Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/jB0A87_tWzapTIjD89TilpVW07w.roa
File: jB0A87_tWzapTIjD89TilpVW07w.roa (raw, json)
Hash identifier: wvbpijOIOyNQ2iRNmHX0N4z6iv/o6p4QLFpOe+GrDWw=
Subject key identifier: 8C:1D:00:F3:BF:ED:5B:36:A9:4C:88:C3:F3:D4:E2:96:95:56:D3:BC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018FCE7E7F3D61C16FAE023EB829C5F046D7
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/jB0A87_tWzapTIjD89TilpVW07w.roa
Signing time: Fri 31 May 2024 11:52:27 +0000
ROA not before: Fri 31 May 2024 11:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209474
IP address blocks: 185.249.202.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:7e:7f:3d:61:c1:6f:ae:02:3e:b8:29:c5:f0:46:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 31 11:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c1d00f3bfed5b36a94c88c3f3d4e2969556d3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:90:b7:dd:7f:a7:28:5e:93:cb:42:22:11:
2c:8b:2a:69:47:09:91:8d:ea:b1:00:94:11:cb:04:
28:cb:68:bb:35:4f:eb:f0:b7:e3:72:fa:4b:ef:19:
f4:4c:4b:d6:8a:f3:0c:5d:2f:9d:68:a5:cf:67:77:
d7:ef:80:06:4a:0a:77:5f:8d:50:dd:76:04:f5:af:
b9:15:60:4b:bc:32:a2:a1:66:0c:52:16:b6:3b:d7:
c7:19:10:7d:ae:ba:8f:a2:60:11:b9:35:85:92:41:
23:f5:0d:5d:0e:f0:18:1f:b8:18:25:c3:ea:37:b0:
4b:32:21:d1:30:6d:8d:cb:cd:10:59:cb:c1:eb:79:
05:83:d1:9e:e4:d5:c3:d6:a1:1b:67:bf:a5:c1:ea:
58:49:e3:f3:91:50:d4:e0:20:89:8d:77:5e:71:03:
e9:f6:a8:c4:f6:58:bc:bb:ea:98:4b:48:d1:7a:7e:
4c:e8:0d:8f:3c:96:2a:fd:d3:86:0c:14:e2:9a:d0:
31:4a:b3:24:67:68:66:d0:8b:3c:4c:0d:b4:7b:11:
fa:6a:6e:d7:34:4b:d3:cb:b2:84:aa:1d:d0:4c:2e:
fa:11:dc:ff:8e:d4:8f:b8:dc:99:fb:05:be:18:08:
cb:a3:8c:d9:69:a6:8c:2b:f0:c1:59:27:e4:c2:e6:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1D:00:F3:BF:ED:5B:36:A9:4C:88:C3:F3:D4:E2:96:95:56:D3:BC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/jB0A87_tWzapTIjD89TilpVW07w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.202.0/24
185.254.239.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
87:46:62:55:ea:20:61:f9:3e:99:f6:d4:83:3b:29:c5:2d:10:
51:a5:ed:ea:d2:e5:bd:24:f7:02:ce:75:a8:66:c0:f0:29:76:
87:4d:29:74:aa:e8:cb:a0:57:40:12:9e:99:e8:98:b5:d4:f0:
3c:25:b4:69:e1:59:d7:9a:7d:a6:c1:3e:e5:e9:7d:6a:02:02:
1b:bd:e0:27:8a:1e:48:fa:45:d7:17:fa:89:ea:f7:bc:76:ed:
6b:22:01:a6:0f:e0:f0:38:bd:fd:16:6a:bd:da:8a:21:82:ae:
7c:c7:c6:a7:93:9f:64:92:d9:69:a3:70:49:f1:68:13:35:b9:
f1:54:8e:a1:28:d1:92:6e:13:f9:60:a8:fd:25:d8:05:fd:4a:
b4:bf:48:a8:5b:24:ce:e8:dd:a1:77:f6:4c:8c:d4:a8:45:1e:
f6:92:52:19:48:8e:26:64:23:7f:0d:b4:aa:da:e8:b1:88:9d:
7e:25:55:b6:c5:c5:bb:00:b4:cb:df:35:82:7d:89:2f:4c:43:
b3:be:19:b8:72:2d:0b:72:0d:9d:2d:2a:2b:c8:05:d2:9f:a1:
88:47:09:6a:14:11:ff:2e:2e:52:e1:ff:ea:67:de:52:47:26:
e6:31:ab:13:82:4e:6d:9c:58:b9:a0:4b:96:42:75:38:4a:44:
1f:13:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:36 2025 by rpki-client