Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jc71JvcJfsnse_LXsm87zWyXTmA.roa
File: jc71JvcJfsnse_LXsm87zWyXTmA.roa (raw, json)
Hash identifier: eHTyk7qrONQ0OrXoGcroT0rpQb8GWc3vR8hWo9GYs1g=
Subject key identifier: 8D:CE:F5:26:F7:09:7E:C9:EC:7B:F2:D7:B2:6F:3B:CD:6C:97:4E:60
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01937D38BA71B6B8B9CCDA7FC54672FFD46D
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jc71JvcJfsnse_LXsm87zWyXTmA.roa
Signing time: Sat 30 Nov 2024 13:18:09 +0000
ROA not before: Sat 30 Nov 2024 13:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 178.236.35.0/24 maxlen: 24
185.118.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:38:ba:71:b6:b8:b9:cc:da:7f:c5:46:72:ff:d4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Nov 30 13:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dcef526f7097ec9ec7bf2d7b26f3bcd6c974e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:01:3e:e3:fb:cb:32:d4:95:99:16:2c:ba:
0c:41:81:8d:04:55:8b:9b:4e:5f:c5:c2:21:54:9e:
ef:da:4e:30:a7:c6:49:6f:f1:c7:a7:95:fe:00:bb:
ac:05:98:dd:2d:3e:d1:f1:9f:6c:7f:28:99:54:3c:
d3:e4:86:21:94:b0:7f:c4:69:c3:6a:e5:74:d8:0d:
c7:c1:af:f5:f6:39:13:ed:a8:86:72:8e:dd:49:85:
dd:9f:d3:14:8b:67:16:64:6f:d7:d6:c8:38:55:10:
73:d1:c0:58:74:8e:13:b9:b2:66:7d:51:ef:e8:62:
56:c3:49:9e:8b:b1:7f:76:de:45:d5:bc:98:49:6f:
64:68:39:9f:22:fe:fc:ac:17:2a:b8:b3:79:e8:ff:
86:dd:6e:19:79:5c:57:d1:00:8c:90:2b:dd:b1:b6:
f8:53:35:47:24:b8:17:c4:66:ca:b2:b7:f8:b8:4d:
98:9e:26:02:c8:86:22:be:de:4d:0b:19:b0:24:28:
40:50:43:20:3a:7c:a4:38:01:a0:b3:b6:96:a5:8b:
80:d4:56:04:dc:a3:29:18:d3:3e:b0:c3:b2:e0:83:
37:ef:20:20:ae:e4:c8:a5:61:e0:93:60:1d:cd:5f:
ac:4c:70:83:ba:83:9c:bb:b8:19:73:8b:77:4c:30:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CE:F5:26:F7:09:7E:C9:EC:7B:F2:D7:B2:6F:3B:CD:6C:97:4E:60
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/jc71JvcJfsnse_LXsm87zWyXTmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.35.0/24
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:52:e9:6d:27:d5:e8:50:89:c3:15:bb:06:23:55:af:8e:92:
4e:10:42:0d:71:20:eb:b8:9d:0f:a4:3e:82:f2:18:27:59:d3:
3b:b7:64:25:6c:07:cc:d4:13:c3:5f:a6:5d:18:66:09:e9:c3:
ee:f0:4c:4f:3f:4e:8d:d1:b7:03:b1:e2:98:f2:85:24:28:37:
dd:6b:13:91:d6:30:e1:b8:dc:1f:cd:f7:b2:25:28:2e:0f:2b:
cf:c7:b5:2d:e7:7b:32:75:42:18:72:dc:2d:72:71:23:84:a0:
64:41:6f:19:34:e9:76:da:36:92:ba:de:97:29:15:f2:a8:94:
95:d1:27:1e:1c:e2:e8:f6:f2:37:e0:f6:6e:38:42:37:7b:f9:
6b:a2:2b:64:34:48:fe:c4:9c:8a:87:89:47:7f:74:59:13:dc:
7c:84:d1:17:92:af:e7:02:8b:2e:e5:98:4f:11:ca:99:2e:db:
2e:99:7a:a2:24:bd:fc:37:d0:ec:e6:73:a9:00:e7:9e:a3:ba:
db:5a:9f:2b:0d:07:a1:e9:0d:cc:18:10:f2:94:52:de:65:7c:
a2:5c:0b:b8:2e:d7:89:b3:85:be:24:60:ed:8a:5a:61:fa:52:
a5:02:2b:c8:12:fd:6b:c2:bc:50:14:1e:a8:c7:c6:10:48:a2:
bb:da:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:09:05 2025 by rpki-client