Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jOk2yognxc1Wii3Q80HNPyeQrEU.roa
File: jOk2yognxc1Wii3Q80HNPyeQrEU.roa (raw, json)
Hash identifier: wmI1P25T/q/lU+Qs/fFywPv5+ZmpNs/uEpUcLp8/qGI=
Subject key identifier: 8C:E9:36:CA:88:27:C5:CD:56:8A:2D:D0:F3:41:CD:3F:27:90:AC:45
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A59EB1546768AD5AD686C858FC08
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jOk2yognxc1Wii3Q80HNPyeQrEU.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209178
IP address blocks: 185.233.19.0/24 maxlen: 24
185.235.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a5:9e:b1:54:67:68:ad:5a:d6:86:c8:58:fc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce936ca8827c5cd568a2dd0f341cd3f2790ac45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:54:08:5c:b9:c6:c3:62:21:dc:27:1f:0c:
6b:34:69:ae:07:bc:e8:c9:29:0f:20:b0:a4:ee:66:
6d:3b:f9:5d:e3:ab:1c:41:79:2f:1e:ed:dd:ae:f6:
89:87:66:7e:61:d7:e6:22:dc:d8:d2:8b:98:9e:96:
ac:2d:55:1d:aa:bb:5f:eb:56:1d:1c:53:e7:b9:cc:
94:ea:b7:30:97:ce:07:58:07:77:32:da:24:77:7e:
44:27:73:05:99:39:17:15:ff:4f:dd:5d:f6:37:ea:
dc:44:4a:5f:35:09:4c:4d:17:b0:88:0b:67:8f:02:
32:b0:a2:a7:fb:ae:db:e8:05:b9:4b:71:bf:a4:36:
44:37:94:a3:e9:e5:ec:20:b6:a6:b7:e7:03:f4:4f:
e2:3a:38:e9:77:0b:3f:ee:b8:da:5d:da:c6:41:cb:
d5:f3:96:4c:25:3b:a3:d0:97:e8:5a:df:d4:f3:6f:
c2:16:77:30:f0:a5:ab:c9:78:17:56:aa:bc:8b:ef:
fb:48:de:e6:2a:cb:e0:7d:79:9a:02:e9:fd:1f:5c:
90:e1:26:10:14:07:15:a7:cb:33:41:46:b1:1d:0e:
34:c8:fe:2f:08:54:e0:6b:85:ee:2d:b4:1b:35:99:
6e:71:62:a6:27:9e:2f:60:ca:14:c7:9b:5e:67:da:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:36:CA:88:27:C5:CD:56:8A:2D:D0:F3:41:CD:3F:27:90:AC:45
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jOk2yognxc1Wii3Q80HNPyeQrEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.19.0/24
185.235.165.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e6:72:34:59:0a:8c:9d:ae:fc:bd:0d:01:f1:65:dd:44:88:
c6:98:8d:1a:10:a7:2c:05:66:dd:e2:fd:5d:8a:13:ff:37:de:
39:62:73:c1:c3:55:86:93:4a:af:b3:94:e8:4c:c7:79:6b:8e:
e1:13:2d:26:0c:df:c3:c8:40:d6:81:65:39:bd:a3:cd:32:96:
9c:c2:f1:ab:f1:ff:ee:b3:82:ee:fc:77:8b:ec:e2:51:52:5f:
5d:81:0f:ba:08:2f:90:da:ce:a7:ba:b7:42:00:f8:43:84:29:
b2:13:3f:c1:43:b0:0e:77:5d:4d:af:17:ef:54:18:89:02:6d:
a8:3d:28:50:a9:3e:32:77:bf:cc:b8:eb:59:bb:cc:59:4b:b8:
00:86:cc:d9:2d:4a:a8:65:bd:74:4d:20:24:70:7b:27:bd:a5:
a2:92:3c:b7:c9:b0:cf:cc:9e:8b:c5:ed:3d:df:34:45:16:e2:
c7:12:58:7d:af:42:75:cb:95:9c:25:d0:14:52:20:aa:11:cf:
0c:21:67:d3:6a:17:23:1c:63:8c:5a:6d:de:bb:49:1e:b1:84:
af:cb:08:db:4a:26:14:c3:22:65:80:66:91:1b:9a:00:9a:e8:
25:1d:08:12:11:fb:aa:76:a2:44:2e:7f:22:8f:3c:79:6a:02:
e8:7a:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:37:48 2025 by rpki-client