Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/jKvU-yix6l17H2K79GReLCILDOQ.roa
File: jKvU-yix6l17H2K79GReLCILDOQ.roa (raw, json)
Hash identifier: LOjPTTEGZzqYHzskV5m9jpzsQCuwACBD+HUx4OqtM8o=
Subject key identifier: 8C:AB:D4:FB:28:B1:EA:5D:7B:1F:62:BB:F4:64:5E:2C:22:0B:0C:E4
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 018CC801857E3412A40B9070B3909E4771F3
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/jKvU-yix6l17H2K79GReLCILDOQ.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 185.132.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 18:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:85:7e:34:12:a4:0b:90:70:b3:90:9e:47:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cabd4fb28b1ea5d7b1f62bbf4645e2c220b0ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:9f:7d:24:ec:40:2a:09:e6:d9:eb:6b:9b:
a6:e5:27:98:40:dd:e7:00:10:a1:41:ff:99:43:6e:
aa:14:32:b9:83:0e:e5:9e:dd:2d:a0:2d:f4:24:fb:
3f:29:b7:aa:7d:90:8d:14:64:af:9e:b8:11:43:52:
34:d3:b4:ba:87:bb:79:a5:7b:78:29:24:00:8d:c0:
32:96:86:8f:8b:f3:b8:5e:71:51:a0:fc:6d:17:53:
2d:41:3e:87:30:7d:5c:ac:30:f8:e5:d5:0f:1b:7c:
18:88:9f:ac:6e:e9:b1:24:05:28:87:45:f6:51:3b:
30:ae:3c:8b:d4:80:0d:17:c8:a3:15:01:83:1e:b8:
ee:4b:ff:0c:45:ac:cd:10:7d:e8:9e:fa:d1:70:4b:
a1:8c:06:ed:ce:1d:d2:a2:76:f0:8d:fa:a1:35:ca:
51:1e:a7:93:54:4f:2d:1c:99:52:50:96:d0:6d:e6:
d5:7a:a7:98:20:d6:5d:12:e5:80:27:9c:08:ee:6e:
e1:00:fc:cc:1c:a3:0f:fb:6e:e1:0d:40:19:da:99:
64:51:51:45:54:21:24:7a:43:4c:d6:85:b5:9d:4f:
94:90:d3:c7:e8:48:83:7d:f9:25:45:d1:01:e3:ab:
89:08:e4:61:0f:9e:b1:ca:f5:b0:19:73:6e:6b:be:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AB:D4:FB:28:B1:EA:5D:7B:1F:62:BB:F4:64:5E:2C:22:0B:0C:E4
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/jKvU-yix6l17H2K79GReLCILDOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:18:90:ce:53:8c:9a:29:83:03:b4:df:65:a4:81:8e:b8:bb:
64:b5:45:a9:c3:1b:65:2f:ab:e8:08:92:19:3e:a2:f8:c6:1f:
c7:3b:2e:85:3d:89:8d:c8:5f:14:76:d9:89:18:3f:d1:6c:ae:
5e:6a:c0:28:5e:bf:05:e9:09:25:3a:00:60:38:2b:dc:c9:84:
62:71:bc:04:a9:8b:46:27:e6:2b:7d:02:3a:9d:06:c3:1f:34:
d9:13:70:a3:af:03:77:3b:43:6a:0a:8a:0d:b9:56:a5:de:45:
3f:42:d0:3e:79:e7:d0:5e:c0:b2:c5:ec:c1:94:d1:37:70:05:
8e:ea:88:d8:81:12:6f:7c:1f:08:3a:8a:b1:2a:26:4f:b9:49:
ab:78:25:28:bc:ff:06:f2:36:2f:ef:77:b2:ce:94:b7:1f:e9:
43:a3:1d:b8:60:e2:1b:52:46:ae:96:f3:08:0c:36:b7:9f:56:
ed:b6:4f:fb:f2:0b:ed:b4:15:55:53:e8:94:9d:6c:3f:68:ce:
17:61:cf:54:0f:a6:5b:42:63:3e:d7:dc:32:72:33:61:b5:20:
ef:27:11:aa:58:d6:0e:5b:e1:c2:89:5a:74:ab:9a:9e:ca:c1:
18:e1:2b:a1:5b:37:7e:6b:49:81:8f:67:0f:cc:2c:f5:3c:03:
ae:df:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:27 2025 by rpki-client