Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/J7ndt3Sgf3_eVmYSKv3UUsnVbc0.roa
File: J7ndt3Sgf3_eVmYSKv3UUsnVbc0.roa (raw, json)
Hash identifier: lkqmBg/9mjOl/SCUk8jrjapuKeyUf3XSvdkLGqViJUc=
Subject key identifier: 27:B9:DD:B7:74:A0:7F:7F:DE:56:66:12:2A:FD:D4:52:C9:D5:6D:CD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0193721B471B3F838B654E4288E6953B5C48
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/J7ndt3Sgf3_eVmYSKv3UUsnVbc0.roa
Signing time: Thu 28 Nov 2024 09:30:10 +0000
ROA not before: Thu 28 Nov 2024 09:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140641
IP address blocks: 185.108.204.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:1b:47:1b:3f:83:8b:65:4e:42:88:e6:95:3b:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 28 09:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27b9ddb774a07f7fde5666122afdd452c9d56dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:df:5b:94:e7:6e:4b:38:e8:ae:ea:87:82:
b2:cd:06:28:3d:f3:d6:11:e8:0e:24:b0:67:20:dc:
12:3e:48:e4:67:b1:2c:ff:6e:16:71:4f:68:53:ed:
77:46:f2:8c:42:6b:c3:46:eb:ac:2d:87:ee:f9:42:
ed:4d:d4:04:79:33:89:4c:65:be:12:a6:ca:ab:6e:
35:64:4c:bb:77:10:c5:cf:67:e4:34:b2:f2:33:a7:
70:31:b2:6b:2b:84:a8:98:87:de:e6:ca:9d:6c:af:
b4:14:ef:92:2a:a4:87:82:0d:92:31:0b:57:fb:d3:
9a:2c:74:2f:29:7d:91:ec:8b:4d:2b:5c:a5:6a:65:
d9:fa:4d:1d:77:52:9a:37:a2:b1:b7:97:31:b0:68:
c4:8d:6e:d0:73:a0:0e:60:a3:0d:bf:eb:3c:e9:28:
2e:ef:1b:a1:cf:48:f3:f1:84:e4:74:4f:6e:3e:60:
69:56:d0:fd:f6:9e:ad:8c:6e:0a:4e:ad:d4:55:e9:
82:1c:0b:44:28:4d:13:b2:06:b8:41:ed:f4:b3:0f:
a8:0c:8a:ea:7f:0a:c7:59:f3:88:13:07:c9:cb:ca:
a8:8c:d7:af:35:f1:18:9a:46:a3:3f:fa:29:6b:fe:
03:e2:47:34:93:70:c2:d8:4e:d4:6a:a8:14:01:87:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B9:DD:B7:74:A0:7F:7F:DE:56:66:12:2A:FD:D4:52:C9:D5:6D:CD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/J7ndt3Sgf3_eVmYSKv3UUsnVbc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.204.0/24
185.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
28:12:97:d6:45:33:de:eb:96:13:10:3f:2e:b0:b8:3a:33:3b:
ad:a5:31:55:f0:ba:0f:c4:42:81:05:8c:6f:87:46:d1:fa:8e:
5c:59:4d:b0:91:da:7c:ec:f3:6e:e3:dc:76:20:61:a9:97:11:
05:c5:f8:15:b2:75:1d:ac:96:1f:f4:1f:9b:05:54:64:f4:d7:
77:43:d5:64:02:63:46:d5:d8:84:d2:fe:82:ab:fa:aa:09:61:
d2:0f:98:a4:3c:30:b4:15:7b:9f:a1:1b:64:8b:73:37:b4:cd:
43:60:23:5d:ac:64:0d:af:08:c6:ed:08:be:d6:ec:0a:9d:ca:
f6:35:5a:37:a7:ac:13:6c:f7:5b:3b:71:1e:1e:44:99:a5:79:
1f:8b:bd:59:63:49:cb:1f:95:f2:54:2e:3c:a7:5f:f2:53:f2:
00:37:d5:5e:19:c2:99:55:b3:93:2a:3c:11:f6:05:de:8c:83:
a1:a8:d1:b4:f8:5d:98:25:23:d5:08:42:3d:f7:82:73:c0:21:
1b:63:0f:f3:00:38:93:36:e7:c8:9c:82:01:38:27:bd:29:9d:
85:80:93:8b:47:96:ec:8b:92:75:8e:ac:e7:78:e8:40:d6:7d:
5f:f6:69:46:06:ad:fe:9c:56:b0:b9:97:10:f2:34:a4:c3:c7:
85:10:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:21 2025 by rpki-client