Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/JuM0KFdUmKvro-tygZfaKzm4yL0.roa
File: JuM0KFdUmKvro-tygZfaKzm4yL0.roa (raw, json)
Hash identifier: hu6uk+j2QeptRze6Bid60tv+LbYlg1eyMs7iDg6GVrg=
Subject key identifier: 26:E3:34:28:57:54:98:AB:EB:A3:EB:72:81:97:DA:2B:39:B8:C8:BD
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 018CC4937F5D631FCFEB6E055B4D0504D7B5
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/JuM0KFdUmKvro-tygZfaKzm4yL0.roa
Signing time: Mon 01 Jan 2024 10:30:49 +0000
ROA not before: Mon 01 Jan 2024 10:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48954
IP address blocks: 85.91.40.0/22 maxlen: 24
185.40.87.0/24 maxlen: 24
45.147.84.0/24 maxlen: 24
195.88.100.0/23 maxlen: 24
37.48.240.0/21 maxlen: 24
185.83.120.0/22 maxlen: 24
2a00:7640::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7f:5d:63:1f:cf:eb:6e:05:5b:4d:05:04:d7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e33428575498abeba3eb728197da2b39b8c8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:3d:40:30:5a:bc:a1:16:9a:20:b2:ca:74:
20:ca:b0:b4:49:56:0d:b4:d3:54:e0:75:74:d2:e3:
d2:2a:08:62:31:e2:ed:08:82:57:6d:eb:34:db:cc:
05:3d:b6:4f:ca:50:c9:8a:b6:d7:47:2e:eb:76:77:
83:7e:49:b1:8d:33:69:9d:8c:7f:c2:fc:75:34:c5:
bd:b6:70:ce:49:87:c9:22:bb:0a:12:f3:ed:c0:af:
4d:0e:49:a7:da:4f:b3:62:47:f4:a2:6b:68:55:42:
77:82:bf:cf:1e:5b:40:00:e2:71:ce:92:02:21:32:
40:40:71:98:f3:18:de:68:c3:92:36:cb:85:f6:25:
18:18:f5:18:20:14:78:31:e0:7d:8e:44:25:30:c3:
4d:4b:03:fe:17:83:ef:ba:6c:2d:8e:ae:40:b9:78:
37:ae:38:a2:9e:7c:ef:42:80:b3:df:08:14:3a:f5:
b7:8c:9a:a2:10:52:41:f2:c4:88:5f:4b:7a:1b:d5:
f9:e6:02:03:27:93:7d:76:61:d1:e6:0d:fa:dc:9d:
cd:ab:c5:4b:c0:bb:e8:65:89:64:74:30:f4:19:a3:
49:b2:6b:7e:fb:61:08:00:a5:9f:11:e8:46:23:ca:
fd:c9:a9:b5:cb:85:be:66:53:e4:70:6d:51:4d:72:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:34:28:57:54:98:AB:EB:A3:EB:72:81:97:DA:2B:39:B8:C8:BD
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/JuM0KFdUmKvro-tygZfaKzm4yL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.240.0/21
45.147.84.0/24
85.91.40.0/22
185.40.87.0/24
185.83.120.0/22
195.88.100.0/23
IPv6:
2a00:7640::/32
Signature Algorithm: sha256WithRSAEncryption
9a:ab:5e:76:79:a9:53:57:8d:df:c8:28:25:05:8d:f7:a5:f1:
a5:89:af:1e:82:3c:a9:bf:8e:31:1f:b8:16:84:fe:f3:48:0a:
de:b7:a1:f4:08:23:c9:2b:4e:29:0e:dc:36:7c:f7:bb:4c:f9:
43:99:20:e7:f1:55:8a:c8:cb:71:93:62:70:7f:42:06:76:75:
d2:f9:30:c5:42:b2:b9:b5:36:44:58:00:68:53:32:1e:a1:19:
c4:61:af:10:f8:c1:08:f5:1f:64:73:82:db:94:1d:5c:d6:8b:
89:8e:5b:3c:78:62:1b:a5:8f:ce:61:84:9a:64:17:df:91:38:
94:56:e4:a1:96:9f:69:dd:6f:5f:d0:be:7f:42:da:c4:e0:f2:
64:49:03:2a:ce:41:da:39:72:b9:9f:18:63:a6:0b:89:76:2d:
3a:c8:b8:7e:7a:a9:34:3e:3b:9d:fb:fd:01:b4:2e:b2:42:1f:
e8:31:34:21:fa:00:2e:44:e5:f9:df:fa:2a:52:d7:8d:0e:7f:
ab:96:7d:be:75:87:49:cf:cf:d5:f3:49:45:83:ae:2a:98:19:
14:eb:6b:13:10:d7:7d:d8:a2:ec:28:e7:3f:d0:01:2c:19:74:
1e:a5:94:d1:8d:d7:d2:7c:ae:40:5b:89:5c:dd:b7:d0:c8:3b:
a5:49:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:24 2025 by rpki-client