Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/dJPJH5hs9Z3__5dQYPUHnU1-Cu4.roa
File: dJPJH5hs9Z3__5dQYPUHnU1-Cu4.roa (raw, json)
Hash identifier: Tcv3Rtt0jvy+wzmiLzHB4AJBHoOHceJ/8hYJk9GoV9E=
Subject key identifier: 74:93:C9:1F:98:6C:F5:9D:FF:FF:97:50:60:F5:07:9D:4D:7E:0A:EE
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 018CCA2AACD5BD5C7FBF87DB9D09B8F39051
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/dJPJH5hs9Z3__5dQYPUHnU1-Cu4.roa
Signing time: Tue 02 Jan 2024 12:34:03 +0000
ROA not before: Tue 02 Jan 2024 12:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58075
IP address blocks: 185.114.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 09:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:ac:d5:bd:5c:7f:bf:87:db:9d:09:b8:f3:90:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Jan 2 12:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7493c91f986cf59dffff975060f5079d4d7e0aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:b0:e7:57:de:a8:af:da:45:1a:69:65:b8:
ea:9e:53:0b:7a:af:dd:0a:05:cf:93:79:89:ad:12:
e8:ab:60:5d:86:1d:2c:81:80:f4:3e:fe:19:44:ad:
85:2e:0e:fa:f5:42:08:bd:90:ef:86:e0:34:29:4b:
7c:d8:b7:c1:0f:2f:ee:07:fa:7e:f2:42:e6:24:d1:
72:0c:cb:67:d9:db:9d:55:11:c1:f3:ff:a5:74:0e:
3b:29:a7:ec:1f:f3:6b:4d:37:a2:a1:ac:01:da:ca:
9d:62:a4:d1:8c:d8:ac:fa:a0:3a:bc:3b:bc:80:13:
1e:c2:ad:13:88:7c:be:bb:eb:f2:a3:da:ed:53:8e:
cf:b2:76:1c:45:70:70:fe:9b:6b:72:7e:93:93:83:
93:cc:0a:6a:61:3c:bc:ae:8b:6c:9a:1d:86:41:1d:
c9:98:27:49:ae:74:54:35:34:14:9b:a8:fa:6d:8d:
1e:96:67:3a:7a:4c:5f:05:cd:c8:66:73:09:80:64:
bf:1c:b5:57:b9:1f:39:28:5d:46:e9:8f:7c:a4:ec:
d2:36:74:3e:fe:98:1a:4a:d4:0b:7f:7a:d1:96:18:
56:a1:38:e7:a8:8c:a5:3b:62:72:b4:a7:3e:38:c3:
de:2d:32:a4:f4:40:f2:8c:55:ce:42:a0:e2:77:a0:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:C9:1F:98:6C:F5:9D:FF:FF:97:50:60:F5:07:9D:4D:7E:0A:EE
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/dJPJH5hs9Z3__5dQYPUHnU1-Cu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:49:a1:06:d7:1a:98:bf:b5:d4:61:77:17:9b:2f:e1:34:70:
56:c7:a0:10:06:20:e1:e9:6a:50:98:47:81:e5:cd:89:23:ae:
12:56:73:2f:20:ac:5a:3f:6a:a3:3e:09:35:06:10:40:84:5f:
09:d5:ef:3e:b9:a2:d7:3d:1d:f8:0a:0c:53:42:a3:b3:7e:37:
0a:ba:1a:b4:82:b3:42:cc:73:61:23:a4:a5:c2:c6:ea:0e:c1:
c3:cf:3b:79:44:94:8b:74:fb:7f:c8:a9:25:17:66:2d:5b:28:
7c:ce:d9:2e:3c:ce:6b:5a:c1:d4:02:b3:4e:da:0c:e1:d0:17:
76:3f:a0:84:0a:29:2f:da:6c:b8:77:61:b6:c8:31:bc:1d:34:
28:ec:0a:79:19:43:29:84:eb:65:ef:2a:6a:0d:d2:d5:7d:23:
cb:21:7f:49:c5:69:4c:3c:a0:bd:88:12:57:57:3d:82:88:44:
3f:14:bf:13:1a:df:0b:b0:f1:bb:2c:d2:bb:4d:48:e7:dd:2f:
74:ba:a8:99:8e:44:b0:12:b1:66:be:02:f2:15:f2:b5:55:a2:
83:00:77:b8:be:d1:9e:84:57:1c:b2:9e:33:f8:58:a6:01:95:
12:25:ea:c2:8a:0d:38:13:14:a5:4d:8a:ca:15:e1:21:1b:08:
b2:8d:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:07:42 2025 by rpki-client