Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jdl8j1G-HpCW_Hm4UJXMfPNNVr0.roa
File: jdl8j1G-HpCW_Hm4UJXMfPNNVr0.roa (raw, json)
Hash identifier: XQUlFoBArlYB1DvCLoGzqv44/66SdoTN1jzs49hZDjs=
Subject key identifier: 8D:D9:7C:8F:51:BE:1E:90:96:FC:79:B8:50:95:CC:7C:F3:4D:56:BD
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018D0020B8576A6D5C3A20023873D7CFB171
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jdl8j1G-HpCW_Hm4UJXMfPNNVr0.roa
Signing time: Sat 13 Jan 2024 00:02:40 +0000
ROA not before: Sat 13 Jan 2024 00:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 185.21.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 19:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:00:20:b8:57:6a:6d:5c:3a:20:02:38:73:d7:cf:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 13 00:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dd97c8f51be1e9096fc79b85095cc7cf34d56bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:f9:49:b0:b8:0c:94:de:ab:3a:9d:00:81:
f0:8b:3c:38:f4:bf:a8:54:b7:fd:d7:ec:4f:da:01:
82:80:c2:6f:98:d5:69:45:76:da:83:77:9b:07:39:
2f:20:38:d7:70:b5:7f:9a:21:82:30:4a:6c:b9:0c:
6f:a2:75:4c:5e:00:65:29:ec:8e:68:96:03:3f:24:
68:98:b9:4b:7c:42:a3:30:1c:e3:6a:b0:fb:4b:ab:
2b:86:7e:66:df:e3:fe:42:98:23:f8:41:36:fd:30:
81:93:8d:f5:14:ba:ef:68:4b:4b:37:af:8e:0f:a8:
d4:8c:cd:92:19:35:a8:8e:94:1d:e1:13:15:40:8c:
8b:5a:91:bf:7f:dc:01:c7:c8:ed:71:99:23:99:ff:
1b:ad:cf:26:00:9a:37:23:8b:6e:78:2e:6e:5d:df:
4c:58:c2:52:42:fc:2e:51:b0:21:29:c7:de:d7:2e:
17:d4:af:cc:fa:02:20:d8:5c:8c:85:04:70:b5:a8:
6d:04:0a:f2:aa:fb:98:c8:68:3c:5e:f5:5e:cb:76:
c5:d6:cd:58:68:ef:ba:4a:f8:9b:f6:3f:cc:f8:ea:
f3:c3:0f:81:1a:c4:97:6b:23:97:7a:9d:b3:33:dc:
99:27:59:2c:38:bf:86:84:ae:14:bb:54:1c:e7:37:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D9:7C:8F:51:BE:1E:90:96:FC:79:B8:50:95:CC:7C:F3:4D:56:BD
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jdl8j1G-HpCW_Hm4UJXMfPNNVr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.255.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:db:7e:6a:1b:05:f9:47:75:48:52:9f:24:c2:b6:7d:0f:60:
e0:d1:f3:b4:7f:53:fd:8a:f2:1e:a5:31:76:ee:3b:07:df:19:
6a:1f:01:85:36:d1:14:70:c4:29:05:9a:f3:a0:2c:fd:25:49:
99:f5:e1:20:00:10:de:f6:ca:8e:f6:99:6c:de:e6:ff:e5:f4:
29:f2:b0:de:45:a0:49:d9:65:bf:a7:7d:ee:42:a5:4f:5c:b0:
ad:19:f5:29:1f:59:44:e4:85:0a:74:a8:7c:10:13:9d:b8:9b:
89:fd:f7:36:c6:70:88:5c:62:96:39:20:a2:6f:de:1e:2a:96:
71:6e:35:91:16:35:b8:da:7b:61:59:71:c8:e6:df:71:df:b6:
08:6a:a9:a0:8f:d1:66:92:04:b6:0a:86:7e:25:40:05:a9:3a:
de:92:43:da:26:e9:e5:8a:06:f2:c0:a7:2e:7e:e1:35:7f:88:
19:c8:e0:3f:38:ce:5e:70:4a:5c:30:2b:d1:14:ec:54:60:42:
c5:5c:ff:be:63:bd:c8:a0:da:86:02:4f:f3:b1:b6:20:55:42:
56:31:82:4b:02:b8:0e:81:63:bd:2a:19:48:49:d1:04:64:bc:
0a:78:e9:0c:df:b3:46:42:d1:c3:c1:dd:63:69:8d:de:f1:ae:
68:64:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:46 2025 by rpki-client