:0f:1a:63:ea:8a:
8c:53:ef:60:d8:43:1e:40:c9:85:fa:16:95:64:5b:97:61:02:
2e:e3:ce:c7:88:0e:2f:71:f3:b6:86:cf:1e:cf:cf:47:5a:be:
fb:e4:39:51:df:85:88:4e:f0:f9:56:b6:bb:2d:17:aa:e7:86:
ef:4e:d6:34:5a:60:e4:2a:db:8e:99:49:f2:61:97:7c:ae:eb:
14:f6:4c:66:2f:da:a8:96:da:99:4a:b1:36:a4:0a:1f:13:dd:
24:17:a6:1b:36:3c:1a:3f:9b:f8:9f:cf:fd:05:3f:0c:1e:27:
f6:a2:12:48:19:e6:29:03:08:0a:b0:4e:d4:07:b5:5b:d2:3a:
8b:98:dd:5a:93:6d:a6:4f:e2:8e:5c:03:ed:9c:f1:b2:d1:c3:
44:d4:ae:aa:94:93:e0:11:ca:51:2a:f0:6e:39:da:16:b2:25:
94:cf:10:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZORwMVMBYv7G4Vm4ldb3hCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjQxMjA0MTI1OTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWMyYmJlODg1YjE4ODc3MDFlZDk1NDgxNjRkNDE2NWE4NWY4MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqsLWVQ92gyg3zhjGo89weHa7001
iMqp8FdAZ9nNIw0cXzJkV2gOnjZ/dE37eyZ9ow8xjRDOJ5fVV8kGA1dKRmgt49TE
EDuEomORpdtHXk1DPTercy7uHXiOaL/XwuyOpYBPjDAlVVbq2HlF1rsS3FqeYCSj
ZL+M/bk+1k4DH8FmcjNANSZZATUtEEJ+N7ojl/xk8xz/qW006SLljPuV1IHD5w3c
uD2IvH8Clh6UtP8tpeQEuxIW0Zir1O7Path0Fb86Usly0ieZshbleky60Ou05F7s
cHdcWjh6B7v6gRr+H1oPlxOOKz/vrIa5s/XGAJtYENRy+L2qZHNhNKjFWwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKHCu+iFsYh3Ae2VSBZNQWWoX4N7MB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvb2NLNzZJV3hpSGNCN1pWSUZrMUJaYWhmZzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuXr8AwQA
uXr/AwQCuYXgMA0GCSqGSIb3DQEBCwUAA4IBAQDs8GXjEempYmcFAjkWoXU9jlkK
6nr78TKI84M+GumNL1lZv7ysi7YDHEh9pnz0oPuM+ZE6aAYQyA5zBAT5Q1D5nUDS
I3u0KNz8ioButzxlebKcF2YrDxpj6oqMU+9g2EMeQMmF+haVZFuXYQIu487HiA4v
cfO2hs8ez89HWr775DlR34WITvD5Vra7LReq54bvTtY0WmDkKtuOmUnyYZd8rusU
9kxmL9qoltqZSrE2pAofE90kF6YbNjwaP5v4n8/9BT8MHif2ohJIGeYpAwgKsE7U
B7Vb0jqLmN1ak22mT+KOXAPtnPGy0cNE1K6qlJPgEcpRKvBuOdoWsiWUzxBO
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:12:38 2025 by rpki-client