Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j8_M_YqyYYgz6tRDlYYA0EoiNmE.roa
File: j8_M_YqyYYgz6tRDlYYA0EoiNmE.roa (raw, json)
Hash identifier: 3p7OsnqQWnG3CMYF3z/4QVhdjWxBpjgLt4fr3rr1DGI=
Subject key identifier: 8F:CF:CC:FD:8A:B2:61:88:33:EA:D4:43:95:86:00:D0:4A:22:36:61
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01941C6C8242F784A3715AE266B548E89A92
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j8_M_YqyYYgz6tRDlYYA0EoiNmE.roa
Signing time: Tue 31 Dec 2024 11:14:20 +0000
ROA not before: Tue 31 Dec 2024 11:14:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 45.147.225.0/24 maxlen: 24
185.108.207.0/24 maxlen: 24
185.232.207.0/24 maxlen: 24
194.5.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:6c:82:42:f7:84:a3:71:5a:e2:66:b5:48:e8:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 31 11:14:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fcfccfd8ab2618833ead443958600d04a223661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:5c:24:d5:c9:29:9c:3d:09:1b:18:5c:e7:
96:22:26:58:5a:d1:59:18:b2:80:c0:da:46:1e:3e:
8a:2d:04:1a:d5:61:e4:71:c7:f6:e3:90:32:03:b7:
71:8b:c2:d2:7d:a5:82:ab:d9:a7:af:b4:71:8f:7d:
b0:84:89:ed:d8:aa:44:07:81:5e:13:0c:65:50:1d:
9e:8d:2e:3d:2e:75:cd:ca:c8:14:0e:d6:a0:ba:da:
5e:22:b1:d1:31:03:26:8a:d1:be:32:d1:d6:9b:ef:
0f:a2:68:a6:a1:c2:e4:54:be:00:f5:bf:6e:90:e1:
88:dc:ee:8a:69:c0:d1:04:f5:21:ed:8c:73:34:6d:
61:d7:5b:11:f0:53:4a:e5:ea:4d:9b:8c:00:f4:de:
e5:a5:c4:60:a2:31:e9:82:7b:35:5e:32:fc:d4:7e:
6b:01:d6:36:e6:8a:c6:48:6a:b8:c7:4e:dc:58:b3:
a1:9a:ce:77:d0:2b:77:f2:b9:6f:fd:cd:1e:a4:41:
c2:df:d2:ab:df:71:ef:be:a1:f4:b5:5f:e3:2d:84:
d1:32:11:fd:58:11:c7:61:22:4f:7e:45:8e:ea:e1:
e1:23:5d:a4:9d:92:1b:48:66:59:17:75:2b:f2:f7:
21:f4:3a:b5:8e:c9:f3:9b:f9:c0:79:51:2c:47:16:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:CC:FD:8A:B2:61:88:33:EA:D4:43:95:86:00:D0:4A:22:36:61
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j8_M_YqyYYgz6tRDlYYA0EoiNmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.225.0/24
185.108.207.0/24
185.232.207.0/24
194.5.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9e:ff:78:90:28:37:b4:ff:d0:44:cd:43:df:5e:e5:8e:f2:
13:dd:06:d0:40:1e:10:53:e3:ae:42:2f:9b:db:9d:e6:22:17:
1d:bd:b9:ae:b1:88:f3:dd:26:bc:69:d7:7e:ab:a7:6d:71:47:
8b:20:8a:34:68:f7:03:6e:55:fa:b5:68:2b:37:99:cc:3b:1f:
cd:5d:2c:e2:c8:c2:ed:45:07:37:a9:f3:03:10:d7:f6:9a:1c:
3c:6a:38:6f:0a:a0:f8:e9:f1:94:7a:8b:96:5d:cc:51:e6:c6:
73:1a:f9:25:a8:79:71:be:79:7a:1d:58:83:76:44:76:51:22:
b0:c9:14:3d:10:c1:97:cf:d7:99:ad:bb:a6:48:3f:41:f9:33:
d1:df:a9:c6:03:30:c6:5a:2f:b7:c3:cf:89:d1:6d:14:04:bc:
c3:cb:7f:f0:74:89:83:d4:66:5a:90:26:66:dc:ff:90:78:fa:
04:ff:14:38:41:8c:77:42:95:65:73:26:e8:d2:f0:dd:1e:3e:
37:78:1b:d8:ab:13:50:7f:e4:f7:65:66:0f:17:83:c4:b1:76:
fe:57:a3:fb:b9:6d:70:7c:47:f5:2f:47:10:7b:89:45:c1:d2:
f3:62:a3:a6:e9:f9:3a:4c:7d:15:3a:49:03:83:90:f1:58:3b:
8f:27:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:24 2025 by rpki-client