Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/jFP88VKL7NSGt5_-2XUsRjTVoGM.roa
File: jFP88VKL7NSGt5_-2XUsRjTVoGM.roa (raw, json)
Hash identifier: G0SQIDixpodIJgbLsQPsExkTIr20yz4RWzPKWzMeBU0=
Subject key identifier: 8C:53:FC:F1:52:8B:EC:D4:86:B7:9F:FE:D9:75:2C:46:34:D5:A0:63
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0194CE858E0073333FDABE030E2D89BEE933
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/jFP88VKL7NSGt5_-2XUsRjTVoGM.roa
Signing time: Tue 04 Feb 2025 01:14:06 +0000
ROA not before: Tue 04 Feb 2025 01:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 85.117.236.0/24 maxlen: 24
85.117.237.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.73.200.0/22 maxlen: 22
185.73.201.0/24 maxlen: 24
185.73.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 09:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ce:85:8e:00:73:33:3f:da:be:03:0e:2d:89:be:e9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Feb 4 01:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c53fcf1528becd486b79ffed9752c4634d5a063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:b4:51:de:71:75:37:c2:d4:39:f3:82:02:
36:ea:59:8f:40:53:9a:fb:6b:aa:1b:1a:93:5d:e7:
61:77:87:a2:a6:0e:3b:b5:53:9f:ea:2d:06:c5:f5:
99:20:0d:f5:a7:7b:d1:61:fc:fb:9b:4a:ef:49:c6:
a4:fb:a8:93:0e:d5:5a:81:8b:7b:96:bd:13:6a:f9:
8c:c7:8e:ad:0f:97:da:55:a7:ef:f3:08:95:cb:dd:
03:7b:08:60:61:be:a0:0b:29:bf:78:73:44:0a:b5:
87:31:7f:13:89:5b:ee:b6:de:21:0c:67:b0:38:b6:
97:82:58:d2:58:9f:99:64:27:3d:ef:0a:b4:78:2d:
ed:e7:41:71:ec:9d:e7:1a:c4:5c:e9:09:1b:69:32:
b3:c5:d5:21:b4:c7:dc:dc:e0:8d:a2:84:71:bb:10:
bb:96:52:c7:08:71:0b:5e:35:6d:e7:90:91:26:95:
b2:b5:79:db:3d:fd:38:f0:5b:b9:f7:09:e6:bc:fe:
7a:ae:3f:88:24:e7:39:5f:95:52:94:12:e3:a9:f1:
37:0c:49:cd:3e:3a:db:cb:72:69:14:20:20:43:02:
92:a4:fd:8e:ad:d8:13:0b:97:0f:cb:e2:de:3c:36:
b5:88:d5:dd:61:b1:f5:38:09:f4:c3:bb:2a:a1:3b:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:53:FC:F1:52:8B:EC:D4:86:B7:9F:FE:D9:75:2C:46:34:D5:A0:63
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/jFP88VKL7NSGt5_-2XUsRjTVoGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.236.0/23
185.17.113.0/24
185.73.200.0/22
Signature Algorithm: sha256WithRSAEncryption
52:46:23:2c:ad:ff:4b:83:87:ba:95:1c:b4:1d:a7:04:ef:91:
e9:20:17:68:0c:6b:e1:b1:2c:00:33:61:4c:6c:ce:07:10:8f:
c0:35:95:ee:f0:5b:31:51:58:fb:fa:e4:4b:70:ea:f8:27:55:
da:6c:c5:16:bb:8d:fb:36:21:e3:07:f4:a8:b4:3e:f7:d8:e3:
92:0d:25:14:d9:e0:a2:16:f5:50:e1:fa:52:18:81:4b:a4:52:
6f:04:73:7d:41:2a:44:d2:68:c6:1d:37:40:cb:5e:20:5d:e3:
1f:23:48:e9:bb:e3:76:e5:79:d8:6d:a5:83:bb:b3:ea:aa:f3:
40:75:29:85:e5:8b:45:4a:a2:63:91:a4:87:23:9d:d9:f8:7b:
a7:0e:70:5a:2a:9c:0f:bf:ab:4f:61:50:d8:84:86:c6:6f:b5:
ec:af:87:49:aa:34:99:f6:a1:7b:77:12:d3:d2:91:41:7f:ae:
cc:88:d9:68:74:f6:fe:b1:5d:de:a7:f4:aa:e7:cd:d6:60:bd:
51:3d:57:5e:54:7f:c7:3f:54:61:a0:d4:68:77:cb:61:c1:29:
23:c6:52:4d:6b:db:67:d8:b0:b4:1f:25:85:60:7c:fe:c9:77:
1c:3c:64:ae:d4:82:63:74:e9:87:4a:f3:01:a8:b8:03:d1:25:
45:cd:7c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:31:52 2025 by rpki-client