Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/sTBXTdYXwa1fqEQZ-Da__wkrHc0.roa
File: sTBXTdYXwa1fqEQZ-Da__wkrHc0.roa (raw, json)
Hash identifier: jbvWiUG89UZpbEWzm3HbKewCC4ycLjp8H4lqHf1osck=
Subject key identifier: B1:30:57:4D:D6:17:C1:AD:5F:A8:44:19:F8:36:BF:FF:09:2B:1D:CD
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01935ED83DE8835D746F89563DAC25D57A50
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/sTBXTdYXwa1fqEQZ-Da__wkrHc0.roa
Signing time: Sun 24 Nov 2024 15:44:09 +0000
ROA not before: Sun 24 Nov 2024 15:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205814
IP address blocks: 185.122.253.0/24 maxlen: 24
185.122.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:d8:3d:e8:83:5d:74:6f:89:56:3d:ac:25:d5:7a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Nov 24 15:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b130574dd617c1ad5fa84419f836bfff092b1dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:a6:d4:73:f1:9d:b3:86:af:52:06:3e:ea:
54:ba:b2:cf:3f:c6:03:e6:ae:a9:8c:77:c5:14:29:
f2:66:e7:f2:03:e2:54:25:5b:d1:c9:0b:72:0b:56:
f5:3f:6a:4e:42:50:28:78:05:70:1a:30:46:87:e4:
8e:74:16:af:bd:f3:f8:3f:3b:aa:29:06:3d:e0:d0:
7c:00:d4:54:33:6d:db:1a:ec:6c:4d:67:b5:71:7a:
e0:42:27:fa:a0:d7:e9:00:c9:ab:11:1b:60:9a:79:
b8:73:2e:79:4d:0e:4b:b1:80:da:54:b3:5d:18:24:
be:fb:25:f2:72:90:df:89:6e:82:e4:3a:6e:93:f1:
5b:0f:e0:e7:43:f1:ff:8e:7d:9f:d7:8c:56:77:6d:
dc:9b:be:ea:5e:c8:37:fd:5e:cf:53:2e:ea:04:63:
9a:03:9d:28:2f:37:c9:02:6d:3a:a5:97:10:9f:50:
b3:98:46:0c:23:f6:f3:16:ba:7a:eb:b2:33:c4:65:
a5:79:36:6c:d4:c8:86:76:60:40:6f:3e:81:06:53:
2d:ef:9f:11:d0:11:b0:da:59:d0:62:4b:30:a7:61:
23:1f:9b:8d:b8:4d:9c:93:d6:7f:d0:f6:47:39:13:
7f:62:ac:14:5b:da:8c:6b:da:f5:0f:00:f4:e8:1c:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:57:4D:D6:17:C1:AD:5F:A8:44:19:F8:36:BF:FF:09:2B:1D:CD
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/sTBXTdYXwa1fqEQZ-Da__wkrHc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.253.0-185.122.254.255
Signature Algorithm: sha256WithRSAEncryption
69:ad:eb:a5:3b:9b:98:14:61:57:29:10:91:90:17:4b:65:3f:
3a:01:30:18:50:01:48:6d:7a:62:61:ec:7e:20:00:b4:8b:d5:
f9:be:05:e5:c4:75:dc:42:20:5c:0e:14:bb:4f:48:fc:4b:47:
d3:37:ca:7a:8a:aa:16:7c:4a:56:d0:76:0d:fa:b2:73:be:16:
d7:3b:d0:5b:30:63:ad:ae:c1:fe:db:3b:f5:91:3f:ec:ea:a9:
c5:83:f0:2f:12:48:18:8e:aa:ba:80:d3:6b:af:7d:56:9b:ba:
52:a2:e5:34:c3:c1:c3:3f:42:e1:fc:bc:9e:1d:8d:e1:c2:d3:
ff:81:cc:db:09:09:86:a6:9a:07:1b:70:ca:30:96:a5:bd:1a:
26:54:e4:54:cc:41:28:7a:67:de:6a:00:3a:47:8f:6d:99:54:
dc:aa:30:22:31:a3:59:8f:cb:9c:94:39:12:c9:2b:74:5f:24:
10:b7:62:e9:b2:1b:06:af:f9:b0:0b:38:51:1f:0f:8e:6e:5c:
88:8f:17:03:bd:80:e9:bc:3a:62:11:86:9a:9e:92:eb:26:dd:
3b:9e:b3:a5:69:55:7d:df:9c:67:f6:e1:f8:b3:4c:aa:9d:09:
17:dd:af:43:32:56:7c:b8:8b:f0:33:46:b9:07:04:7b:50:07:
be:68:f8:0e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNe2D3og110b4lWPawl1XpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjQxMTI0MTU0NDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMwNTc0ZGQ2MTdjMWFkNWZhODQ0MTlmODM2YmZmZjA5MmIxZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9um1HPxnbOGr1IGPupUurLPP8YD
5q6pjHfFFCnyZufyA+JUJVvRyQtyC1b1P2pOQlAoeAVwGjBGh+SOdBavvfP4Pzuq
KQY94NB8ANRUM23bGuxsTWe1cXrgQif6oNfpAMmrERtgmnm4cy55TQ5LsYDaVLNd
GCS++yXycpDfiW6C5Dpuk/FbD+DnQ/H/jn2f14xWd23cm77qXsg3/V7PUy7qBGOa
A50oLzfJAm06pZcQn1CzmEYMI/bzFrp667IzxGWleTZs1MiGdmBAbz6BBlMt758R
0BGw2lnQYkswp2EjH5uNuE2ck9Z/0PZHORN/YqwUW9qMa9r1DwD06Bwr9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLEwV03WF8GtX6hEGfg2v/8JKx3NMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvc1RCWFRkWVh3YTFmcUVRWi1EYV9fd2tySGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5ev0D
BAC5ev4wDQYJKoZIhvcNAQELBQADggEBAGmt66U7m5gUYVcpEJGQF0tlPzoBMBhQ
AUhtemJh7H4gALSL1fm+BeXEddxCIFwOFLtPSPxLR9M3ynqKqhZ8SlbQdg36snO+
Ftc70FswY62uwf7bO/WRP+zqqcWD8C8SSBiOqrqA02uvfVabulKi5TTDwcM/QuH8
vJ4djeHC0/+BzNsJCYammgcbcMowlqW9GiZU5FTMQSh6Z95qADpHj22ZVNyqMCIx
o1mPy5yUORLJK3RfJBC3YumyGwav+bALOFEfD45uXIiPFwO9gOm8OmIRhpqekusm
3Tues6VpVX3fnGf24fizTKqdCRfdr0MyVny4i/AzRrkHBHtQB75o+A4=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:13:32 2025 by rpki-client