Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/jU_GagYvKP9fQA5ZsvRujAwMrfk.roa
File: jU_GagYvKP9fQA5ZsvRujAwMrfk.roa (raw, json)
Hash identifier: dy7tOWmGE5IoxJoEOqpVFAGyLvLVrh2ymcn+a0VEVkE=
Subject key identifier: 8D:4F:C6:6A:06:2F:28:FF:5F:40:0E:59:B2:F4:6E:8C:0C:0C:AD:F9
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 01948DAFF48F27DDDC0D824FEF024D294430
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/jU_GagYvKP9fQA5ZsvRujAwMrfk.roa
Signing time: Wed 22 Jan 2025 11:05:06 +0000
ROA not before: Wed 22 Jan 2025 11:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 185.40.72.0/22 maxlen: 24
185.40.72.0/24 maxlen: 24
185.40.73.0/24 maxlen: 24
185.40.74.0/24 maxlen: 24
185.40.75.0/24 maxlen: 24
195.142.152.0/22 maxlen: 24
195.142.154.0/24 maxlen: 24
195.142.184.0/22 maxlen: 22
195.142.184.0/24 maxlen: 24
195.142.185.0/24 maxlen: 24
195.142.186.0/24 maxlen: 24
195.142.187.0/24 maxlen: 24
195.142.192.0/22 maxlen: 24
195.142.192.0/24 maxlen: 24
195.142.193.0/24 maxlen: 24
195.142.194.0/24 maxlen: 24
195.155.96.0/24 maxlen: 24
195.155.97.0/24 maxlen: 24
195.155.98.0/24 maxlen: 24
195.155.99.0/24 maxlen: 24
2a01:4c20::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 Jan 2025 11:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:af:f4:8f:27:dd:dc:0d:82:4f:ef:02:4d:29:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Jan 22 11:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d4fc66a062f28ff5f400e59b2f46e8c0c0cadf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:a6:80:87:a8:2b:e8:6f:95:42:4d:8b:ed:
6c:0b:72:5a:0b:60:4d:9e:a9:7f:28:24:8c:38:92:
b0:5d:a3:a0:a9:ed:20:c8:d9:34:38:51:ea:3e:67:
77:59:81:a0:45:1f:4d:1f:f4:3b:07:c3:e2:17:b0:
39:fb:26:f5:b6:a0:8b:b2:4c:f0:86:1d:48:b9:3d:
3e:40:13:8e:f5:86:e9:b2:56:81:4e:57:35:64:59:
11:bf:75:42:8c:3a:2c:78:b0:58:97:e7:a2:36:0c:
b0:35:01:da:d4:94:ba:ff:84:51:35:33:dc:61:3f:
6a:ff:84:d6:62:33:d3:e7:0b:1d:60:c3:11:d4:fa:
64:30:0d:f9:f6:e1:ae:93:c8:6b:51:ed:a3:94:ca:
d5:04:e3:4f:f2:9f:af:aa:c6:d7:2a:62:9e:16:71:
24:85:a5:86:de:26:56:de:fb:16:b7:5e:93:ed:0c:
91:a5:8f:d5:7d:49:2f:fb:a5:e2:c2:07:ea:98:31:
c7:07:f1:89:96:66:97:0d:f5:60:2c:0e:7f:4f:f7:
13:de:35:50:73:09:1a:05:4d:54:1c:af:a4:13:b6:
37:14:cf:11:87:9d:c7:21:60:c6:6d:51:79:11:d5:
56:b9:a7:80:15:ab:ff:5c:9c:82:48:f2:22:3e:0b:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:C6:6A:06:2F:28:FF:5F:40:0E:59:B2:F4:6E:8C:0C:0C:AD:F9
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/jU_GagYvKP9fQA5ZsvRujAwMrfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.72.0/22
195.142.152.0/22
195.142.184.0/22
195.142.192.0/22
195.155.96.0/22
IPv6:
2a01:4c20::/29
Signature Algorithm: sha256WithRSAEncryption
39:9e:2c:2a:c3:c8:af:f0:1c:81:52:62:9e:9b:e9:5a:4f:35:
55:1c:38:51:f9:e3:9e:2b:11:04:20:27:42:93:0d:c7:6c:31:
1b:b7:cc:3f:8f:4f:30:d8:94:fb:78:8a:fc:5e:52:39:e2:19:
66:b4:4b:ee:d7:5a:da:1c:8b:ba:11:f0:85:36:96:cd:79:dd:
84:d4:cc:71:c8:1c:a1:74:20:3f:74:e8:3d:31:f2:0a:06:0a:
0c:8b:04:60:fc:a9:f9:50:28:ff:19:45:55:fc:58:08:a2:43:
5d:9a:38:da:94:9e:20:26:64:f7:50:1d:c0:55:1f:0c:8d:5c:
2a:7f:61:30:da:5c:da:50:fa:0f:d8:83:12:f5:ac:da:43:4a:
34:7c:de:f2:aa:bd:4a:65:e9:68:95:59:7c:5b:11:75:54:94:
cb:d4:9d:f8:cd:c8:3a:c2:57:5b:d1:48:be:f0:cb:49:40:cb:
c3:46:56:6a:73:83:51:60:be:70:4b:5b:0c:db:43:7e:58:82:
26:9d:01:8a:83:48:b0:d7:15:b5:b8:25:61:81:94:4e:f1:d6:
94:af:7d:5d:a4:a7:67:f9:3a:f4:50:82:d1:6e:e1:cc:c5:db:
db:55:51:fc:d0:33:93:f9:38:27:a1:54:35:d4:38:a4:10:eb:
df:48:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:22:37 2025 by rpki-client