Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JSXaQT5vq-hJcnstt0giFp3uYS8.roa
File: JSXaQT5vq-hJcnstt0giFp3uYS8.roa (raw, json)
Hash identifier: CezuL/WMqBDFVUrYr+iDIH9KKFcLeNDUwzXOqmUuY5Y=
Subject key identifier: 25:25:DA:41:3E:6F:AB:E8:49:72:7B:2D:B7:48:22:16:9D:EE:61:2F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B6D75C3F3713833D5735846A0236
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JSXaQT5vq-hJcnstt0giFp3uYS8.roa
Signing time: Thu 02 Jan 2025 17:53:33 +0000
ROA not before: Thu 02 Jan 2025 17:53:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 08 Feb 2025 08:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b6:d7:5c:3f:37:13:83:3d:57:35:84:6a:02:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2525da413e6fabe849727b2db74822169dee612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:28:9e:05:2d:6c:54:dd:60:5a:13:12:7c:
b0:dc:5d:8c:01:e0:d5:80:30:93:25:18:41:5f:3e:
91:67:6a:9d:bd:59:2a:2a:2d:5f:a2:04:b9:ef:d5:
d4:63:72:8e:77:90:90:d4:97:b7:01:0b:78:42:e0:
45:96:8d:b8:64:c2:62:dd:fa:89:76:f8:8f:0e:a9:
00:4c:4f:4e:ce:76:db:af:92:b8:fa:24:80:2f:24:
10:8a:fd:94:ec:6e:0a:c4:d8:f4:e0:18:ed:93:9a:
a1:ee:3a:e8:56:71:4a:80:fd:31:64:68:d9:fa:a3:
cc:cf:8d:0f:c0:86:46:0c:f5:a0:a8:d0:de:fb:39:
ee:87:52:67:07:45:4f:c6:67:4c:a1:f1:52:fd:a4:
55:2b:59:e5:82:7e:ab:5b:73:a3:51:d0:2d:84:f6:
9f:0b:67:02:9e:51:ac:d2:aa:5f:e0:25:21:47:f5:
58:ce:7e:d9:6b:77:02:2a:d7:ad:fa:f8:68:6b:14:
26:ce:1f:99:67:2f:49:32:a9:33:56:b6:a5:12:29:
f6:1c:c5:39:9a:26:c2:29:76:a5:61:0a:08:0f:6a:
18:ee:f1:39:3b:16:c9:a5:82:af:7c:54:ea:e3:20:
2c:c9:7a:a3:60:e7:f3:40:ca:95:39:24:ca:64:68:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:DA:41:3E:6F:AB:E8:49:72:7B:2D:B7:48:22:16:9D:EE:61:2F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JSXaQT5vq-hJcnstt0giFp3uYS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.184.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:65:77:22:22:7a:b7:56:24:c7:3d:ff:48:12:9a:af:db:98:
0a:2a:f6:62:f5:a4:e9:b7:54:a5:57:ab:e5:a2:a7:59:6e:c3:
ad:98:c7:e7:af:c1:04:c8:8e:09:04:28:69:af:98:6e:3b:45:
47:5c:d8:df:0b:75:ec:cb:e5:47:7e:7a:07:5c:9f:66:0a:64:
02:f4:3b:9a:37:fd:8f:0b:2d:03:de:96:ab:a0:b6:bf:75:49:
f0:e6:7a:e7:9c:cf:92:33:0e:99:23:98:26:5c:08:ba:80:2c:
49:79:7d:25:10:08:d9:e8:4d:41:98:50:a4:ce:d1:19:58:2a:
f2:fd:6b:59:51:d7:dc:38:a8:b0:b2:2f:54:d2:b9:7f:ab:7c:
ac:05:8c:dd:7a:84:c6:cd:f9:73:3d:72:1f:34:95:b4:63:d8:
89:96:c0:1d:50:b8:e6:8a:47:69:a7:97:83:c5:ba:7d:12:56:
e9:0b:37:71:da:97:96:f4:9f:67:35:b6:2b:8f:21:09:a9:39:
5b:f1:17:26:cf:a9:c2:9f:99:cd:a3:e2:4d:e1:60:b4:84:fb:
6b:0a:b3:b5:53:ad:d8:9a:33:23:ad:65:0a:95:8c:9c:24:8f:
90:e1:bb:08:ed:9b:e4:80:d7:8f:ff:d9:a6:09:b8:67:a1:7b:
cd:fa:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:49 2025 by rpki-client