Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JCWf505jPPZVkQKyrICWcJ5ces4.roa
File: JCWf505jPPZVkQKyrICWcJ5ces4.roa (raw, json)
Hash identifier: 0ZN0r7BDjSdQvr8NQpqXb5pd1kJon/h9Ds0OVHI66Xk=
Subject key identifier: 24:25:9F:E7:4E:63:3C:F6:55:91:02:B2:AC:80:96:70:9E:5C:7A:CE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01948848992DADF4B14A84F361AA1253836D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JCWf505jPPZVkQKyrICWcJ5ces4.roa
Signing time: Tue 21 Jan 2025 09:54:06 +0000
ROA not before: Tue 21 Jan 2025 09:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.227.146.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 09:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:48:99:2d:ad:f4:b1:4a:84:f3:61:aa:12:53:83:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 21 09:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24259fe74e633cf6559102b2ac8096709e5c7ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:97:39:64:af:ab:79:45:19:22:a8:59:8e:
09:f5:69:20:33:cc:d5:4b:50:26:70:a1:e8:63:f6:
db:c4:3c:14:b9:e5:70:6b:24:c8:e7:2e:ed:e0:04:
ce:71:5f:ae:cc:86:25:ed:ab:a7:f2:1e:c7:37:8b:
41:b0:e1:49:9f:98:db:03:29:45:b3:db:8d:f2:c1:
b2:94:c5:ec:a6:0c:7e:aa:c5:74:02:ac:c4:b7:d6:
1b:58:4a:9f:f3:cd:e9:83:d0:7b:42:50:3b:3a:03:
c1:d9:5e:40:26:c1:c8:01:76:83:b0:05:77:bc:c8:
1f:20:48:89:16:9e:3f:04:1a:8b:2f:44:14:b1:09:
40:cc:38:c2:47:ed:87:9d:23:01:a5:54:6a:da:e1:
f6:10:5c:c5:d2:6b:e1:4f:a6:1b:4b:f2:9d:d9:53:
5a:ed:b8:bc:2e:92:e7:6e:c3:2a:1f:d7:a2:aa:77:
65:5d:03:6c:43:32:33:80:e9:d3:58:2b:f7:93:ab:
5d:a1:14:10:82:ac:2e:91:77:c6:85:6e:9a:53:28:
3c:93:80:bc:4f:aa:bd:75:1a:df:9b:0d:99:4f:06:
3b:eb:3f:bf:d1:6a:4b:03:fb:cd:b3:9d:bc:72:6b:
c8:b4:bb:3d:4e:26:55:10:1d:6a:81:80:59:bf:a5:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:9F:E7:4E:63:3C:F6:55:91:02:B2:AC:80:96:70:9E:5C:7A:CE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JCWf505jPPZVkQKyrICWcJ5ces4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/24
185.218.22.0/24
185.227.146.0/24
185.239.140.0/24
185.240.120.0/23
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
72:70:e8:7c:9e:8f:73:72:e2:47:db:0f:02:c9:d8:fe:44:16:
7f:44:5e:15:4e:2e:73:77:c8:ed:0d:78:4f:3c:23:26:99:e4:
46:52:1a:25:d6:19:35:e8:47:02:fd:23:95:0b:61:e5:aa:b3:
1b:89:1f:73:76:4c:98:9a:de:43:ea:ce:07:09:2e:7b:ad:ff:
55:1a:06:78:14:fc:63:e5:b1:61:a5:92:0f:d7:34:2b:d6:77:
8c:99:03:34:8c:30:1a:69:d3:b2:3b:a5:dd:ab:4f:7e:d7:89:
01:3f:25:9b:52:e7:6e:a9:06:23:84:28:4c:6c:f8:55:46:d2:
6c:c7:73:91:8d:17:b4:fc:1e:05:d3:57:61:d2:c5:39:46:9c:
aa:50:9c:e6:66:91:04:72:c3:04:68:17:cd:d1:ff:b0:a3:ed:
64:e9:ac:31:b5:a2:0a:48:f3:03:e9:17:00:8c:a7:ec:92:88:
c4:31:ee:c2:c2:ca:54:ed:96:8a:ed:9b:05:5c:17:5f:c6:72:
95:9b:35:f4:e1:4b:02:67:e5:39:8a:c5:4a:40:13:18:27:71:
e9:05:9b:3a:51:68:2c:c0:10:57:de:6a:44:1f:0e:5e:2d:de:
75:ef:68:0c:93:a3:fd:2a:3f:83:62:eb:13:b5:16:ea:ac:b8:
9e:a6:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:49 2025 by rpki-client