Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jQ-DZfA3gwwLSfHoF9RsrCSSgpA.roa
File: jQ-DZfA3gwwLSfHoF9RsrCSSgpA.roa (raw, json)
Hash identifier: a6lOJ9amaSqLhJ0cpi+yW7UAKh7rjG28bwZUcRmcWM0=
Subject key identifier: 8D:0F:83:65:F0:37:83:0C:0B:49:F1:E8:17:D4:6C:AC:24:92:82:90
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193F879B2913B0925A9B4C323FE15D349FE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jQ-DZfA3gwwLSfHoF9RsrCSSgpA.roa
Signing time: Tue 24 Dec 2024 11:42:25 +0000
ROA not before: Tue 24 Dec 2024 11:42:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 185.34.101.0/24 maxlen: 24
185.254.67.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Dec 2024 10:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:79:b2:91:3b:09:25:a9:b4:c3:23:fe:15:d3:49:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 24 11:42:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d0f8365f037830c0b49f1e817d46cac24928290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:f1:96:6f:57:15:03:c3:b4:ca:08:ec:54:
c2:6c:3c:c9:8d:37:82:ac:de:d1:9d:b0:15:45:f3:
1f:3c:83:1f:5a:b1:63:27:f4:62:c8:b8:06:e1:02:
6b:e9:1c:49:b5:0d:54:53:38:c6:40:42:45:2f:cd:
1e:b7:f4:5c:22:dc:8b:d3:8b:e2:20:06:9b:dc:80:
1e:d7:f6:63:4a:0b:30:fd:e5:2e:cb:e3:9c:c4:8c:
5f:0a:7f:04:07:2a:37:3a:f9:92:e3:b6:c2:a4:30:
7e:12:11:6e:d0:c8:66:96:0d:68:a8:c8:aa:c8:28:
33:13:e7:75:58:53:7b:25:f8:ce:ca:f4:f3:60:0b:
f4:96:f5:78:c7:ab:83:f5:2e:02:b1:19:78:e6:53:
70:b4:9a:44:ef:4a:e0:46:ae:f9:b3:8f:f0:d1:bf:
43:82:3e:a0:3f:96:f7:8a:43:32:ba:5d:f5:5b:4b:
85:6b:de:f5:37:97:5e:df:d0:4c:84:c1:db:42:27:
97:ea:b8:74:57:04:43:04:cc:2c:85:8b:c0:8a:47:
fa:c7:65:f8:97:e8:41:7a:1f:dd:81:99:5c:f0:77:
28:f3:d4:b1:5b:49:a6:83:a0:40:df:52:ec:fa:a2:
12:37:9d:f8:40:e5:e7:4c:54:6d:70:c5:78:35:ba:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:83:65:F0:37:83:0C:0B:49:F1:E8:17:D4:6C:AC:24:92:82:90
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jQ-DZfA3gwwLSfHoF9RsrCSSgpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.101.0/24
185.254.67.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
66:16:41:4d:79:2f:9e:f7:1f:43:d6:40:3b:16:7c:a1:c2:cd:
8e:ab:6d:8f:7f:22:10:75:d0:ab:6d:f7:d2:58:7e:f2:ef:36:
7f:70:09:f7:71:d9:8c:9c:0e:64:e6:bb:cf:bc:d4:01:a6:60:
1c:8b:86:f5:b4:d2:ba:8a:be:5a:68:a2:1b:01:3d:6b:8e:c0:
74:99:11:a9:ef:61:30:2d:13:ca:2b:0a:17:66:70:f6:cb:2f:
d4:56:72:36:00:b9:5b:4e:55:23:26:e3:67:b6:fd:5a:0f:bb:
28:d4:59:f9:4e:f8:ca:bd:78:21:1f:e8:f7:db:ec:9e:71:fc:
85:f8:58:9b:06:bf:9f:f0:b3:41:29:1a:a2:26:05:79:b9:9c:
8e:bb:b3:db:43:07:37:f3:30:15:4d:dd:ec:64:c2:bb:f6:94:
a2:5b:c0:97:d0:c8:03:d1:ae:34:41:9e:11:54:06:e3:fc:34:
ed:a8:e7:4e:c5:cf:54:b0:e9:58:11:94:6a:9a:5f:d1:81:55:
57:26:77:86:56:28:d4:56:5c:fd:87:37:68:80:f4:f4:3b:3f:
73:6b:e2:e3:bd:64:75:00:bb:31:00:49:85:67:16:b5:c3:b7:
93:36:62:c5:1a:69:18:45:1f:21:10:4e:01:41:72:5d:f3:e1:
90:24:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:42 2025 by rpki-client