Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/jck5BlqwlXE8_rx_3q5eTxro4Yk.roa
File: jck5BlqwlXE8_rx_3q5eTxro4Yk.roa (raw, json)
Hash identifier: jwnMjkOR3CVGiCytZbX8aEFylGy9xQAvy9IWRADM9dg=
Subject key identifier: 8D:C9:39:06:5A:B0:95:71:3C:FE:BC:7F:DE:AE:5E:4F:1A:E8:E1:89
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 018CC8010C58BFFEB413F82B4C69357A68D2
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/jck5BlqwlXE8_rx_3q5eTxro4Yk.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199967
IP address blocks: 185.196.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0c:58:bf:fe:b4:13:f8:2b:4c:69:35:7a:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dc939065ab095713cfebc7fdeae5e4f1ae8e189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:5e:c5:fd:7f:77:1a:5b:4b:d7:87:55:d4:
1f:bc:5a:9c:91:c2:e6:ed:4f:65:fd:1c:75:a3:59:
dd:e1:ad:cc:0e:da:f2:c1:15:fb:d5:28:4c:9d:bc:
6b:36:19:9c:9f:c5:9c:6e:4f:7d:f4:b6:45:7c:c1:
14:a6:30:0a:74:83:0b:59:17:19:ba:8e:55:0c:40:
30:3d:25:d7:d1:ce:53:f0:fd:a9:8f:e3:16:a8:f7:
e8:d9:b5:de:2e:07:07:ce:3d:7a:d0:56:88:87:c0:
88:e0:61:73:1c:02:fc:04:a0:fd:4f:9c:4a:59:50:
eb:38:d8:1d:de:7c:12:6b:a5:e7:ef:d5:20:49:07:
a5:5e:96:6c:84:32:ff:3c:54:62:4c:1b:81:44:a7:
b8:de:eb:a4:aa:9f:5b:34:a8:0b:66:0b:a6:eb:39:
31:b9:4a:ff:6d:76:2b:23:c6:8b:87:c8:73:2c:fa:
ab:7e:fc:2c:ba:b2:36:10:11:d3:40:f2:d2:5c:27:
15:ed:aa:83:4e:87:2a:f1:45:3f:56:40:f5:bf:6a:
40:9c:d6:2a:67:44:c3:e9:49:be:1a:4a:57:ad:2e:
f2:1c:1b:15:94:a2:d7:9c:0f:47:29:b9:8d:3c:8b:
90:b4:e2:5b:1a:5c:c6:65:e3:a5:67:99:91:0f:9e:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:39:06:5A:B0:95:71:3C:FE:BC:7F:DE:AE:5E:4F:1A:E8:E1:89
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/jck5BlqwlXE8_rx_3q5eTxro4Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dd:5d:4b:85:39:44:37:33:21:7c:29:79:4f:51:2d:3c:0a:
19:e2:f2:d6:7e:c6:53:0d:48:fc:df:9f:c0:c2:23:90:6a:38:
6c:f0:44:42:01:21:3b:1f:e4:ba:b0:75:da:fb:b2:7c:ca:11:
92:04:7d:a7:8b:13:c8:0c:10:04:69:54:c1:23:95:74:ad:c7:
86:34:1b:fc:d6:ef:96:8f:c4:b3:da:7a:f6:95:9a:ff:f7:4c:
8d:0e:24:67:53:39:ce:9e:28:45:be:4b:2c:a2:b0:e4:9a:62:
c1:62:6b:c5:cf:39:e8:16:f6:97:2a:b1:81:47:11:39:48:83:
2f:ff:ad:3e:d7:69:40:81:c5:25:9a:b3:b3:dc:0b:e8:09:aa:
b1:dd:da:fc:71:5c:9c:c7:95:29:46:30:5e:70:87:9e:ad:d9:
e7:53:2a:a8:ff:42:b7:f6:f4:a5:98:c0:74:e1:07:38:26:6a:
20:05:d6:a1:13:54:16:8a:ef:84:c2:0f:86:4d:41:16:b2:0c:
2e:2c:cc:ed:2a:a9:87:34:e6:f5:6c:4a:ae:34:36:92:ad:d2:
6d:ca:cd:a6:b0:95:99:ab:d8:bb:f7:a1:1b:a0:4e:7d:75:7a:
a7:25:fc:0f:05:54:30:8a:26:ec:ec:53:43:e2:5f:de:20:80:
ed:69:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:34 2025 by rpki-client