Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/JrcsTpz1dvaMzwCbQQlDPHCnLRs.roa
File: JrcsTpz1dvaMzwCbQQlDPHCnLRs.roa (raw, json)
Hash identifier: 9L+CB8+vQTIsEppQvmj7RHPiLhNybCTLAI6+9UXAx48=
Subject key identifier: 26:B7:2C:4E:9C:F5:76:F6:8C:CF:00:9B:41:09:43:3C:70:A7:2D:1B
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 018CC49359CF58CF772C5863FBDA96DE669C
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/JrcsTpz1dvaMzwCbQQlDPHCnLRs.roa
Signing time: Mon 01 Jan 2024 10:30:40 +0000
ROA not before: Mon 01 Jan 2024 10:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8769
IP address blocks: 185.121.28.0/22 maxlen: 22
185.40.184.0/22 maxlen: 22
185.254.132.0/22 maxlen: 22
2a06:9c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 10 Jan 2024 14:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:59:cf:58:cf:77:2c:58:63:fb:da:96:de:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jan 1 10:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26b72c4e9cf576f68ccf009b4109433c70a72d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:0e:af:5f:54:16:86:32:b5:22:68:03:49:
9c:ea:ff:e9:41:ad:ab:e0:18:06:46:3a:ca:d1:a2:
fe:52:66:16:81:30:14:c2:e7:eb:06:a7:4d:2c:dc:
bc:03:f4:c7:73:05:d2:79:19:16:4c:a0:69:34:ba:
a9:5b:22:35:6f:e3:35:33:18:9c:b9:5b:73:c3:c5:
05:bd:f1:53:79:b8:ac:56:f4:0a:e5:09:9f:85:15:
63:7a:0f:d1:4d:bd:3d:21:52:49:28:d6:83:14:8f:
3b:85:86:5c:3f:a8:ba:c3:f9:cf:9d:b1:63:03:42:
10:a4:d1:1c:6b:47:fe:40:88:e0:cc:c6:9e:f8:54:
14:6f:0b:53:d8:28:25:c6:6d:80:c8:0f:75:19:86:
01:df:cd:a2:88:78:42:8a:78:ac:6a:9c:02:6a:24:
16:ac:ac:d9:39:ed:f0:3c:b8:a7:da:c6:96:6b:6b:
9a:85:3a:cd:65:7b:9b:5b:5e:47:24:c0:e0:b1:bf:
ea:67:5f:5e:3b:68:81:28:f7:9d:43:78:1d:eb:eb:
e7:0a:88:d8:48:3c:4e:f5:0c:c7:7f:61:4d:31:81:
cc:55:f6:ef:71:7b:d0:f0:d4:59:4c:10:ee:2f:e3:
fe:a7:58:a6:5d:61:cb:1f:1a:1f:3f:5b:50:66:2e:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:2C:4E:9C:F5:76:F6:8C:CF:00:9B:41:09:43:3C:70:A7:2D:1B
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/JrcsTpz1dvaMzwCbQQlDPHCnLRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.184.0/22
185.121.28.0/22
185.254.132.0/22
IPv6:
2a06:9c40::/29
Signature Algorithm: sha256WithRSAEncryption
a2:6c:77:f1:91:d2:42:3f:db:4a:8b:cb:dd:b4:82:fa:0a:3a:
4b:06:22:07:ea:eb:12:a3:3c:1e:3e:ce:a1:4c:e6:77:58:8d:
7b:f4:88:a1:4d:16:08:d2:92:47:77:9c:2a:be:27:4b:5f:8e:
43:a8:95:46:c0:f1:16:0c:93:50:1c:67:f7:18:7b:a9:d4:48:
52:f6:8f:e1:54:09:14:fa:f6:55:63:84:71:6b:b7:cc:4a:b6:
d1:d5:63:fb:40:cd:ff:ae:1b:64:01:0f:b3:82:1d:03:a5:aa:
b3:a0:31:80:aa:31:13:0a:fd:a1:38:d9:3f:ae:3d:de:39:30:
5c:7d:10:64:87:84:c3:36:5c:e8:00:b4:7b:f4:37:83:97:90:
3e:0e:17:0b:39:04:e6:e4:35:d0:60:cc:4d:a8:a6:8c:e2:09:
f6:e5:14:a0:8d:b4:ee:c4:b2:ac:b4:26:66:d8:3d:21:5b:b9:
c2:6d:41:d7:58:e8:ff:39:49:8a:6c:cc:20:b5:1e:02:fe:56:
37:84:6e:91:b0:58:d4:0c:71:3d:50:7a:d3:81:51:f1:77:a2:
e4:62:9f:ca:51:bb:06:d3:14:e2:db:2d:4d:44:c2:12:81:49:
39:58:fd:38:66:28:9f:e7:ff:29:62:5a:65:8e:6d:cb:61:1c:
53:ee:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:08 2025 by rpki-client