Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/JWd9drxkQf5dPdjNlyMVbY3u6gE.roa
File: JWd9drxkQf5dPdjNlyMVbY3u6gE.roa (raw, json)
Hash identifier: GMRw4fl+46mbENAEIcoKTWErGG68Qqpgov1pqLBTD5k=
Subject key identifier: 25:67:7D:76:BC:64:41:FE:5D:3D:D8:CD:97:23:15:6D:8D:EE:EA:01
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 018CC26CEFF92F8976D7A502C33A80114C9E
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/JWd9drxkQf5dPdjNlyMVbY3u6gE.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56694
IP address blocks: 185.217.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ef:f9:2f:89:76:d7:a5:02:c3:3a:80:11:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25677d76bc6441fe5d3dd8cd9723156d8deeea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:04:12:b3:9a:8b:c0:ae:b8:24:14:77:53:
13:8e:7b:cc:10:d6:f9:7e:5c:aa:0a:78:d4:10:1e:
d6:e6:4e:cd:47:af:e8:1f:c0:40:96:be:88:ac:2a:
e8:14:8e:ec:63:3e:78:e0:57:cf:e7:4c:2f:70:ea:
86:fe:98:c7:8b:28:ae:78:72:45:d0:8f:37:3b:39:
99:15:4a:8e:ed:f5:18:37:42:d9:8a:78:27:b6:c1:
ba:7b:0d:e6:59:24:69:f0:0c:0f:4d:73:13:00:22:
d0:8c:14:04:72:d3:61:0e:84:55:47:76:43:32:7b:
d9:5f:06:2c:d0:85:3d:b6:b3:49:e3:79:cb:13:d1:
8b:66:0b:cb:c1:de:f2:f6:35:59:c8:7a:bc:f8:d7:
dc:b1:a8:68:5b:20:c0:c7:d5:76:92:eb:34:a7:cf:
2a:1d:50:de:a0:90:9d:a5:b7:e8:6d:51:7a:38:82:
a3:39:42:99:ad:fc:27:2e:bd:0b:56:77:cb:8c:8a:
12:c7:cd:bb:60:38:1d:b4:13:70:34:19:fa:0b:00:
50:0a:97:9a:ff:27:fb:62:18:5e:78:5e:7e:af:14:
3f:2d:90:7b:7e:ec:c3:19:95:84:00:57:9f:d4:ce:
41:51:a8:34:8e:fc:ea:dd:00:17:2c:76:56:33:53:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:7D:76:BC:64:41:FE:5D:3D:D8:CD:97:23:15:6D:8D:EE:EA:01
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/JWd9drxkQf5dPdjNlyMVbY3u6gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:37:b1:7b:af:7d:29:2c:5e:54:ad:4c:c0:bc:c3:1e:ef:98:
38:2e:6e:a8:73:a0:b2:92:64:cd:c3:ac:80:d3:26:7b:d4:85:
af:d1:b4:32:3c:36:27:6f:b7:d8:67:01:d1:6f:1b:5e:5c:60:
c1:ed:54:79:ec:6c:89:20:0f:9e:35:3e:aa:c7:b5:d5:41:d0:
78:5d:16:c8:86:d2:58:94:5b:79:c0:9a:26:7c:8b:97:e3:7c:
2e:77:ab:82:0a:a6:3e:6a:62:4c:ab:0c:4f:2a:a1:47:c3:53:
b6:d6:92:48:61:ea:aa:c1:97:b5:8b:96:94:b6:3f:4b:01:56:
8a:69:23:63:85:f9:ca:24:e5:04:54:f9:ca:af:85:8a:60:76:
4f:ef:2a:a8:d1:81:0a:0f:f1:bc:85:b7:df:61:e6:18:28:8a:
77:66:3f:8d:d6:91:d1:ae:48:aa:d4:d5:65:57:bd:40:a0:5f:
c1:8f:8a:9c:76:ae:7a:b3:dd:20:9f:88:7e:0b:82:82:7f:15:
32:03:94:31:d1:f5:78:16:40:84:f1:09:63:80:37:47:56:f1:
7b:22:ac:91:e9:c1:8e:55:cf:c4:38:66:a6:ca:bc:f2:51:c9:
b3:df:0b:b9:70:f9:f5:a4:62:ab:5b:87:6c:16:c5:f3:e4:74:
79:1d:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:54 2025 by rpki-client