Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/J86IaUnQcVga11_c8U6vXycn8Tk.roa
File: J86IaUnQcVga11_c8U6vXycn8Tk.roa (raw, json)
Hash identifier: k0dmUv57et6ExUhbE9x31CMLWLxuzGHyZ4+Jqx1hlfk=
Subject key identifier: 27:CE:88:69:49:D0:71:58:1A:D7:5F:DC:F1:4E:AF:5F:27:27:F1:39
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0192FAFA0350525DC3C41E3F3FF837776EA8
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/J86IaUnQcVga11_c8U6vXycn8Tk.roa
Signing time: Tue 05 Nov 2024 06:19:01 +0000
ROA not before: Tue 05 Nov 2024 06:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38195
IP address blocks: 85.203.24.0/24 maxlen: 24
85.203.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 06:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fa:fa:03:50:52:5d:c3:c4:1e:3f:3f:f8:37:77:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Nov 5 06:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27ce886949d071581ad75fdcf14eaf5f2727f139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:41:06:9a:03:8f:c6:e9:c7:ee:b0:78:d3:
43:cd:12:45:8a:c6:0c:5e:e2:0c:03:96:4b:45:19:
68:99:ef:e7:7b:48:0f:fe:44:8f:80:8c:84:e3:eb:
83:c1:70:5b:c1:57:a2:56:a4:8c:53:a6:ca:6d:2a:
38:1a:ab:24:40:6e:16:83:f2:94:eb:1c:9b:ea:0c:
e6:d6:5a:05:8c:9d:b7:09:7a:14:5b:a4:4c:34:6c:
36:08:3f:fa:da:1d:aa:a5:30:8b:62:3c:78:cb:a0:
24:38:f0:1b:11:52:a7:a8:fd:95:23:c6:76:6f:9a:
69:e8:74:ea:96:fa:d1:ec:80:47:ee:06:7e:f1:da:
e7:f9:bd:61:cb:dc:e0:fc:fc:9d:25:5a:0c:e8:ba:
e1:f2:cd:16:ab:6f:2c:9e:22:4e:b4:0d:c0:c0:62:
72:c4:b3:b5:9a:b7:f6:b5:7e:75:e4:aa:dc:ac:b1:
e2:19:44:59:59:52:03:b0:46:0f:39:ff:41:0a:52:
f8:b5:73:04:70:28:db:b6:bc:8b:72:5f:a1:53:d1:
31:9f:3a:c2:51:ac:a9:96:4c:e4:33:f4:39:97:2b:
c5:15:32:27:c0:e5:08:6c:8b:37:10:5b:eb:b9:26:
21:6e:c9:e6:78:4c:7a:51:86:36:ab:8f:69:a3:1e:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:88:69:49:D0:71:58:1A:D7:5F:DC:F1:4E:AF:5F:27:27:F1:39
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/J86IaUnQcVga11_c8U6vXycn8Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.24.0/24
85.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
23:88:9c:a0:36:c2:b3:ae:26:4f:f8:ab:33:1b:12:5c:69:52:
77:88:74:10:6b:5c:61:a0:52:92:c6:3c:76:22:23:0c:0b:4c:
b6:f6:f9:16:5b:24:94:40:43:5c:b9:71:d8:33:69:d9:6c:32:
cd:60:02:a9:bf:eb:11:d3:a3:9e:72:46:6b:d7:67:59:85:95:
75:5e:87:80:a2:19:73:79:b8:33:06:34:09:d0:09:9e:ee:bb:
8c:ae:d4:aa:0e:9b:90:9d:40:7d:ab:a3:93:e5:62:a5:c6:c2:
bb:18:7c:55:6c:c5:04:2a:10:5f:ce:dc:ea:12:e5:e6:31:75:
24:8a:a2:60:30:2b:4c:f1:cd:17:48:06:6f:8e:cf:df:10:3b:
4e:50:a2:e1:5d:82:f8:31:bc:e1:0c:72:62:d3:c6:f1:8a:96:
56:d0:51:e6:cd:16:3b:da:45:22:d5:ac:be:9a:23:57:96:98:
ab:9d:25:15:cb:39:81:da:fb:ca:fc:ec:03:33:b9:f5:e6:3d:
6d:ca:2a:00:0f:52:7c:d2:c5:a0:a8:7c:4d:a9:2d:7e:68:ca:
df:c1:b2:1d:c3:16:89:3d:72:1c:28:4e:56:29:74:03:4d:3b:
fc:42:c2:50:37:c5:ec:10:d2:ef:cc:72:80:f4:06:b6:7e:ad:
6e:03:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:57:15 2025 by rpki-client