Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/j4luM-N9dq41f9fYUSI4AlX6F6g.roa
File: j4luM-N9dq41f9fYUSI4AlX6F6g.roa (raw, json)
Hash identifier: 6rlajHZ0kWhB2PziaNidxqQzRSSWVj2vOU9QX5RaQKQ=
Subject key identifier: 8F:89:6E:33:E3:7D:76:AE:35:7F:D7:D8:51:22:38:02:55:FA:17:A8
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 0190CB86F98E16155B23755F65AE2B6E5EB6
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/j4luM-N9dq41f9fYUSI4AlX6F6g.roa
Signing time: Fri 19 Jul 2024 15:05:38 +0000
ROA not before: Fri 19 Jul 2024 15:05:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206426
IP address blocks: 185.108.224.0/22 maxlen: 22
185.108.224.0/24 maxlen: 24
185.108.225.0/24 maxlen: 24
185.108.226.0/24 maxlen: 24
185.108.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cb:86:f9:8e:16:15:5b:23:75:5f:65:ae:2b:6e:5e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Jul 19 15:05:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f896e33e37d76ae357fd7d85122380255fa17a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:32:a0:dd:5b:c2:f5:d8:26:55:8a:7f:98:
fa:36:d8:f0:17:ed:27:3c:cf:b2:27:8a:ca:83:88:
5f:80:b9:06:bd:32:ca:ac:ed:0a:7d:4b:7a:7e:03:
e0:8f:6b:3a:99:64:a4:6d:28:68:96:1f:85:f0:bf:
2d:36:1d:8b:02:5e:b4:2e:1f:fd:82:8e:b9:19:5e:
7f:15:66:88:6b:94:63:b4:44:84:22:1c:1e:13:31:
55:61:4d:80:79:bd:b6:ef:35:35:dc:9c:48:5f:23:
d0:2b:61:5a:bb:34:a6:a6:f8:78:a5:b4:01:a5:06:
e1:aa:42:f8:11:ec:05:7d:73:84:8e:28:c9:c2:a5:
f7:05:53:74:c4:46:b6:25:1c:4e:87:64:df:a6:de:
43:de:b9:90:9b:1a:94:b9:f7:3d:f7:99:c9:95:4a:
f7:3c:89:7c:10:a6:b6:1a:80:d7:38:48:82:b0:f0:
0a:da:6c:53:20:83:92:2b:ed:0e:2a:41:72:ef:bf:
3e:76:4c:8f:51:6e:ef:17:9b:8e:f7:62:58:2b:7d:
fb:a3:a7:93:5b:72:48:ab:d7:6e:6c:1e:5d:82:f5:
1e:f6:24:36:66:51:7a:2d:d2:c1:b4:4c:6b:29:77:
f9:83:31:2a:1a:bc:9a:ee:22:a3:ef:81:a8:de:4c:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:6E:33:E3:7D:76:AE:35:7F:D7:D8:51:22:38:02:55:FA:17:A8
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/j4luM-N9dq41f9fYUSI4AlX6F6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:68:55:2a:38:0d:5d:16:7b:c1:ce:8d:5e:5a:fa:76:66:ce:
24:bc:a2:bd:e8:6d:8a:20:f6:ad:51:7e:bb:94:c6:5c:34:1f:
1e:07:17:fc:38:79:b5:60:78:30:03:de:07:15:70:77:f2:64:
c2:63:61:2f:24:79:95:8e:8c:35:05:59:46:be:a8:4c:dd:f3:
f7:dc:1d:ac:d9:77:9b:a5:97:9d:6e:3e:a1:3b:84:00:fd:82:
73:22:69:4a:74:17:2e:94:13:0c:c5:e2:2f:51:9c:49:a3:2f:
b6:a8:2f:dc:a8:f8:c4:e2:d2:d3:a0:22:15:f2:73:39:4a:9c:
48:0b:f6:ea:34:26:37:3d:bf:8d:81:18:21:41:59:be:bc:d3:
aa:36:5e:9c:51:49:18:fe:3f:93:d1:65:40:d7:d4:aa:0d:c6:
fa:b2:18:38:3e:58:8f:8f:71:27:8c:a1:bc:7c:d9:f1:64:98:
c6:b8:d5:cb:e2:4e:de:f5:c2:be:8d:c9:58:60:8b:7a:ad:22:
d6:bc:9d:d2:17:a4:af:1b:b3:98:dc:46:6c:27:45:05:28:67:
f0:f1:99:41:4e:54:67:5c:be:0b:bc:aa:2f:f4:d2:02:47:b0:
a0:4a:32:35:ce:8e:c4:ed:47:ac:2d:21:da:3f:6b:59:4e:7d:
5f:d6:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:19 2025 by rpki-client