Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/STS-2JB9gwNFVfnsLeXvjRK7gyM.roa
File: STS-2JB9gwNFVfnsLeXvjRK7gyM.roa (raw, json)
Hash identifier: 4eGhWVRoMTQGqn0blkPQ5RSWpnP5URcECkr+tXLLkQs=
Subject key identifier: 49:34:BE:D8:90:7D:83:03:45:55:F9:EC:2D:E5:EF:8D:12:BB:83:23
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 01941850F3215DD72BB96A11D4A0EEBADBA9
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/STS-2JB9gwNFVfnsLeXvjRK7gyM.roa
Signing time: Mon 30 Dec 2024 16:05:45 +0000
ROA not before: Mon 30 Dec 2024 16:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60134
IP address blocks: 193.30.129.0/24 maxlen: 24
213.232.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:50:f3:21:5d:d7:2b:b9:6a:11:d4:a0:ee:ba:db:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Dec 30 16:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4934bed8907d83034555f9ec2de5ef8d12bb8323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:ed:b3:7f:9e:6d:ab:55:a4:80:1e:e5:b3:
1a:1e:53:32:16:d2:00:4c:38:14:da:f7:e2:a0:10:
eb:c4:e2:eb:e3:76:73:91:f0:9c:29:67:02:77:6f:
53:46:29:41:42:a6:e7:0c:ad:95:7b:82:5b:c6:ba:
ea:38:76:e9:b1:51:5b:4c:a2:4a:be:4c:77:fd:96:
72:4f:7c:24:85:f9:d4:3b:de:4f:f5:b4:4e:ba:ad:
bf:f2:cf:24:02:8b:9a:f9:27:03:30:27:a5:be:7c:
6e:29:bd:e0:74:38:92:5b:ca:b1:5b:55:8b:0b:9c:
2b:64:01:b3:f2:de:4d:71:16:5f:f5:42:2c:a3:13:
9d:9f:52:f4:b2:b2:22:b7:d0:d9:d7:0b:1c:a9:97:
2d:ae:dc:0c:f7:94:52:ed:47:3c:41:d8:8d:cf:88:
24:49:94:b1:1b:5b:f7:ea:24:37:54:9e:53:65:a8:
fd:47:9e:e7:e2:08:5e:8a:15:5c:b4:c5:2f:89:b7:
0e:2d:e7:9a:41:1b:d4:c2:07:91:04:81:40:df:30:
22:f9:fd:64:89:8b:58:0b:a7:fd:13:b8:60:11:23:
8c:8c:9e:66:bb:c3:28:c0:89:56:9e:63:34:0b:68:
a3:a4:a0:85:8c:d5:0c:ae:bc:df:8f:a9:2b:79:93:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:BE:D8:90:7D:83:03:45:55:F9:EC:2D:E5:EF:8D:12:BB:83:23
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/STS-2JB9gwNFVfnsLeXvjRK7gyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.129.0/24
213.232.248.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4b:e8:33:20:c2:b0:5d:9d:78:3d:fe:70:70:0f:83:c0:5b:
30:87:14:74:41:79:7d:71:15:6e:d2:35:7f:4c:87:50:e9:a8:
65:01:b3:91:9d:8f:9d:ec:8f:dc:50:63:46:40:3e:8a:e2:80:
8b:6d:bd:4d:85:a9:67:32:3c:26:c1:6f:f1:0b:d3:78:06:6e:
4b:c1:81:a9:6e:ee:97:83:26:9a:26:e2:7a:0d:85:8b:97:23:
67:11:e1:36:b3:a0:ed:a0:24:61:a9:b0:a2:6c:29:87:b1:24:
cf:a8:54:36:c4:86:c0:9a:2e:b2:c1:58:72:12:77:65:1e:2d:
a9:72:6f:9a:2b:13:04:39:74:65:0f:60:62:4e:ef:98:5a:da:
69:16:3e:4f:74:98:9f:5f:2d:d8:24:0e:cd:fb:d3:01:d9:dc:
4a:d7:cb:ad:09:36:c0:74:61:6f:8a:5b:e7:24:7a:40:e9:8b:
02:da:aa:c4:87:e9:1d:2b:b6:33:08:3b:11:74:52:c7:e7:40:
5a:b7:3f:0e:a4:3b:d3:15:5a:0e:3a:4a:0c:5d:39:26:b0:b7:
3a:cb:83:e2:a8:ce:71:f3:0e:06:39:d0:a3:f3:57:d1:a8:43:
16:81:fb:50:00:aa:d3:8e:72:98:0e:d9:bc:10:69:ef:7a:fd:
cd:55:59:a1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQYUPMhXdcruWoR1KDuutupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj
YWY3ZWYwHhcNMjQxMjMwMTYwNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTM0YmVkODkwN2Q4MzAzNDU1NWY5ZWMyZGU1ZWY4ZDEyYmI4MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ubts3+ebatVpIAe5bMaHlMyFtIA
TDgU2vfioBDrxOLr43ZzkfCcKWcCd29TRilBQqbnDK2Ve4JbxrrqOHbpsVFbTKJK
vkx3/ZZyT3wkhfnUO95P9bROuq2/8s8kAoua+ScDMCelvnxuKb3gdDiSW8qxW1WL
C5wrZAGz8t5NcRZf9UIsoxOdn1L0srIit9DZ1wscqZctrtwM95RS7Uc8QdiNz4gk
SZSxG1v36iQ3VJ5TZaj9R57n4gheihVctMUvibcOLeeaQRvUwgeRBIFA3zAi+f1k
iYtYC6f9E7hgESOMjJ5mu8MowIlWnmM0C2ijpKCFjNUMrrzfj6kreZMXsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEk0vtiQfYMDRVX57C3l740Su4MjMB8GA1UdIwQY
MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt
MGI1YzVkOTQ0MjZhLzEvU1RTLTJKQjlnd05GVmZuc0xlWHZqUks3Z3lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh
LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwR6BAwQA
1ej4MA0GCSqGSIb3DQEBCwUAA4IBAQARS+gzIMKwXZ14Pf5wcA+DwFswhxR0QXl9
cRVu0jV/TIdQ6ahlAbORnY+d7I/cUGNGQD6K4oCLbb1NhalnMjwmwW/xC9N4Bm5L
wYGpbu6XgyaaJuJ6DYWLlyNnEeE2s6DtoCRhqbCibCmHsSTPqFQ2xIbAmi6ywVhy
EndlHi2pcm+aKxMEOXRlD2BiTu+YWtppFj5PdJifXy3YJA7N+9MB2dxK18utCTbA
dGFvilvnJHpA6YsC2qrEh+kdK7YzCDsRdFLH50Batz8OpDvTFVoOOkoMXTkmsLc6
y4PiqM5x8w4GOdCj81fRqEMWgftQAKrTjnKYDtm8EGnvev3NVVmh
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:48 2025 by rpki-client