Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/Jw5-P_xCRhn_31UbSxIzQi_h0rU.roa
File: Jw5-P_xCRhn_31UbSxIzQi_h0rU.roa (raw, json)
Hash identifier: Z4UHJDU3ruTpF90HkNZpWs2RwiH19NkuDqoylA8o+Cs=
Subject key identifier: 27:0E:7E:3F:FC:42:46:19:FF:DF:55:1B:4B:12:33:42:2F:E1:D2:B5
Certificate issuer: /CN=b5253c2552d4403f43b83c25e762238df12dae81
Certificate serial: 019424B383AE0E065F4E863AE14306921B39
Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/Jw5-P_xCRhn_31UbSxIzQi_h0rU.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203419
IP address blocks: 185.135.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 07:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:83:ae:0e:06:5f:4e:86:3a:e1:43:06:92:1b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=270e7e3ffc424619ffdf551b4b1233422fe1d2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:8b:34:00:ad:6e:a3:c4:f8:bb:32:74:38:
5a:53:50:a6:f3:17:9c:f7:53:1a:51:53:2a:62:77:
b6:90:9b:9f:31:46:58:c2:5f:72:e8:93:5e:96:8f:
b0:b4:05:bd:31:36:fc:2c:b7:ab:05:8f:33:12:fc:
40:bf:e5:7e:7a:0f:9a:cb:50:b6:7c:a4:6c:95:1c:
33:77:a8:97:40:eb:d6:80:1e:b6:14:09:e1:61:6f:
64:56:71:c9:cb:77:cf:d1:b3:80:ae:2c:c0:af:77:
cb:0c:ae:b7:58:27:08:e7:77:d3:5a:48:f6:41:83:
56:43:95:80:7c:f7:57:f5:33:59:42:9d:fe:f8:fc:
a1:ca:4a:94:67:d2:99:0d:7b:41:2b:50:f0:e8:60:
81:36:35:61:bf:c6:45:69:6c:47:96:5c:b8:1d:f3:
0e:53:b2:b0:dc:34:0b:2c:05:86:d1:95:9b:e4:01:
0b:53:6b:0c:b5:cd:e4:65:07:88:d9:88:0c:f2:15:
ec:2a:2d:f6:da:1e:a1:03:91:42:d2:4b:4f:47:33:
1a:46:05:58:54:c3:b0:2c:ab:73:ac:0a:03:27:66:
8d:ef:66:fa:74:e6:99:a7:f2:dd:54:f4:84:dc:39:
2e:fc:f7:7e:fb:b1:3d:56:98:30:97:d6:22:3c:5f:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:7E:3F:FC:42:46:19:FF:DF:55:1B:4B:12:33:42:2F:E1:D2:B5
X509v3 Authority Key Identifier:
keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/Jw5-P_xCRhn_31UbSxIzQi_h0rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.112.0/24
Signature Algorithm: sha256WithRSAEncryption
03:04:b6:68:ab:b4:92:5b:4d:55:01:96:0d:aa:e5:93:62:2f:
3b:8b:0e:95:99:1d:0b:65:57:f6:cf:f8:88:4b:4b:eb:9a:2e:
1b:9f:44:3c:de:e0:7e:29:ec:15:32:fe:1f:b7:f2:48:a7:10:
58:52:df:1f:14:c6:e2:58:ea:06:b6:14:b5:a6:e9:3a:08:8c:
4a:5d:5f:7b:91:1e:27:a3:4b:bb:a7:09:75:5f:c7:06:9e:9a:
75:eb:ec:6a:56:86:e9:35:8b:af:62:bf:00:c4:ba:69:3a:75:
1c:a8:05:02:63:ce:c2:17:8a:cc:9e:ff:85:b0:89:f3:25:be:
08:cf:5a:d9:f6:89:67:d5:6d:c6:27:c7:2c:bc:6a:d5:b6:1f:
52:8e:e5:c5:aa:eb:b5:56:71:87:7c:9d:49:62:0a:18:e1:4d:
1f:52:9d:a4:0b:d7:af:0f:57:82:f1:60:a6:7a:25:c2:c6:21:
69:fa:f3:13:02:fc:b6:e4:3d:b3:16:d2:53:0b:c3:26:bc:15:
8f:72:e4:c7:aa:59:88:69:79:8d:c9:8f:d5:52:f9:d7:75:1f:
0c:4e:b9:e2:54:09:eb:f7:dc:f1:b7:a5:19:cb:41:bb:b1:e9:
03:f8:1a:b3:fa:95:c3:4c:5f:bf:3f:89:fb:53:9d:82:ba:a7:
7a:ef:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:26 2025 by rpki-client