Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jT9bdCD8oNJBXSVIvMQcDXTRKyg.roa
File: jT9bdCD8oNJBXSVIvMQcDXTRKyg.roa (raw, json)
Hash identifier: sV8vdb/W/1rqMZVMydgonOsN2v5YoHTrviX/OdgPll8=
Subject key identifier: 8D:3F:5B:74:20:FC:A0:D2:41:5D:25:48:BC:C4:1C:0D:74:D1:2B:28
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274821D2E2A9D35400CF1704A901A427
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jT9bdCD8oNJBXSVIvMQcDXTRKyg.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 185.155.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 15:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:21:d2:e2:a9:d3:54:00:cf:17:04:a9:01:a4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d3f5b7420fca0d2415d2548bcc41c0d74d12b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:5f:9d:54:6a:8b:9e:a0:a9:9b:6d:98:eb:
33:02:95:a0:71:70:ed:46:ac:87:79:b6:71:b1:0f:
b4:16:55:1e:3f:e7:0a:c8:82:1a:7c:eb:82:3c:4a:
36:01:45:2e:55:fb:30:4d:84:79:f2:f4:07:c1:6e:
3b:7a:8f:52:be:7c:4f:3c:5b:da:ae:32:35:a2:f1:
5b:91:bf:f7:f6:db:66:7e:66:e2:12:4f:d3:03:1c:
62:91:29:91:8b:27:9b:62:2e:80:f7:62:44:aa:f1:
18:e1:ea:e1:66:2a:66:09:bb:9b:14:cf:06:2e:ad:
b7:e3:da:0c:20:56:c9:15:6a:fd:35:8b:fc:93:b4:
01:74:19:97:4b:b5:fd:83:a7:0c:dd:e2:15:21:60:
9c:1b:a4:80:c1:96:98:28:e2:b5:bf:0d:fa:e5:36:
ef:b8:48:94:4e:78:b4:6c:74:0a:27:24:db:7e:27:
c7:87:5c:45:e6:e2:59:5f:67:a0:b6:26:19:39:fd:
cd:cf:ff:f3:0b:ba:cf:f9:1b:f8:92:5f:d7:69:ad:
13:64:89:93:93:4d:20:37:32:b5:d7:a0:3b:bf:df:
d9:04:81:de:30:9a:5d:22:db:21:5a:f3:a8:49:4e:
cc:7e:30:15:90:c1:74:11:89:c6:43:1c:6d:4b:17:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3F:5B:74:20:FC:A0:D2:41:5D:25:48:BC:C4:1C:0D:74:D1:2B:28
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jT9bdCD8oNJBXSVIvMQcDXTRKyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:0f:45:5c:29:0c:b5:43:9d:ed:51:33:be:0a:f9:42:1a:e5:
18:d8:08:8f:13:71:2b:f4:6d:85:5e:67:a0:bc:ee:26:88:b9:
70:7a:ea:3d:8d:b5:40:e0:cc:b3:0d:c8:ed:0c:4d:3b:5f:88:
c8:42:6c:b4:a6:e9:ea:a4:f3:00:3e:c7:9f:3d:d7:d6:a2:c4:
39:f8:df:b7:f2:4a:e3:d2:2a:e0:16:8a:ed:52:a0:a1:1e:af:
4d:63:73:8f:1c:1d:c1:8c:d4:23:a2:ee:14:87:7a:7c:48:1f:
a9:09:9c:bc:07:e9:de:74:20:b7:04:46:58:dd:5e:07:74:d0:
c4:be:13:24:f3:e6:4b:79:51:29:ea:d8:5b:70:02:a7:04:da:
a6:6e:7c:45:35:84:3c:c5:79:39:d2:ba:50:1d:6e:2c:d6:e4:
df:6f:c3:c5:c2:76:c6:23:32:14:38:f2:48:61:21:9a:b0:55:
e8:c5:ad:8f:7b:8f:dc:5b:e8:bb:1a:17:e7:e2:64:83:09:6d:
dd:82:cb:b8:14:63:38:7b:e7:d3:f9:19:f4:2f:1d:50:79:ab:
68:75:ae:c4:07:48:b9:55:95:e5:78:85:7d:84:b3:57:26:c9:
14:e8:3e:5d:b5:57:57:3e:06:85:83:cc:b8:8f:18:d8:c4:43:
37:7e:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:56:23 2025 by rpki-client