Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Jhwj8UdUodsajAg1rMasvuZXptk.roa
File: Jhwj8UdUodsajAg1rMasvuZXptk.roa (raw, json)
Hash identifier: ABhbbGFCCZZ88aX6rI54crtBw3Ca4k8ia++YUrpix9M=
Subject key identifier: 26:1C:23:F1:47:54:A1:DB:1A:8C:08:35:AC:C6:AC:BE:E6:57:A6:D9
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 0193BB0191558212CFCD808A4D0C8E40238E
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Jhwj8UdUodsajAg1rMasvuZXptk.roa
Signing time: Thu 12 Dec 2024 13:14:22 +0000
ROA not before: Thu 12 Dec 2024 13:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 185.10.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:01:91:55:82:12:cf:cd:80:8a:4d:0c:8e:40:23:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Dec 12 13:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=261c23f14754a1db1a8c0835acc6acbee657a6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:3f:6b:fe:b2:98:f1:f3:4e:aa:56:d4:69:
ab:de:ad:f0:26:1b:70:fe:ef:22:8b:bb:e7:1a:b5:
b0:f1:f2:8a:36:08:3c:89:b5:b1:96:a8:84:85:43:
a0:9f:b4:78:df:bf:cf:a6:7d:4d:ec:ce:50:27:ee:
ed:13:da:61:b2:4d:7a:35:97:01:8a:1a:02:df:46:
9f:2f:c4:a1:ab:9b:97:85:ae:a3:a1:be:ff:82:00:
91:0b:37:eb:44:a8:de:c4:81:08:ee:8e:77:34:88:
de:af:04:58:82:03:27:51:78:3a:c2:1a:e3:a3:a2:
22:3f:4d:25:4c:b6:1c:f6:90:1b:ab:5e:b0:0d:40:
5d:81:87:c3:cd:56:d2:7a:bd:44:4f:7b:d7:b8:5a:
f5:24:30:fa:dc:23:ed:76:3c:cb:16:8a:62:5e:14:
f5:63:59:ed:5a:68:48:61:80:36:65:a0:ae:96:0f:
80:75:7e:ff:80:c8:ed:73:bc:da:12:55:bf:12:6c:
f9:a7:7c:69:da:15:f6:aa:b2:c5:10:b9:59:f8:bc:
77:7f:35:9a:1c:5f:41:7d:46:17:95:83:16:b5:2f:
a8:94:e5:8a:e6:75:18:dc:3a:d1:e6:ab:86:7f:3d:
ee:c9:c1:86:29:50:14:c4:ad:9d:d2:67:c7:bb:7f:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1C:23:F1:47:54:A1:DB:1A:8C:08:35:AC:C6:AC:BE:E6:57:A6:D9
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Jhwj8UdUodsajAg1rMasvuZXptk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:4e:51:d2:6c:ba:b1:f3:bb:d1:13:1e:23:48:87:8e:8b:c7:
92:ad:a4:5a:a9:18:b1:be:b0:b8:14:b4:f8:66:3d:da:04:eb:
78:2c:c6:46:87:ff:5a:bb:e8:d8:f8:30:f2:8c:d5:58:1a:6e:
32:85:80:8c:18:f8:40:5d:7d:5b:cd:39:45:1e:c4:aa:62:d9:
ad:d1:cf:2e:d4:98:f2:5e:8b:ed:26:60:d2:d7:3f:1a:43:96:
19:5f:8f:9b:a1:39:4a:eb:73:9c:e5:c8:34:26:a0:66:fa:b8:
81:59:d5:c3:73:76:c2:1a:b3:a1:3e:36:2c:26:49:31:fe:d4:
d5:a8:c7:aa:b7:05:cc:4c:e2:0c:bf:ae:a7:09:bd:a8:43:96:
a7:7d:65:66:d8:4e:09:8f:24:a7:49:98:06:56:62:a2:91:ca:
fa:38:37:66:d2:a5:9a:45:28:27:58:8e:1f:43:df:26:a2:50:
50:c7:31:c7:af:9e:c0:3c:f4:98:5e:a8:33:cc:45:bf:9c:51:
dd:3d:f6:6b:b0:ad:08:f9:b4:1f:06:00:ba:df:29:8f:e0:17:
89:a5:9c:7f:2d:2b:d2:b1:59:d6:af:65:b9:52:58:8d:5b:23:
62:63:f2:4d:00:7d:74:1a:cc:71:25:cd:95:53:dd:f8:09:d6:
0f:7e:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:00:50 2025 by rpki-client