Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/Jnqq2s9IW8Jb9GJR8mm3PxlaO4E.roa
File: Jnqq2s9IW8Jb9GJR8mm3PxlaO4E.roa (raw, json)
Hash identifier: Tzfo4qHDlF0HwkukkWzl4QVw8IpAZNqJiD1yHJomELc=
Subject key identifier: 26:7A:AA:DA:CF:48:5B:C2:5B:F4:62:51:F2:69:B7:3F:19:5A:3B:81
Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial: 01856EEFEABDD1728E87D5DAD614C9CE1902
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/Jnqq2s9IW8Jb9GJR8mm3PxlaO4E.roa
Signing time: Sun 01 Jan 2023 20:04:54 +0000
ROA not before: Sun 01 Jan 2023 20:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203512
IP address blocks: 185.129.120.0/24 maxlen: 24
185.129.123.0/24 maxlen: 24
185.129.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:ea:bd:d1:72:8e:87:d5:da:d6:14:c9:ce:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Validity
Not Before: Jan 1 20:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=267aaadacf485bc25bf46251f269b73f195a3b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:aa:3e:a9:7e:1e:22:3c:15:fd:43:e6:84:
ad:07:51:24:e5:d5:53:83:cd:4b:fb:36:26:90:f8:
61:62:88:ff:e3:5f:03:cf:07:6b:c0:d7:2b:38:22:
df:f8:5f:b2:ee:fa:a4:46:f7:97:42:77:e2:25:b3:
5d:67:63:a0:bc:c5:3b:b1:51:9c:79:84:8f:9c:47:
22:8f:4f:e5:56:7e:b8:2f:a4:42:ee:6f:59:42:29:
6c:9c:46:ac:b0:60:1c:ac:07:02:1c:f5:c5:c7:e4:
a9:68:41:76:70:77:de:a6:ba:7e:38:03:40:35:04:
a2:aa:77:a0:a7:72:64:fc:57:31:7d:f3:92:40:61:
f3:bc:93:a8:d5:ac:7a:35:e8:73:a9:c6:ed:d4:73:
c9:27:8b:ac:7a:1e:d6:28:77:40:fe:17:e4:62:d2:
94:8a:6f:00:00:52:2f:4f:9c:79:65:52:a5:7f:2b:
b4:a8:a5:76:c8:1c:fb:1e:00:6b:c7:99:8b:4a:39:
08:3f:84:3b:13:b3:9c:9e:b6:4a:c8:bc:66:2d:70:
67:3b:61:1d:1a:cd:43:23:23:58:7b:52:4e:80:61:
df:69:09:41:14:58:fb:5b:24:63:07:e9:57:37:1f:
f7:e4:f5:1c:18:38:2a:35:1e:3b:fc:3a:34:7a:3f:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:AA:DA:CF:48:5B:C2:5B:F4:62:51:F2:69:B7:3F:19:5A:3B:81
X509v3 Authority Key Identifier:
keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/Jnqq2s9IW8Jb9GJR8mm3PxlaO4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.120.0/24
185.129.122.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:c7:d0:e9:b3:ed:b3:a3:c9:91:28:df:3a:8f:d6:27:4c:d5:
7a:41:60:9c:aa:59:68:db:b6:b5:8e:38:23:95:d3:94:24:64:
8a:64:dc:6f:90:94:8b:3c:74:bf:4d:7b:e8:9d:12:29:2d:1a:
57:01:3b:81:b5:4f:6f:ab:99:b2:d3:99:77:3c:39:57:45:33:
61:15:8c:a0:19:75:80:45:d4:57:c8:da:c8:62:2d:5c:6a:37:
ec:2e:63:a8:59:e5:37:03:f2:b5:93:1e:60:14:f9:10:b5:df:
3b:c6:95:b0:38:ac:08:bf:3b:b4:03:1b:92:1a:53:d4:c4:eb:
93:7f:45:9a:94:e4:77:b5:f2:e2:2e:ac:5f:ae:23:be:ef:ba:
ce:80:02:d6:31:ae:cd:a5:1a:4f:ad:79:a7:31:fc:3b:06:e3:
8b:3c:b6:36:06:60:e9:cc:08:22:77:56:23:95:71:df:83:d6:
75:80:ae:bd:f5:02:42:8d:32:50:1f:b3:a4:a8:86:f6:bc:f7:
ba:84:44:e9:4b:dd:09:c9:81:24:62:78:e0:a7:c4:91:b1:c3:
0c:44:ea:99:fe:7b:1f:e8:e4:51:27:ef:44:0f:82:c4:36:59:
67:22:2d:e9:14:c4:a7:14:eb:9e:e4:bb:5a:d7:37:8e:d6:8b:
28:5e:1f:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVu7+q90XKOh9Xa1hTJzhkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTY2OTU3OWIzY2U2MWVlOGVlN2Q2YWY3ZTMxNGIwZjcy
NjM2MWYwHhcNMjMwMTAxMjAwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdhYWFkYWNmNDg1YmMyNWJmNDYyNTFmMjY5YjczZjE5NWEzYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9aqPql+HiI8Ff1D5oStB1Ek5dVT
g81L+zYmkPhhYoj/418DzwdrwNcrOCLf+F+y7vqkRveXQnfiJbNdZ2OgvMU7sVGc
eYSPnEcij0/lVn64L6RC7m9ZQilsnEassGAcrAcCHPXFx+SpaEF2cHfeprp+OANA
NQSiqnegp3Jk/FcxffOSQGHzvJOo1ax6Nehzqcbt1HPJJ4useh7WKHdA/hfkYtKU
im8AAFIvT5x5ZVKlfyu0qKV2yBz7HgBrx5mLSjkIP4Q7E7OcnrZKyLxmLXBnO2Ed
Gs1DIyNYe1JOgGHfaQlBFFj7WyRjB+lXNx/35PUcGDgqNR47/Do0ej8PsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCZ6qtrPSFvCW/RiUfJptz8ZWjuBMB8GA1UdIwQY
MBaAFCeWaVebPOYe6O59avfjFLD3JjYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVacFY1czg1aDdvN24xcTktTVVzUGNtTmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMTg0MTMtYjdhYS00NTljLTk5ZmEt
NGRlMWI1MjBhNTk0LzEvSm5xcTJzOUlXOEpiOUdKUjhtbTNQeGxhTzRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMTg0MTMtYjdhYS00NTljLTk5ZmEtNGRlMWI1MjBhNTk0
LzEvSjVacFY1czg1aDdvN24xcTktTVVzUGNtTmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYF4AwQB
uYF6MA0GCSqGSIb3DQEBCwUAA4IBAQAfx9Dps+2zo8mRKN86j9YnTNV6QWCcqllo
27a1jjgjldOUJGSKZNxvkJSLPHS/TXvonRIpLRpXATuBtU9vq5my05l3PDlXRTNh
FYygGXWARdRXyNrIYi1cajfsLmOoWeU3A/K1kx5gFPkQtd87xpWwOKwIvzu0AxuS
GlPUxOuTf0WalOR3tfLiLqxfriO+77rOgALWMa7NpRpPrXmnMfw7BuOLPLY2BmDp
zAgid1YjlXHfg9Z1gK699QJCjTJQH7OkqIb2vPe6hETpS90JyYEkYnjgp8SRscMM
ROqZ/nsf6ORRJ+9ED4LENllnIi3pFMSnFOue5Lta1zeO1osoXh9n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:11 2024 by rpki-client on console-fra.rpki-client.org