Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/zlPX2E-AfydVu17kknxKWfAR80o.roa
File: zlPX2E-AfydVu17kknxKWfAR80o.roa (raw, json)
Hash identifier: k3Z5QdDQKEBNgpYZ588AqRELNxUQO4dlk8au0HGpFtQ=
Subject key identifier: CE:53:D7:D8:4F:80:7F:27:55:BB:5E:E4:92:7C:4A:59:F0:11:F3:4A
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0192B5FF8EB33E9832F10CCA14FB3B0C3EBE
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/zlPX2E-AfydVu17kknxKWfAR80o.roa
Signing time: Tue 22 Oct 2024 20:51:17 +0000
ROA not before: Tue 22 Oct 2024 20:51:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203811
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.253.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 12:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:ff:8e:b3:3e:98:32:f1:0c:ca:14:fb:3b:0c:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Oct 22 20:51:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce53d7d84f807f2755bb5ee4927c4a59f011f34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:79:98:c0:95:74:c3:0e:76:d8:c3:d6:5f:
bc:f3:eb:cf:e7:dc:1f:5c:ec:24:ea:bf:d5:eb:cd:
a0:cb:a0:d4:a8:5e:00:3b:0f:cc:e5:3e:7f:db:2d:
39:ba:a0:85:78:5b:82:86:d0:f1:20:cc:ee:33:4b:
58:62:88:22:0f:f9:50:59:8d:f7:64:6a:db:d9:26:
4c:08:97:fa:b0:2b:ba:86:9d:25:2c:89:6c:a1:d8:
ca:f7:dc:39:2e:95:2b:d3:0f:77:b8:be:3a:30:35:
10:5f:aa:57:32:37:d9:28:a7:0d:17:9c:c9:58:98:
cc:b2:88:2c:d3:6a:fc:2b:83:ac:bf:1f:cc:0f:7b:
29:b8:ed:b1:c1:3f:e2:60:ad:4e:27:69:18:6e:2a:
2f:0c:d7:4e:5e:2c:05:17:f9:0a:77:77:b3:0d:ce:
d7:b5:c6:f4:25:78:f5:09:6f:1a:7e:1d:9d:7e:69:
82:39:2c:78:fe:9d:03:b4:30:33:59:27:8c:18:53:
b5:31:55:0c:ce:f8:89:e5:5f:bf:82:31:2c:82:65:
c9:08:8a:ab:bd:1d:c7:b6:7f:0f:db:a9:21:1e:58:
41:03:30:2c:98:23:f4:c1:b1:ed:63:d0:67:f7:c6:
68:c0:7a:07:72:e8:6a:ae:39:fb:26:f4:0b:36:bd:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:D7:D8:4F:80:7F:27:55:BB:5E:E4:92:7C:4A:59:F0:11:F3:4A
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/zlPX2E-AfydVu17kknxKWfAR80o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/23
185.122.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b6:8f:a9:b6:58:92:4b:1e:ae:0a:2f:f4:0f:ed:a0:7b:1b:
81:63:24:a2:f5:c5:ad:98:bc:24:ae:bf:31:0e:5f:e0:da:bb:
4c:0b:56:d0:cd:1b:c4:e3:02:56:c6:c9:aa:b5:49:3b:8f:fc:
04:03:fc:21:13:a5:56:c7:8c:99:6c:23:2b:2b:31:69:21:da:
9f:59:fe:e3:d9:6e:7f:0c:70:04:35:d8:7c:f1:70:8d:39:cd:
05:d7:f8:57:08:39:02:3f:34:a5:a8:c6:4c:ad:13:fd:33:9a:
94:65:b4:b3:99:ff:55:ab:0f:c7:3a:cc:59:14:35:53:16:73:
27:d0:14:c4:4a:ef:4b:c6:61:c3:2f:e5:91:ab:84:d8:09:d7:
27:69:f4:90:7f:2d:c0:9b:aa:f4:09:b7:1a:92:82:61:7a:41:
cf:9d:d8:7b:c5:26:32:6f:01:1c:a0:5a:e2:45:78:e4:d0:8e:
a5:af:ec:e7:3c:a7:12:16:27:cc:1e:c8:91:31:d1:09:f5:b3:
10:85:cb:b9:83:11:86:58:27:e4:65:59:53:cd:a8:ce:df:1a:
9c:22:4b:be:05:83:ac:04:6d:ed:60:01:40:b4:ed:1a:2f:b6:
a1:2e:44:d4:8f:a7:35:40:ec:23:16:06:d1:9e:89:e3:df:c2:
bf:35:86:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZK1/46zPpgy8QzKFPs7DD6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2MzZGU2MTAxMWRlMDcxMDFlMTRkYzA3MjczOTUxNzFj
YjAzYWIwHhcNMjQxMDIyMjA1MTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTUzZDdkODRmODA3ZjI3NTViYjVlZTQ5MjdjNGE1OWYwMTFmMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmJ5mMCVdMMOdtjD1l+88+vP59wf
XOwk6r/V682gy6DUqF4AOw/M5T5/2y05uqCFeFuChtDxIMzuM0tYYogiD/lQWY33
ZGrb2SZMCJf6sCu6hp0lLIlsodjK99w5LpUr0w93uL46MDUQX6pXMjfZKKcNF5zJ
WJjMsogs02r8K4Osvx/MD3spuO2xwT/iYK1OJ2kYbiovDNdOXiwFF/kKd3ezDc7X
tcb0JXj1CW8afh2dfmmCOSx4/p0DtDAzWSeMGFO1MVUMzviJ5V+/gjEsgmXJCIqr
vR3Htn8P26khHlhBAzAsmCP0wbHtY9Bn98ZowHoHcuhqrjn7JvQLNr3UGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM5T19hPgH8nVbte5JJ8SlnwEfNKMB8GA1UdIwQY
MBaAFBI8PeYQEd4HEB4U3AcnOVFxywOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUt
YjUwNGM5YWU5YmJjLzEvemxQWDJFLUFmeWRWdTE3a2tueEtXZkFSODBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjk2NTAtOGEwMS00MzcwLTk5MWUtYjUwNGM5YWU5YmJj
LzEvRWp3OTVoQVIzZ2NRSGhUY0J5YzVVWEhMQTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXr8AwQA
uXr/MA0GCSqGSIb3DQEBCwUAA4IBAQBato+ptliSSx6uCi/0D+2gexuBYySi9cWt
mLwkrr8xDl/g2rtMC1bQzRvE4wJWxsmqtUk7j/wEA/whE6VWx4yZbCMrKzFpIdqf
Wf7j2W5/DHAENdh88XCNOc0F1/hXCDkCPzSlqMZMrRP9M5qUZbSzmf9Vqw/HOsxZ
FDVTFnMn0BTESu9LxmHDL+WRq4TYCdcnafSQfy3Am6r0CbcakoJhekHPndh7xSYy
bwEcoFriRXjk0I6lr+znPKcSFifMHsiRMdEJ9bMQhcu5gxGGWCfkZVlTzajO3xqc
Iku+BYOsBG3tYAFAtO0aL7ahLkTUj6c1QOwjFgbRnonj38K/NYYE
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:39 2025 by rpki-client