Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/iE_J5TR7yLawG_RBgmvBn_qOjfM.roa
File: iE_J5TR7yLawG_RBgmvBn_qOjfM.roa (raw, json)
Hash identifier: FjRqZAiYW4YRqA3uB4w/5c31fhdcldNFiQrhNXVKP6A=
Subject key identifier: 88:4F:C9:E5:34:7B:C8:B6:B0:1B:F4:41:82:6B:C1:9F:FA:8E:8D:F3
Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial: 018CC726E627988943749D2333207E00ED55
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/iE_J5TR7yLawG_RBgmvBn_qOjfM.roa
Signing time: Mon 01 Jan 2024 22:31:04 +0000
ROA not before: Mon 01 Jan 2024 22:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39766
IP address blocks: 89.185.192.0/19 maxlen: 19
185.14.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e6:27:98:89:43:74:9d:23:33:20:7e:00:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=884fc9e5347bc8b6b01bf441826bc19ffa8e8df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:06:28:ff:43:8e:6f:e9:c9:2b:67:cb:63:
04:9e:8f:1f:36:38:c2:24:3e:8f:6e:69:f7:ae:4d:
e6:da:77:63:03:5b:b2:71:f9:bb:64:43:2e:e0:51:
7b:2d:30:2b:e8:39:1f:96:44:6c:21:50:0f:9c:cd:
c7:30:c5:ad:6c:d3:ff:a9:3e:41:69:5e:27:97:01:
45:82:59:cd:a6:97:59:d9:d8:52:41:77:65:fe:cf:
1f:cb:27:da:b7:3f:b4:1f:d0:2a:d3:6b:76:e5:9b:
0a:fe:f5:43:20:ca:e5:ff:d0:f2:f4:f2:4b:27:4e:
f5:b1:c7:af:7e:83:19:75:4e:38:ac:d9:4f:73:65:
3f:61:96:bf:4d:56:4f:54:52:85:fb:45:c6:d3:98:
ab:57:75:d9:77:e6:06:66:dc:31:92:76:70:2a:b4:
8f:c8:f9:24:ed:b5:75:36:88:da:ec:93:91:aa:30:
8c:17:8a:90:69:bb:29:63:ff:9d:ae:9b:43:a4:74:
3a:35:6d:f8:8f:98:f7:46:45:bf:43:c6:0b:51:ee:
f7:d1:81:fa:b8:bb:50:3f:8a:a5:48:32:dd:14:ce:
8b:be:15:ba:32:5f:6b:e7:c7:b9:17:34:d9:dc:2f:
dd:ab:c2:ce:be:d9:d2:17:b8:20:e7:87:39:34:5b:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:C9:E5:34:7B:C8:B6:B0:1B:F4:41:82:6B:C1:9F:FA:8E:8D:F3
X509v3 Authority Key Identifier:
keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/iE_J5TR7yLawG_RBgmvBn_qOjfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.192.0/19
185.14.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c3:00:c4:79:dd:70:62:3d:f4:d1:88:98:1a:23:d5:13:67:
4d:6d:cf:40:0e:03:90:1f:72:26:7b:5d:60:00:e8:56:c3:47:
e4:16:a0:12:8b:d7:d9:96:f1:02:76:24:85:77:bd:13:2a:5e:
f3:df:b0:7b:7a:35:35:14:93:7b:53:2f:d1:de:ef:3b:12:67:
d5:9f:fa:34:ff:f6:39:d4:15:78:42:0a:57:fe:58:58:8f:33:
37:d6:77:d4:50:12:95:5a:64:8a:74:91:75:35:d9:c4:e3:dd:
7e:99:56:5a:b6:cf:3c:7f:54:29:aa:ef:98:2b:30:1e:07:95:
75:0c:81:6c:f2:9f:57:28:58:e5:d2:55:8c:7d:71:4f:a8:be:
b8:3b:af:0a:6e:b6:35:87:97:d0:41:53:7d:a3:3a:3c:50:5f:
e8:5d:d5:3f:98:c2:cd:86:0d:fa:82:2f:74:ad:e5:a2:37:20:
f5:b5:4c:80:25:0c:16:65:af:df:74:f5:c4:6f:ab:f9:31:71:
b1:b2:10:cb:a7:90:7a:f7:5c:42:f5:a7:ff:76:18:41:b3:b6:
4a:22:f8:5f:34:57:e8:62:a1:0b:42:0f:49:4c:2e:c0:f8:0d:
67:12:0d:a7:58:40:ae:c1:75:6b:17:df:df:92:d9:8d:61:51:
ba:5a:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:04:10 2025 by rpki-client