Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JQzjyNrc1yU-RT6yJk_9CWFwF_E.roa
File: JQzjyNrc1yU-RT6yJk_9CWFwF_E.roa (raw, json)
Hash identifier: s6/cTvVIxnQi+TAEhus30GTAmBk5ajJ5JadWpSW1Bog=
Subject key identifier: 25:0C:E3:C8:DA:DC:D7:25:3E:45:3E:B2:26:4F:FD:09:61:70:17:F1
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A39ED7E944E6BABEB6E29300E24EE
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JQzjyNrc1yU-RT6yJk_9CWFwF_E.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400395
IP address blocks: 37.128.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Apr 2024 02:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:39:ed:7e:94:4e:6b:ab:eb:6e:29:30:0e:24:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=250ce3c8dadcd7253e453eb2264ffd09617017f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:e6:83:2d:59:6d:b3:5c:67:1e:c5:de:97:
c5:37:99:3a:93:0b:51:d2:d4:73:df:92:a3:4c:ff:
e7:87:57:c0:5c:01:65:c6:07:02:56:f1:f7:5a:5b:
2f:ce:5d:0c:42:cc:d3:58:be:d2:cb:fa:51:8d:8a:
11:fe:6d:79:40:02:37:2b:e8:80:fa:30:3b:7c:00:
81:6d:c6:e4:d8:62:ac:42:3c:5d:dc:98:42:3d:6f:
e1:4f:94:13:e8:5b:b4:54:33:fb:bf:b1:bf:75:16:
84:60:e2:8e:33:04:a9:48:76:89:73:c3:2e:f0:03:
a7:68:9f:8d:88:65:30:0f:c9:49:90:3a:70:d9:07:
77:e1:4b:11:c0:66:79:b2:88:d2:c7:b4:63:23:15:
fb:fe:c7:4e:8a:85:7b:b4:83:cc:19:78:42:2b:5a:
64:bf:44:98:dc:33:30:3f:50:e9:28:74:c3:e7:33:
e6:45:4b:45:d3:71:c6:2d:0a:13:4f:f6:a3:44:ac:
e1:87:70:74:a1:5b:40:fb:74:3a:37:cf:c0:3a:ee:
f0:97:7a:a8:c4:08:6b:73:5d:20:f3:81:3c:41:81:
e6:92:a7:b5:6b:88:68:11:6e:de:7b:e0:04:39:5f:
df:6f:35:88:e8:cd:be:56:ac:49:ef:f5:7d:37:25:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:E3:C8:DA:DC:D7:25:3E:45:3E:B2:26:4F:FD:09:61:70:17:F1
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JQzjyNrc1yU-RT6yJk_9CWFwF_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:fd:86:84:a8:ac:73:fc:a3:90:c2:f5:cd:d3:71:62:2f:34:
43:23:ee:87:63:7b:ec:4e:a4:57:c3:5b:52:0f:7e:0c:dc:34:
b1:4f:d8:6a:e4:9c:3f:08:92:9a:d5:6b:e0:94:f7:63:6e:0f:
b5:f1:7c:25:83:dc:e2:66:62:04:66:90:b1:08:e4:0f:cf:e3:
7a:e3:04:4d:55:31:fb:60:0f:10:a1:5c:1a:2f:fe:d2:31:23:
61:64:79:ef:5e:6b:d3:4c:43:fa:db:a5:27:62:95:1a:9b:2c:
e6:5d:db:65:2c:a7:ce:c3:d9:8b:6b:ac:95:a9:dd:4d:c9:fc:
3c:de:66:c3:40:03:9d:a7:31:a7:0c:bf:d4:b7:ca:a8:bc:f0:
87:75:21:01:b9:26:1c:91:93:f4:0e:12:f0:03:24:e2:d2:32:
9c:5a:43:e2:20:89:ad:63:e3:e2:4e:bb:05:91:aa:2f:e3:e5:
e8:73:59:2d:38:e4:62:8b:4e:e1:c5:65:c7:b2:a0:92:31:2c:
6b:ec:60:3a:c8:a8:83:5a:ca:df:67:f3:c6:65:72:60:3d:6a:
fe:9d:66:f3:48:c8:ca:74:ca:75:c8:19:68:30:19:a2:ec:23:
9c:74:05:48:fc:71:9d:13:c8:fe:92:2b:18:77:c3:fc:f9:0b:
94:f6:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:55 2025 by rpki-client