Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/5JUBUwxwE7-ZABK-3MC8K2fEWvQ.roa
File: 5JUBUwxwE7-ZABK-3MC8K2fEWvQ.roa (raw, json)
Hash identifier: DKf99lm9ah87d1z+cpE5jLRHR1sMpuulJqMnX7rA+fY=
Subject key identifier: E4:95:01:53:0C:70:13:BF:99:00:12:BE:DC:C0:BC:2B:67:C4:5A:F4
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 019268567371BA97CAE392A1AF4873717693
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/5JUBUwxwE7-ZABK-3MC8K2fEWvQ.roa
Signing time: Mon 07 Oct 2024 18:55:48 +0000
ROA not before: Mon 07 Oct 2024 18:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214087
IP address blocks: 185.184.30.0/23 maxlen: 23
185.184.30.0/24 maxlen: 24
185.184.31.0/24 maxlen: 24
2a10:ac82::/32 maxlen: 32
2a10:ac83::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 12 Oct 2024 13:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:56:73:71:ba:97:ca:e3:92:a1:af:48:73:71:76:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Oct 7 18:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e49501530c7013bf990012bedcc0bc2b67c45af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:33:54:46:12:82:be:e0:7e:22:c3:19:34:
b8:cd:0c:11:3f:4e:39:41:a6:e7:9f:3b:e7:76:49:
82:ba:40:d0:be:dc:75:d8:d3:05:9e:1f:6c:35:da:
3e:8c:c9:cd:68:9d:d8:a7:d3:90:50:71:88:b6:17:
47:a3:b2:b3:a2:b5:aa:0f:b9:2b:6e:c8:fc:39:ea:
17:f9:94:ca:8c:10:b1:f0:cc:33:6e:1f:c8:37:59:
2b:1f:1a:ab:b0:fb:f2:e8:5f:f5:7c:b7:4d:2f:2d:
f7:01:04:5d:e9:95:91:b8:02:f3:9e:66:b3:55:77:
15:de:59:cf:d0:4e:50:fc:31:7e:08:1b:9c:f3:2c:
3b:13:3b:15:e4:58:fa:25:49:43:23:3d:62:05:ce:
78:7b:6e:46:e6:6f:ab:20:59:b5:8b:c1:76:60:76:
5f:a4:25:56:4b:35:cd:a2:0a:83:a9:36:08:88:dd:
bb:64:f0:09:b9:93:19:ca:b2:3e:de:f3:fe:d1:13:
74:50:1d:1f:4d:b2:1f:00:d8:23:19:82:42:58:a1:
11:d1:0a:10:27:3b:d4:55:95:7d:7c:bd:f9:f8:40:
6a:e6:78:b8:ce:c4:a8:35:fa:ae:95:24:58:b2:dc:
11:8e:e5:6b:f8:be:ab:85:b1:53:3d:32:d3:e3:88:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:01:53:0C:70:13:BF:99:00:12:BE:DC:C0:BC:2B:67:C4:5A:F4
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/5JUBUwxwE7-ZABK-3MC8K2fEWvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.30.0/23
IPv6:
2a10:ac82::/31
Signature Algorithm: sha256WithRSAEncryption
88:00:65:ba:96:a0:3c:07:1f:be:a7:f2:f0:a8:ec:8b:88:9d:
5d:81:be:0f:2f:f5:2f:b9:22:cf:b9:2b:24:ab:81:f3:11:d2:
5b:a1:b9:41:35:8e:82:ca:1b:4b:5f:dd:fa:ff:f3:e7:1a:f2:
72:0c:d6:ee:e0:8f:e7:8a:7a:86:38:8e:45:ec:c7:d0:14:81:
6a:f6:ec:4e:0c:28:d0:73:c7:30:95:57:20:eb:e5:7d:94:d8:
ec:61:e0:5e:70:ad:3e:f3:d3:7c:34:dc:66:21:62:ba:a6:be:
0a:1d:07:23:8e:bd:11:49:47:93:8e:80:1f:16:ab:8a:7d:2c:
f2:0f:a4:a9:ea:ef:94:ac:69:f5:ce:ae:23:1d:7d:4a:36:44:
93:2a:f6:9d:2e:cf:7a:b0:4a:39:a2:84:4f:e5:53:34:dd:86:
67:18:bf:f0:1c:88:33:8c:8d:d9:f3:b7:60:c7:b7:9b:ae:c3:
ec:0e:45:62:ce:fa:d2:51:2d:3b:10:8d:6c:6a:61:dd:4a:08:
df:73:70:4e:31:85:99:87:6d:97:16:2f:32:c5:c7:6c:d5:1b:
2b:40:ed:13:b4:bc:8d:8d:a2:5f:0a:3e:28:d0:4e:e2:28:42:
c6:b5:99:8c:d6:af:02:26:dd:e8:7f:47:57:6b:fe:c4:8e:da:
e7:87:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:20:06 2025 by rpki-client