Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/JG6ASI1crVdAxoeCqZRMuy69v0w.roa
File: JG6ASI1crVdAxoeCqZRMuy69v0w.roa (raw, json)
Hash identifier: 3pJ6eoN2EHiVjIm7036TRrl2+7/v2m5H4ptxvxB6xQ0=
Subject key identifier: 24:6E:80:48:8D:5C:AD:57:40:C6:87:82:A9:94:4C:BB:2E:BD:BF:4C
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 0193DEA56F25E607B4246D63723035583454
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/JG6ASI1crVdAxoeCqZRMuy69v0w.roa
Signing time: Thu 19 Dec 2024 11:20:03 +0000
ROA not before: Thu 19 Dec 2024 11:20:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214525
IP address blocks: 83.219.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:a5:6f:25:e6:07:b4:24:6d:63:72:30:35:58:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Dec 19 11:20:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=246e80488d5cad5740c68782a9944cbb2ebdbf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:1c:02:ce:fc:91:9d:91:5b:1a:c9:a3:94:
fb:3b:b0:81:fa:0c:42:27:cf:c5:8f:89:92:7b:d0:
55:17:1b:58:94:86:c3:13:46:a9:6b:04:33:8a:f5:
a7:74:68:7d:53:1d:e2:84:b0:90:15:89:82:9e:8a:
dc:06:c4:5c:0d:39:b2:6e:62:42:b5:0d:2d:53:c1:
84:ae:94:21:d3:ec:d4:f0:b4:e9:02:ec:ff:1c:63:
12:37:68:f2:43:0b:e4:85:81:35:ee:3e:fe:46:dd:
3a:f8:fa:fe:68:a3:30:67:81:a3:13:bc:7b:e1:de:
84:ad:13:45:3c:41:93:28:9f:c1:a6:55:87:49:06:
a0:eb:e0:f5:e0:6a:75:c0:00:32:a6:ff:94:4a:a0:
e5:d8:a4:b1:6e:54:98:34:06:a4:55:cf:2b:a0:d5:
23:49:06:6d:37:59:31:ec:b4:46:58:40:59:8a:eb:
c6:45:87:78:52:27:86:a8:58:51:ee:bf:c1:88:1f:
2b:9b:96:be:f9:56:80:68:b2:1a:70:f9:86:2c:db:
f5:c9:58:70:c9:38:bb:75:85:7a:ab:95:6c:82:18:
84:1b:b3:08:63:db:1b:67:23:b7:39:0b:4a:7a:26:
0a:2e:6f:f2:92:f8:21:7d:81:c5:1a:36:2b:35:36:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:80:48:8D:5C:AD:57:40:C6:87:82:A9:94:4C:BB:2E:BD:BF:4C
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/JG6ASI1crVdAxoeCqZRMuy69v0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.251.0/24
Signature Algorithm: sha256WithRSAEncryption
24:36:12:d0:8d:f8:2d:64:03:f5:e4:e1:de:bb:a0:67:a3:49:
84:fc:f1:27:de:bf:69:59:01:17:e3:ad:a4:c5:54:ca:ee:b9:
b5:68:b8:77:56:95:23:66:cf:6c:11:fa:9f:a5:ff:fa:f3:e8:
82:df:52:ac:2e:f1:a7:45:4f:df:ea:99:93:7a:94:b9:77:7a:
6d:a0:b3:31:47:05:f2:05:32:74:b8:a5:1f:a6:80:3f:e7:f8:
20:b5:3d:82:9e:9f:16:dd:d1:6c:49:49:8e:73:7c:56:96:cc:
71:05:b5:88:bc:2d:34:ba:56:fb:7e:bf:3b:c7:18:2d:ff:76:
56:b4:fc:b3:6c:13:dc:d4:00:f9:7f:7d:60:f2:f7:51:da:f5:
a0:d6:64:fe:dc:23:91:a2:a3:b9:4a:d5:46:0f:fc:ba:07:c6:
cf:e5:58:8b:9e:82:34:cc:4c:c2:c8:52:3f:f8:a2:cf:cc:44:
05:9b:66:d8:5b:89:f1:cd:aa:34:d4:cc:7f:d0:91:52:7a:75:
f7:0e:d5:66:5a:11:e7:f7:f0:31:8a:94:67:2f:81:b6:b1:6c:
72:12:f0:bd:f5:24:56:0d:94:8c:07:fc:5a:04:5a:da:ed:6e:
94:ab:07:57:eb:e7:a1:08:8f:cb:c3:c3:50:b5:2d:9e:05:f8:
30:a0:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:46 2025 by rpki-client