Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Jw_vfpmKyyoYc0o43uEKZodYDQs.roa
File: Jw_vfpmKyyoYc0o43uEKZodYDQs.roa (raw, json)
Hash identifier: VUf3jh3gEyyt4VbVVU1cKdIuZ8Z9iBcDOf961+FD1EY=
Subject key identifier: 27:0F:EF:7E:99:8A:CB:2A:18:73:4A:38:DE:E1:0A:66:87:58:0D:0B
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019518466A98AEB469A4C1D6054E40ECE8C5
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Jw_vfpmKyyoYc0o43uEKZodYDQs.roa
Signing time: Tue 18 Feb 2025 08:57:02 +0000
ROA not before: Tue 18 Feb 2025 08:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 00:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:46:6a:98:ae:b4:69:a4:c1:d6:05:4e:40:ec:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 18 08:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=270fef7e998acb2a18734a38dee10a6687580d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:28:c8:c1:d7:e1:f8:b1:ec:0d:03:41:e1:
f0:98:70:7a:47:81:fb:56:8c:ae:3f:e1:d2:00:47:
c1:60:ce:a7:1b:46:ee:f0:46:1e:13:38:95:a4:23:
a4:ae:00:62:c6:2e:b2:77:4b:11:eb:3f:5d:d2:ec:
04:5b:9c:96:4f:a4:11:06:53:ad:45:2d:88:02:1b:
2a:22:01:91:61:cd:50:9d:0f:c6:c7:4e:ad:ec:73:
cc:38:b2:a4:c1:60:7b:f8:5e:f9:e4:4f:49:34:ed:
2a:b5:83:78:b4:47:c6:45:02:c6:da:5a:5d:7d:26:
f6:e0:54:fd:ba:7c:40:c4:52:a1:69:c8:ce:b1:88:
37:d5:2b:f0:bf:a5:77:f0:ab:71:60:12:30:09:6b:
0a:f8:80:54:9c:51:de:0e:e0:66:2c:a2:50:8a:a8:
4f:5a:55:02:e7:41:f5:86:d4:a1:26:04:3a:91:16:
6f:c1:fe:11:c3:d5:1e:c1:7d:ce:cb:5b:48:ae:0c:
ae:2c:a1:5d:fd:6f:74:90:3b:a5:18:00:19:a9:a0:
98:56:20:26:08:a4:48:af:9c:ec:b3:7f:f7:1a:90:
48:b5:8a:ab:d9:a0:86:61:af:ab:51:07:22:b0:1d:
46:fc:03:3c:64:c9:7f:ca:e4:78:25:d7:b0:5a:84:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:EF:7E:99:8A:CB:2A:18:73:4A:38:DE:E1:0A:66:87:58:0D:0B
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Jw_vfpmKyyoYc0o43uEKZodYDQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:95:a9:bb:84:81:64:74:12:09:06:03:d3:6b:0b:62:b6:30:
e4:86:7b:99:63:bf:10:2c:f3:4d:67:1a:32:c0:14:a5:3c:a5:
40:8e:c1:97:89:20:37:93:d3:d0:a3:2e:38:89:f8:ba:e4:0f:
45:bb:46:6a:f1:f7:f9:41:54:3b:16:60:ad:a7:df:cb:52:12:
43:df:4e:4a:60:5e:34:82:4f:66:61:ff:3b:f8:0f:65:f3:dc:
57:6e:a2:8e:69:ee:7d:e1:5f:18:26:13:12:34:38:db:f8:09:
8c:cb:22:b9:22:fe:28:dc:01:a0:6b:21:3c:ec:7a:36:58:3f:
9c:dd:5a:85:a8:36:0d:51:67:28:f7:3e:f0:4f:18:46:79:20:
e9:64:c8:8e:d3:f7:1f:5e:dc:86:e9:a5:27:f5:8e:b3:bd:2c:
9f:6a:ad:8f:7d:32:ba:4d:88:ae:ac:25:62:ec:71:cf:8e:da:
57:bb:32:56:45:98:5f:a3:d3:d4:69:56:75:e5:1c:4b:44:0b:
bc:09:bf:28:80:d1:b0:bc:11:a4:da:9a:21:76:32:2a:7a:b3:
48:11:32:fe:b0:01:65:8c:56:58:6c:4e:75:3c:c8:2f:b3:71:
85:3c:02:6e:5b:87:23:a1:7d:90:17:c3:9b:dc:aa:e8:21:78:
f6:29:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:15:50 2025 by rpki-client