Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/jfxq1Ti3doiX9KBdi9A4XdLSxdM.roa
File: jfxq1Ti3doiX9KBdi9A4XdLSxdM.roa (raw, json)
Hash identifier: 1d5tE9fw0WDqkKay8sgVFFuqb4BkVJToCDzNnvJ/gsE=
Subject key identifier: 8D:FC:6A:D5:38:B7:76:88:97:F4:A0:5D:8B:D0:38:5D:D2:D2:C5:D3
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 018CD5CCA6D9C67291BE3B3B05FA0B76C357
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/jfxq1Ti3doiX9KBdi9A4XdLSxdM.roa
Signing time: Thu 04 Jan 2024 18:46:48 +0000
ROA not before: Thu 04 Jan 2024 18:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25160
IP address blocks: 185.217.165.0/24 maxlen: 24
2a10:d700::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Jan 2024 10:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:cc:a6:d9:c6:72:91:be:3b:3b:05:fa:0b:76:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Jan 4 18:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dfc6ad538b7768897f4a05d8bd0385dd2d2c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:70:db:74:c2:9f:c3:54:ba:e9:62:82:45:
ac:23:03:b1:67:28:47:ec:06:01:c7:16:ae:27:02:
4f:90:8e:fe:c5:94:73:c5:43:92:0c:be:c4:cf:6f:
b3:73:16:e8:e7:53:91:b7:7a:b3:3d:8b:f6:b5:b2:
98:1b:e5:bc:33:4e:56:3b:69:43:bc:9b:5c:f5:b2:
47:69:c5:77:07:82:d2:ca:87:5f:f3:da:03:e2:d1:
b9:24:da:d3:0f:a6:ed:e3:29:e5:5c:c2:3a:9f:03:
75:fd:63:2e:ea:d0:e1:8c:16:c4:16:c6:a1:8f:2a:
87:f4:ea:42:55:7c:62:e3:cd:40:4a:2e:49:37:df:
fb:71:27:2b:0f:b7:b0:ec:10:0b:33:35:94:bc:8e:
c0:71:73:76:f8:e2:c9:9c:99:e7:b8:78:00:3a:ae:
c7:f8:f1:fc:48:fd:f6:0d:57:2c:16:c0:f6:3e:e2:
93:ed:45:c6:4d:94:31:fc:6d:6c:9e:e9:57:6d:84:
48:41:c3:7d:e0:18:4e:06:62:1f:ab:1a:cc:7f:94:
78:49:d8:c4:61:9c:2e:75:cc:63:79:6e:ac:18:43:
ed:d5:91:57:2d:bc:e0:02:9c:60:1c:07:d9:18:b2:
b9:4b:ed:2e:88:ce:45:08:76:61:5e:d3:7b:f9:5a:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FC:6A:D5:38:B7:76:88:97:F4:A0:5D:8B:D0:38:5D:D2:D2:C5:D3
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/jfxq1Ti3doiX9KBdi9A4XdLSxdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.165.0/24
IPv6:
2a10:d700::/29
Signature Algorithm: sha256WithRSAEncryption
55:78:91:55:99:07:89:54:45:eb:a8:03:7a:05:e0:96:f2:67:
ac:ae:6d:83:8c:bb:75:9c:74:5b:be:75:3d:d1:28:b8:02:71:
42:08:fe:8c:67:a5:dd:e3:4a:fd:10:95:df:e1:ca:f3:13:cd:
28:5f:0a:e4:5b:41:d8:a8:ab:a1:48:85:93:24:8f:c8:f4:44:
56:bf:e5:a9:de:7a:88:2c:63:da:67:79:99:a5:40:13:1a:6e:
4f:9a:9a:b8:c6:86:38:36:6f:4e:bc:57:08:66:bb:31:21:79:
47:e4:35:e8:72:aa:94:28:30:71:23:c7:d0:e0:13:66:19:f4:
ae:8f:3a:ee:df:99:55:08:47:a0:35:a4:d4:bb:75:7a:30:7f:
5c:ef:46:85:a0:82:26:4b:e3:6e:3b:fd:a8:96:49:43:0d:31:
5b:cc:f8:2d:1d:71:f3:74:34:27:fa:1e:82:20:c1:71:63:f8:
ef:29:54:92:1c:14:7a:bd:78:a5:93:0b:b1:65:a1:7f:3e:ad:
9a:07:ba:a9:39:67:15:74:81:5f:ba:53:41:48:5d:48:7e:ca:
3f:ed:da:9b:15:a2:d3:ef:f9:f6:6d:6a:fa:17:14:c1:57:a2:
46:9c:c2:e7:2f:aa:50:ed:99:0f:77:5c:9c:a0:b0:c5:54:95:
be:3b:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:10 2025 by rpki-client