Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jWdeHHzZjWYT_vt_l_fdmFszeBU.roa
File: jWdeHHzZjWYT_vt_l_fdmFszeBU.roa (raw, json)
Hash identifier: 7n89Wc1uz4RoKfXA7u4an7vsmC5STaIN4VaZ3SK0qGU=
Subject key identifier: 8D:67:5E:1C:7C:D9:8D:66:13:FE:FB:7F:97:F7:DD:98:5B:33:78:15
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01937177658E7C470E4E68953D18DDC06496
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jWdeHHzZjWYT_vt_l_fdmFszeBU.roa
Signing time: Thu 28 Nov 2024 06:31:10 +0000
ROA not before: Thu 28 Nov 2024 06:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.49.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 17:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:77:65:8e:7c:47:0e:4e:68:95:3d:18:dd:c0:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Nov 28 06:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d675e1c7cd98d6613fefb7f97f7dd985b337815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:b7:ea:12:24:31:9e:9a:51:d8:bb:2e:33:
5b:9c:92:22:24:d3:6d:09:2e:47:e7:a5:ec:fc:ed:
07:9c:4d:81:9e:e9:15:e6:75:5d:eb:42:fa:cf:47:
ab:da:ff:e1:76:f5:85:9a:eb:06:57:69:53:bc:9d:
83:b6:31:5b:7d:85:89:8a:c1:20:52:2c:13:3e:3b:
b6:12:a6:4f:f7:88:c4:0e:85:fc:51:19:91:ac:5d:
86:d8:da:f7:b6:50:e5:e1:d1:43:2a:22:b5:f9:05:
d4:de:87:02:b4:51:c9:72:25:14:39:22:c7:ca:a2:
0a:a3:cf:94:f4:0f:4c:ff:29:c8:0b:25:e7:82:be:
f1:b2:6a:5b:0d:0a:2b:7e:80:d4:01:cf:24:41:75:
34:e9:d6:eb:8b:5c:94:e4:3e:88:52:90:de:20:9c:
03:6a:84:42:4f:bb:3c:64:eb:ab:ef:36:ae:fc:65:
60:8f:c9:44:ac:e4:f2:0b:a1:c8:c1:e1:6d:7d:19:
2d:6b:e9:26:a7:29:e8:01:e4:7f:09:26:5a:f8:a2:
65:85:ec:7a:fa:87:16:f1:48:80:00:6e:eb:47:9a:
00:9a:8d:e6:d7:6b:83:52:da:2d:cf:c5:8d:b1:d6:
3d:b2:2f:bb:be:f5:fb:35:f3:86:06:32:88:3a:ea:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:5E:1C:7C:D9:8D:66:13:FE:FB:7F:97:F7:DD:98:5B:33:78:15
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jWdeHHzZjWYT_vt_l_fdmFszeBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bb:3b:76:26:eb:28:5c:18:0c:7c:64:33:73:ac:df:41:6b:
bd:96:da:6c:e2:20:e7:f4:a5:ac:bd:8c:fd:5e:b7:2d:c7:7e:
17:c4:56:56:1b:cf:50:36:06:12:c8:82:2c:e2:63:66:68:3a:
97:4d:e4:45:42:dd:97:d8:1a:60:b4:27:f2:f6:2f:0a:c5:92:
3d:a1:84:58:12:d8:b1:30:0c:db:b5:64:9b:32:e0:d3:e6:05:
be:10:ac:34:fa:13:97:73:1f:d8:42:f9:fb:0c:d0:c4:45:95:
90:23:3d:0e:3f:a4:b0:53:f7:5a:f0:04:30:eb:12:70:55:2e:
fe:4f:30:fb:23:c4:37:b9:c3:90:72:a7:45:40:6d:a9:ca:43:
eb:8c:b0:7e:84:d1:e1:8b:cc:94:77:67:c4:9f:18:f0:c5:53:
01:37:d7:56:63:53:9e:72:18:d3:1c:91:4c:4c:b2:81:b8:18:
8e:6e:59:8f:6b:d8:b0:e4:69:62:c5:c3:17:de:dd:0f:5d:cb:
91:02:af:21:bb:0c:8d:fb:34:35:3a:17:75:cc:f2:d1:d0:74:
33:d1:76:a2:e1:8f:a8:7f:23:0b:9a:98:b7:d2:bf:ec:21:5e:
23:63:ca:08:06:0c:d7:09:82:a4:38:8a:a8:5f:92:cd:4a:59:
38:19:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:04 2025 by rpki-client