Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/JBDZ5Omk-dFxCYBySxy03bWCSP4.roa
File: JBDZ5Omk-dFxCYBySxy03bWCSP4.roa (raw, json)
Hash identifier: Mi1MXsCOtN7hOmiWrHBSy05DtnpW+MAaQ+3qt5iOnkc=
Subject key identifier: 24:10:D9:E4:E9:A4:F9:D1:71:09:80:72:4B:1C:B4:DD:B5:82:48:FE
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B27260DB253E32F96B365C7723AB28
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/JBDZ5Omk-dFxCYBySxy03bWCSP4.roa
Signing time: Thu 02 Jan 2025 01:47:41 +0000
ROA not before: Thu 02 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 185.243.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Mar 2025 09:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:72:60:db:25:3e:32:f9:6b:36:5c:77:23:ab:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2410d9e4e9a4f9d1710980724b1cb4ddb58248fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:e7:d4:05:bd:3c:84:8e:b7:92:b7:33:ce:
e3:7e:b9:99:85:cf:10:7f:fa:00:36:0e:94:3a:6f:
1c:de:1f:c2:d8:3c:da:7b:57:f3:ce:b7:83:d3:33:
f9:79:8e:80:06:0d:cf:25:9c:02:62:7e:1b:75:0c:
bb:90:ab:06:a5:12:77:41:f6:c3:94:bb:53:cd:6c:
57:8b:8b:13:02:ee:e4:72:41:3c:fe:3c:5f:dd:3f:
51:7d:5d:93:c4:0d:0b:1b:e8:13:75:4e:4a:39:e4:
41:67:78:21:1b:13:7b:f0:7f:81:77:4a:b1:88:1c:
c5:99:d2:d5:45:40:69:e7:81:88:31:e1:8d:ca:19:
f5:23:9b:fd:e2:b6:0c:db:d9:43:eb:27:2e:aa:7a:
8d:28:30:19:09:09:4a:df:3d:76:76:82:ab:9b:30:
a5:d7:c0:57:28:bd:14:90:49:76:f8:81:d4:53:87:
5e:28:8d:94:6a:48:18:4f:b3:bb:87:08:02:86:01:
6e:16:8a:e2:81:fc:69:da:3b:09:91:7e:83:3c:f2:
81:b9:9b:ef:c7:43:e3:c4:d7:16:5d:ef:db:7c:ee:
63:0f:8b:2b:8d:b3:fd:f0:e8:aa:bb:94:da:fd:0d:
a8:f0:6a:d6:26:9a:8c:87:71:b5:e2:67:16:2b:39:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:D9:E4:E9:A4:F9:D1:71:09:80:72:4B:1C:B4:DD:B5:82:48:FE
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/JBDZ5Omk-dFxCYBySxy03bWCSP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.154.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:28:83:38:d0:5c:d4:13:78:7b:3b:b0:e5:32:c1:35:cc:3a:
1c:65:53:72:c0:29:e0:54:91:52:a2:c5:84:74:38:df:fc:95:
73:73:84:c7:60:22:73:64:78:0b:90:c5:18:ff:ba:47:b8:d2:
53:ce:62:f3:f4:42:10:38:d5:5b:43:89:3c:f9:b1:7b:ec:53:
7b:76:a8:1a:95:88:93:36:85:bc:92:f9:47:f4:b2:59:58:39:
b3:e7:d0:42:a1:87:c3:6c:25:bd:ec:55:b0:46:d1:8c:bd:a6:
d7:28:d8:08:ca:37:48:cb:d4:b1:bc:fb:6f:2e:b6:06:91:74:
de:b1:91:68:3b:7b:87:09:eb:0d:eb:75:d1:e9:70:18:aa:e6:
02:08:b6:97:7a:4e:bf:e9:08:59:6f:72:61:b1:71:e1:94:f3:
1f:db:d5:bb:0c:e1:c1:42:e8:90:42:33:8b:be:30:46:87:c4:
2e:f2:f6:da:86:d0:2b:76:fb:56:bd:a8:ba:a3:94:cd:15:fc:
69:6b:d4:97:a0:b9:8d:4c:8d:44:90:dd:65:da:6b:99:3c:44:
27:71:41:bb:bc:12:a5:68:14:ef:1f:27:bc:9a:0c:d5:90:d8:
4c:5e:67:a3:e9:09:b1:f5:21:75:8f:bb:6b:e1:bb:85:77:6b:
a9:e1:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 12:56:13 2025 by rpki-client