Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/joz9u9xNIEJh3ooo4pFBaG9wN5E.roa
File: joz9u9xNIEJh3ooo4pFBaG9wN5E.roa (raw, json)
Hash identifier: XLThcjI1aR7fwR+mjA8y61+dA33pToGlH/xQQ1cpSF0=
Subject key identifier: 8E:8C:FD:BB:DC:4D:20:42:61:DE:8A:28:E2:91:41:68:6F:70:37:91
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01901B6E575E5A0CF742D18842DF9006F120
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/joz9u9xNIEJh3ooo4pFBaG9wN5E.roa
Signing time: Sat 15 Jun 2024 10:25:34 +0000
ROA not before: Sat 15 Jun 2024 10:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205175
IP address blocks: 185.160.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 10:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:6e:57:5e:5a:0c:f7:42:d1:88:42:df:90:06:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 15 10:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e8cfdbbdc4d204261de8a28e29141686f703791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:e2:05:f6:70:c1:bb:aa:ec:ad:e6:c4:80:
07:18:77:57:f5:aa:1c:b8:d5:cf:c2:5d:49:4f:96:
23:52:d8:e3:cd:f8:cb:6f:14:47:e7:64:13:37:d4:
9e:ce:0a:b4:51:18:c2:87:34:71:7f:79:87:01:5d:
83:b0:7e:ee:e1:2e:29:2d:d3:42:43:1b:ae:5a:33:
a8:6c:eb:a3:73:16:94:f2:03:3e:c9:21:9d:32:03:
54:68:ce:ae:7f:55:af:69:9c:f0:08:ce:da:0a:b2:
d6:09:6d:05:aa:07:fa:86:a4:04:1a:a0:f2:29:9d:
51:3b:63:7b:6d:ae:4c:d9:16:c6:86:94:40:37:2e:
3b:9a:72:bf:b1:c3:9f:b3:62:12:48:91:df:99:44:
68:a7:e3:cb:44:15:f0:e1:6e:9c:ac:19:c6:95:58:
aa:10:95:43:01:91:ba:5a:f5:0d:f7:fd:94:8f:2e:
fe:8b:23:70:e1:7e:c2:78:23:24:16:dd:f8:4c:de:
5b:8f:3d:dd:28:2d:63:39:f9:de:d7:fb:78:a3:e2:
7f:04:0b:c8:31:a1:38:a5:3d:f6:9d:b6:f3:09:16:
85:e5:e1:4e:29:82:39:2f:e9:0b:50:35:7e:46:b7:
ee:34:72:17:e0:e3:18:02:8a:a4:78:e0:c7:b5:60:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:FD:BB:DC:4D:20:42:61:DE:8A:28:E2:91:41:68:6F:70:37:91
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/joz9u9xNIEJh3ooo4pFBaG9wN5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.193.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4a:f5:53:5a:7e:90:4c:8c:05:a1:6a:a9:b5:56:40:3d:d1:
44:fc:10:8d:46:da:e7:92:5a:56:b6:25:59:a9:be:e1:ca:da:
8c:64:d2:f0:44:55:cb:0e:03:2e:1c:44:16:3b:3e:17:4c:97:
e2:61:c9:f7:0f:30:31:22:10:6e:78:e3:2f:8b:dc:8b:25:d2:
f4:d2:9c:84:cd:e7:c1:cd:25:95:38:34:56:19:70:38:0a:44:
11:59:09:7c:66:8e:b9:79:33:92:ec:f9:a2:95:d4:f3:14:ef:
93:26:ea:0f:f1:f5:02:f1:e7:ff:67:60:c1:9b:7f:b9:13:3c:
5d:92:87:84:27:d4:1f:91:f9:a3:70:c4:c9:f0:61:86:67:d0:
20:66:d2:59:60:92:69:a2:24:82:39:65:3e:b7:cd:ff:c7:67:
ce:01:07:0b:9d:31:27:48:03:de:c5:24:79:3a:e3:88:5f:14:
91:20:a2:9c:34:59:40:63:93:c1:e8:96:e2:c0:9b:5b:6a:82:
5d:7a:b4:ff:21:bc:6b:6e:cc:09:67:52:77:da:df:38:ac:75:
97:a2:70:3a:03:94:d7:c9:0c:c3:2c:95:4f:40:49:2b:c7:36:
4e:9e:85:c9:1a:88:6d:45:ce:11:92:1f:9c:30:b0:9c:e7:8d:
8c:cf:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:26 2025 by rpki-client