Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JvrZkov-y8PqdOCWUF7l8ScLlPk.roa
File: JvrZkov-y8PqdOCWUF7l8ScLlPk.roa (raw, json)
Hash identifier: VuVExnfrLf8qXgAETgVVA6FQotFFr1rRYlJA+ost9sI=
Subject key identifier: 26:FA:D9:92:8B:FE:CB:C3:EA:74:E0:96:50:5E:E5:F1:27:0B:94:F9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193DDFECEE7919FED285D477C6D559FA12D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JvrZkov-y8PqdOCWUF7l8ScLlPk.roa
Signing time: Thu 19 Dec 2024 08:18:04 +0000
ROA not before: Thu 19 Dec 2024 08:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 89.35.130.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
185.254.66.0/24 maxlen: 24
185.254.67.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 11:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:fe:ce:e7:91:9f:ed:28:5d:47:7c:6d:55:9f:a1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 19 08:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26fad9928bfecbc3ea74e096505ee5f1270b94f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:77:12:ba:7d:4b:ef:8b:6b:15:a4:0e:63:
bc:19:56:df:0f:f2:02:ba:c5:5e:18:14:7e:18:65:
6a:1e:60:10:49:2d:2e:cf:55:24:a9:5f:05:96:bf:
28:fb:4c:79:92:3c:3e:64:b4:be:94:2c:a0:70:ca:
c6:58:10:6c:b3:f8:26:78:ea:37:8c:a1:ab:7a:07:
21:07:dd:7e:01:60:54:8f:38:85:19:d6:d7:68:fd:
3e:9e:7a:58:de:80:f1:44:0f:79:9d:eb:d4:40:01:
78:6d:d4:45:9f:f5:f2:da:b7:5c:a0:2d:b8:6c:c2:
1f:1b:c7:34:4a:a6:5c:39:59:1b:db:a8:2b:04:e3:
54:98:cf:1c:50:04:15:e8:76:38:22:7e:1d:7f:cb:
e2:ba:02:78:eb:04:25:42:c5:99:ea:c4:cf:87:56:
c6:b8:38:a1:10:a2:05:e0:95:8f:30:43:5e:c0:b2:
2e:b0:83:a5:ee:2f:eb:89:91:c1:cf:35:1d:6a:15:
1b:9a:a6:d0:91:32:2a:c5:d2:a7:2f:f2:df:e4:08:
27:5e:4c:83:d6:d5:15:d5:c9:75:e4:df:8b:bd:83:
69:54:d7:55:96:c8:55:68:51:d4:db:1f:67:d4:80:
1d:e1:ae:8e:8b:a5:37:df:9a:7e:1c:a6:9b:82:94:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:D9:92:8B:FE:CB:C3:EA:74:E0:96:50:5E:E5:F1:27:0B:94:F9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JvrZkov-y8PqdOCWUF7l8ScLlPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
185.34.101.0/24
185.254.66.0/23
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
30:99:26:7d:b1:77:39:3e:fd:87:d5:a4:be:c8:6a:0b:18:3c:
b3:5b:a6:b8:d9:07:a3:bf:e1:a3:58:d9:7f:14:69:32:77:62:
16:63:a8:00:ed:93:f5:42:8f:4c:cc:0a:66:18:7a:33:1e:f4:
3f:75:e6:00:79:da:1b:47:92:e2:85:70:24:5f:e2:86:ea:2b:
14:3b:95:f3:8a:13:6d:0c:2b:89:c3:ba:2f:6b:32:0b:8b:b9:
2f:25:1f:62:4f:f3:1b:fd:d1:5c:61:c4:b1:94:e2:fd:ab:a0:
ee:8d:38:d3:ec:e1:26:57:d8:7f:be:c9:98:d0:08:e9:6d:75:
5c:a3:d5:8a:55:a9:16:52:a1:5c:c0:30:0b:04:5b:0d:29:85:
d1:36:ba:e0:97:fd:f9:1c:c1:e9:19:bb:2b:74:e2:39:56:4a:
00:fd:08:d2:f7:96:be:31:0c:3d:e7:5d:43:8d:11:17:ab:ad:
96:94:77:e1:a5:39:54:b1:15:ba:b1:20:f2:19:75:58:4a:bf:
20:84:fa:3f:40:0b:aa:f2:dd:9b:f1:6a:0b:cf:36:46:dc:7b:
7a:0c:3d:bb:4a:e2:16:d7:ea:34:e0:15:43:b7:53:c2:f7:1e:
46:f8:a3:31:5a:71:1e:d7:76:21:23:1f:c0:76:26:2f:8b:5f:
ec:c3:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:16 2025 by rpki-client