Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Ja1ETU-xrVld0zLb3mYCFn7pNx4.roa
File: Ja1ETU-xrVld0zLb3mYCFn7pNx4.roa (raw, json)
Hash identifier: ws1f7lJmsPGGQYhGHD1K7/A/ix6CKXUDWaUuiJ2ln/c=
Subject key identifier: 25:AD:44:4D:4F:B1:AD:59:5D:D3:32:DB:DE:66:02:16:7E:E9:37:1E
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0191C7340C5F3595D8A941B7B365B87B37E0
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Ja1ETU-xrVld0zLb3mYCFn7pNx4.roa
Signing time: Fri 06 Sep 2024 11:59:22 +0000
ROA not before: Fri 06 Sep 2024 11:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212487
IP address blocks: 46.8.219.0/24 maxlen: 24
109.248.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:34:0c:5f:35:95:d8:a9:41:b7:b3:65:b8:7b:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Sep 6 11:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25ad444d4fb1ad595dd332dbde6602167ee9371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:e7:fa:f1:51:fb:78:17:e4:b1:f8:fb:03:
15:a8:c6:2c:4c:aa:38:6b:b6:e8:32:35:6c:9c:9b:
e9:03:60:c9:2f:61:75:e9:e8:b5:2f:b9:6e:c6:61:
bf:f7:7a:56:e2:55:29:dc:0f:b2:aa:93:a9:50:c1:
7e:d4:8a:18:bd:a5:38:d8:b0:0d:a8:51:cc:f9:0a:
9b:27:15:25:db:39:16:bd:e1:8e:ad:48:19:7e:0f:
60:af:c7:bb:e9:84:66:f4:dd:31:84:39:c1:bc:13:
22:30:f1:e4:73:38:ee:6c:c6:8b:37:49:c7:41:0d:
55:bd:87:59:a6:c8:22:fb:d6:c3:2c:77:9d:ad:49:
96:c3:d2:2e:ec:f8:3d:11:60:3e:88:0c:c3:58:de:
ae:23:b1:a9:25:e5:ad:5b:3e:83:ee:00:e2:c2:83:
d7:dc:ca:32:55:3d:72:0a:dd:09:0a:78:ae:72:c3:
22:2a:85:1f:c8:e2:b4:f6:11:27:d9:c0:e2:26:7c:
15:52:24:80:36:da:ef:b9:6e:35:07:1e:3b:f7:f3:
41:a7:ae:ae:53:65:e7:83:8b:58:4a:e3:a6:dd:c7:
3e:1d:ab:7c:80:03:21:0c:c1:bc:c8:b4:6d:d0:0c:
57:38:cc:50:ae:2d:0c:1a:01:b0:fe:e9:fd:3d:70:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:44:4D:4F:B1:AD:59:5D:D3:32:DB:DE:66:02:16:7E:E9:37:1E
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Ja1ETU-xrVld0zLb3mYCFn7pNx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.219.0/24
109.248.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:31:c4:f5:c8:fd:53:47:f1:65:36:68:fb:ad:84:60:32:5c:
b0:cf:c3:20:fe:09:60:7e:96:ca:06:6a:66:7a:81:39:94:38:
84:ec:6d:63:e5:0f:14:df:c3:5c:de:e8:79:90:1c:48:dd:09:
af:8a:3a:fa:cd:4b:b1:7b:a7:99:c2:bb:43:87:20:19:6f:5c:
e9:39:3a:d5:fd:38:11:9f:35:25:0e:a5:4c:ec:11:3b:71:5e:
c4:b4:96:07:5e:d6:bb:ff:98:8f:3a:aa:d3:dd:1c:dd:ac:da:
5d:db:76:ba:2f:94:1c:18:58:da:2c:52:a5:8a:f9:83:39:cd:
52:6a:6f:8a:da:e0:9b:5f:f9:8c:cd:ac:bd:3c:ab:02:00:af:
35:39:5a:04:c4:45:62:e1:9d:ff:6d:5c:1d:6e:b9:3b:cf:d7:
23:04:29:3b:61:fa:84:c6:95:46:47:b6:9f:61:e9:9b:ef:37:
54:18:3b:d3:d5:81:d5:d8:68:99:dd:31:d9:43:65:3b:7d:df:
3e:f1:df:3c:35:0a:52:22:2e:ed:69:20:2d:5a:76:57:be:9b:
dc:bc:25:8e:bf:27:9b:6d:0a:17:18:f2:34:86:86:ac:ad:7c:
5f:72:d3:23:e0:0c:24:48:af:de:10:62:c0:ea:06:0a:22:fd:
28:0e:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:30 2025 by rpki-client