Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/0vQy0khtuloQbgDvef1hU0sKSoE.roa
File: 0vQy0khtuloQbgDvef1hU0sKSoE.roa (raw, json)
Hash identifier: EgNDoTEL+8QUu5o3ObnwagsyEiPkpohxJszTziOHrfE=
Subject key identifier: D2:F4:32:D2:48:6D:BA:5A:10:6E:00:EF:79:FD:61:53:4B:0A:4A:81
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 0192AF1D29D0A5A9C8B47498EFE3ACC6DA8F
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/0vQy0khtuloQbgDvef1hU0sKSoE.roa
Signing time: Mon 21 Oct 2024 12:46:16 +0000
ROA not before: Mon 21 Oct 2024 12:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204877
IP address blocks: 185.141.120.0/22 maxlen: 32
185.141.120.0/23 maxlen: 23
185.141.120.0/24 maxlen: 32
185.141.121.0/24 maxlen: 32
185.141.122.0/23 maxlen: 23
185.141.122.0/24 maxlen: 32
185.141.123.0/24 maxlen: 32
2a0d:ff00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 24 Oct 2024 16:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:1d:29:d0:a5:a9:c8:b4:74:98:ef:e3:ac:c6:da:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Oct 21 12:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2f432d2486dba5a106e00ef79fd61534b0a4a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:6f:e9:3d:09:da:86:9b:54:df:71:4e:90:
38:42:23:9a:20:39:d2:b3:28:11:02:a1:c8:d8:4a:
a3:f3:9c:71:d1:0d:e1:47:f5:fb:b3:74:57:4a:ba:
98:6a:5f:41:4b:4d:b6:83:52:85:24:48:12:8d:be:
4d:11:74:ab:b6:39:91:8b:0c:8e:da:0d:e0:7c:6a:
36:60:ae:39:e5:fa:90:c2:13:d1:15:8b:de:ab:f0:
ba:89:f1:d3:e2:05:32:36:65:a4:7e:44:a0:df:9d:
a8:86:f3:c9:9f:ba:9d:55:4c:3f:f8:bb:e6:23:e9:
8c:42:43:d4:ad:91:e6:a6:e8:c2:2c:fa:ba:11:96:
7e:c6:fa:0a:14:16:cc:59:b8:66:88:f3:27:66:ea:
1c:ff:23:3d:58:cf:6a:34:3c:e9:03:7b:a2:80:c3:
fc:29:eb:a1:52:59:92:f1:cf:5b:c3:12:fc:0a:87:
6b:2b:fb:05:8f:8f:18:bc:91:bf:57:84:60:2d:a4:
3e:8a:bb:b4:d3:f1:86:93:cc:13:71:59:df:dd:b9:
18:13:40:a0:a8:19:3e:88:df:53:a5:e6:19:f8:f2:
f9:bc:4f:d6:82:61:58:b8:23:e3:fa:f1:d6:f3:06:
40:41:59:6e:cc:c2:4f:fc:fe:8c:21:20:ce:c0:d7:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:32:D2:48:6D:BA:5A:10:6E:00:EF:79:FD:61:53:4B:0A:4A:81
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/0vQy0khtuloQbgDvef1hU0sKSoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.120.0/22
IPv6:
2a0d:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
b3:62:40:8c:4e:c1:15:3e:50:59:9e:ad:79:29:63:2e:e1:83:
b6:2b:f3:94:44:62:ae:83:ce:27:65:d7:e4:60:f1:08:59:bd:
5d:91:43:0e:4b:88:35:90:d2:6a:41:5a:f3:f7:4b:ad:fd:1d:
a8:8f:da:11:d1:db:eb:fa:38:f8:70:14:38:c3:dd:f1:39:c3:
28:a3:6b:1f:93:28:09:bd:02:8f:d7:0d:cd:e0:d7:ff:c7:7e:
d0:2b:5f:7c:5a:94:29:87:79:87:fa:42:e6:61:f0:ce:b9:e0:
22:e0:40:b7:2c:b5:81:6b:dc:c4:7c:84:53:ee:7c:ef:b4:09:
c8:d7:01:cc:c7:cf:2e:15:f9:4a:89:76:7a:a2:4b:cb:c1:34:
dd:cc:5c:35:ff:3d:d9:ed:9d:81:15:73:f7:9e:20:69:5c:3b:
fe:b4:b2:40:e4:ce:aa:ca:c8:45:3f:c1:be:24:42:d1:af:4c:
98:4c:c4:bf:39:11:d8:17:19:c5:57:e9:ec:47:cc:5f:7f:1f:
b7:2d:11:5b:b1:d2:14:83:13:71:aa:ce:3b:7a:0f:96:10:7b:
74:90:24:c1:41:9c:a2:56:da:41:0a:28:ba:6e:08:e8:e3:78:
21:e2:52:1a:be:20:d6:e1:b5:e9:39:85:2c:93:e8:71:83:38:
19:8b:70:e6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZKvHSnQpanItHSY7+OsxtqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YmE5YzIyMzI0MWViODBlMmJjNzE4NTNiYjdkMmU1ODI4
NmJkZDMwHhcNMjQxMDIxMTI0NjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmY0MzJkMjQ4NmRiYTVhMTA2ZTAwZWY3OWZkNjE1MzRiMGE0YTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyFv6T0J2oabVN9xTpA4QiOaIDnS
sygRAqHI2Eqj85xx0Q3hR/X7s3RXSrqYal9BS022g1KFJEgSjb5NEXSrtjmRiwyO
2g3gfGo2YK455fqQwhPRFYveq/C6ifHT4gUyNmWkfkSg352ohvPJn7qdVUw/+Lvm
I+mMQkPUrZHmpujCLPq6EZZ+xvoKFBbMWbhmiPMnZuoc/yM9WM9qNDzpA3uigMP8
KeuhUlmS8c9bwxL8CodrK/sFj48YvJG/V4RgLaQ+iru00/GGk8wTcVnf3bkYE0Cg
qBk+iN9TpeYZ+PL5vE/WgmFYuCPj+vHW8wZAQVluzMJP/P6MISDOwNcZ3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNL0MtJIbbpaEG4A73n9YVNLCkqBMB8GA1UdIwQY
MBaAFDS6nCIyQeuA4rxxhTu30uWChr3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzIt
MTNlZTRjOGQzMDgyLzEvMHZReTBraHR1bG9RYmdEdmVmMWhVMHNLU29FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzItMTNlZTRjOGQzMDgy
LzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY14MA0E
AgACMAcDBQMqDf8AMA0GCSqGSIb3DQEBCwUAA4IBAQCzYkCMTsEVPlBZnq15KWMu
4YO2K/OURGKug84nZdfkYPEIWb1dkUMOS4g1kNJqQVrz90ut/R2oj9oR0dvr+jj4
cBQ4w93xOcMoo2sfkygJvQKP1w3N4Nf/x37QK198WpQph3mH+kLmYfDOueAi4EC3
LLWBa9zEfIRT7nzvtAnI1wHMx88uFflKiXZ6okvLwTTdzFw1/z3Z7Z2BFXP3niBp
XDv+tLJA5M6qyshFP8G+JELRr0yYTMS/ORHYFxnFV+nsR8xffx+3LRFbsdIUgxNx
qs47eg+WEHt0kCTBQZyiVtpBCii6bgjo43gh4lIaviDW4bXpOYUsk+hxgzgZi3Dm
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:54 2025 by rpki-client