Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/JvkKpyhbpGA8UL__3C4XQpWDpAo.roa
File: JvkKpyhbpGA8UL__3C4XQpWDpAo.roa (raw, json)
Hash identifier: DDJVwpDP7p53haa7DBiVldpZA5dYPtkPXnHXowU+vQ4=
Subject key identifier: 26:F9:0A:A7:28:5B:A4:60:3C:50:BF:FF:DC:2E:17:42:95:83:A4:0A
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018CCA2AA11607950B4F7AC2368DACE36791
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/JvkKpyhbpGA8UL__3C4XQpWDpAo.roa
Signing time: Tue 02 Jan 2024 12:34:00 +0000
ROA not before: Tue 02 Jan 2024 12:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208107
IP address blocks: 217.199.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:a1:16:07:95:0b:4f:7a:c2:36:8d:ac:e3:67:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 12:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26f90aa7285ba4603c50bfffdc2e17429583a40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:93:a6:36:eb:0e:81:e7:b4:c1:3d:9d:12:
35:dc:95:0d:62:56:ac:e7:6a:04:9b:e7:ea:3a:ab:
ce:85:ef:5c:89:01:ff:07:42:cb:f4:7e:20:a5:4b:
80:7c:03:64:c9:5f:d4:78:93:f3:9d:15:68:4d:8f:
e3:c9:03:9e:25:ff:a8:a7:af:b9:89:5d:86:42:f0:
98:f1:98:c4:cb:1c:01:5b:b8:ea:23:42:3f:10:bb:
b1:cf:51:8e:b8:0e:cd:ae:e0:01:20:1f:5d:fd:d3:
ec:b3:55:92:55:1b:da:f3:20:36:55:2a:77:9e:99:
b5:06:c8:24:fd:5c:2c:a6:e7:b4:3b:bc:e8:dc:a8:
5e:04:e1:7c:c5:8c:bf:ce:31:4b:bf:e4:f3:23:c0:
0b:02:b0:b0:28:b9:80:b2:b0:f0:12:a7:73:2c:eb:
2a:04:b1:a6:5a:98:9b:bd:94:30:cc:7b:4b:7f:37:
fa:1b:4d:c9:9b:32:bc:21:9a:a8:7c:1f:4a:12:10:
68:af:7a:20:02:c1:a7:1e:aa:c1:ac:ec:1d:59:01:
66:3b:40:b1:53:2c:6f:82:a4:0e:58:fb:3b:b6:30:
c8:12:b4:34:f5:45:27:4a:e1:e6:99:51:3c:d9:d2:
92:9c:4f:3e:d4:54:73:69:0a:ed:10:59:21:7c:65:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:0A:A7:28:5B:A4:60:3C:50:BF:FF:DC:2E:17:42:95:83:A4:0A
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/JvkKpyhbpGA8UL__3C4XQpWDpAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.208.0/24
Signature Algorithm: sha256WithRSAEncryption
35:49:b1:48:b2:45:29:29:bd:57:80:16:a9:1c:91:c9:ef:ea:
21:73:37:36:66:21:17:8a:28:4f:f1:cd:7b:6a:04:a3:9d:d7:
4f:13:18:fe:20:89:57:9e:5e:4f:01:82:7e:f1:db:b0:c7:7b:
52:42:9d:72:47:30:c6:d5:65:67:db:7b:40:50:84:f1:c5:27:
ec:52:c2:97:64:37:16:e0:a8:f3:a2:70:d9:2b:ff:ea:3a:44:
f5:96:2b:2d:2d:d1:b4:41:27:25:a0:d3:fc:07:97:9f:44:e8:
30:b5:53:ff:3e:8d:c6:a7:e6:cc:73:91:36:1f:ad:14:9e:d3:
1f:18:64:db:f0:53:07:ec:27:3a:4f:fa:8e:85:e5:2d:42:0f:
a0:e7:8d:b2:54:ed:c6:30:20:72:e1:a8:25:43:e6:47:fa:0e:
d3:dd:0f:3b:6c:f8:8d:fd:08:06:a9:93:0d:f6:b7:a7:8b:8a:
fc:e4:df:0b:23:57:a7:2b:d6:e8:71:78:30:9c:97:c3:87:46:
c5:d7:9f:38:34:84:ea:c8:17:57:76:88:89:4e:75:8b:5f:7c:
9c:e9:18:ec:a6:a6:d2:9f:57:91:cc:5e:7c:c4:e9:3a:c4:ec:
c6:09:48:87:ca:86:33:0c:61:d8:6b:41:d1:7d:25:bf:ed:1c:
c2:f1:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:53 2025 by rpki-client