Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JKvGFm462jGeN3_t-humcMAPdkc.roa
File: JKvGFm462jGeN3_t-humcMAPdkc.roa (raw, json)
Hash identifier: 4CYzK0CT0m3CNl8c/Yp/RYmL+4r2rIuBrzKcMTW3mtY=
Subject key identifier: 24:AB:C6:16:6E:3A:DA:31:9E:37:7F:ED:FA:1B:A6:70:C0:0F:76:47
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01944B6504F4F875B7DF6C3E68AEF88BCBAF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JKvGFm462jGeN3_t-humcMAPdkc.roa
Signing time: Thu 09 Jan 2025 14:08:19 +0000
ROA not before: Thu 09 Jan 2025 14:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 20 Jan 2025 17:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:65:04:f4:f8:75:b7:df:6c:3e:68:ae:f8:8b:cb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 9 14:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24abc6166e3ada319e377fedfa1ba670c00f7647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:f4:88:d7:c3:fd:fe:43:5b:fa:f8:ef:bb:
0f:21:f2:5d:13:47:11:6b:e6:9f:5e:56:9d:65:bd:
2b:6f:4d:89:8d:70:ed:d9:9e:ca:e5:75:10:49:b6:
0e:60:cf:73:42:3c:cb:61:c0:77:06:6a:68:61:26:
79:5b:90:8c:a2:b0:e4:21:ac:36:8f:47:76:e2:a6:
9f:99:6f:d9:ff:17:08:06:ce:47:1f:e4:5f:b0:ee:
78:dc:72:ef:04:df:52:f9:42:ac:91:89:31:82:e1:
05:b1:a5:91:fa:02:d4:8e:ac:f7:80:9f:b2:ae:5d:
10:57:fb:59:16:6a:7d:ca:68:c1:c6:db:9c:36:62:
73:68:73:69:fa:65:30:7d:4c:1d:fa:9d:0d:89:32:
fa:8a:cf:3b:75:57:e4:b1:d5:4b:ac:9a:41:64:53:
b4:6f:30:ae:1e:a6:82:5e:5c:29:3c:ec:99:f6:f8:
6c:31:d8:c8:fb:bb:7a:80:34:34:b5:ab:71:10:25:
a0:2e:9c:ae:58:5f:a0:40:41:7c:23:7d:a5:fc:59:
c5:fe:fd:0f:5a:64:50:85:d3:0c:3c:02:e6:bf:f6:
ca:ac:d9:fa:9a:79:a6:9a:f1:d8:20:65:f8:2b:ee:
94:76:ce:93:90:9d:08:9d:eb:48:27:3b:b5:11:d0:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:C6:16:6E:3A:DA:31:9E:37:7F:ED:FA:1B:A6:70:C0:0F:76:47
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JKvGFm462jGeN3_t-humcMAPdkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.49.0-185.211.50.255
Signature Algorithm: sha256WithRSAEncryption
26:52:c3:75:51:6f:88:d3:03:9e:f1:7a:2e:3e:f3:ee:ee:18:
b3:12:33:cd:f4:61:47:55:9e:7e:93:22:35:c7:68:fc:e9:5f:
fe:77:2c:fb:fd:6a:81:b6:11:2c:76:41:b5:ed:47:ac:7c:cb:
f1:0a:18:94:85:d7:45:f4:ac:63:a8:87:40:9e:b4:a8:4a:26:
a5:b5:5a:2f:60:2d:5b:93:e8:de:1c:29:83:a2:5f:bb:03:16:
cb:b6:dc:2e:92:39:46:1d:82:0e:b8:a7:26:58:23:06:73:7b:
22:f5:af:4f:98:8c:2c:5e:42:e9:39:73:aa:af:2c:4a:bf:40:
50:4d:f7:de:65:7b:1e:b6:dd:4b:a3:a0:bc:ac:45:58:f4:82:
fb:d8:56:e4:22:b0:51:78:2a:2f:ba:6f:e3:1a:ea:bd:5b:3a:
50:d1:30:68:ca:b6:ad:8f:58:a7:ae:c1:6a:09:c0:f9:f2:98:
f2:3c:a4:79:8a:a0:36:78:1d:93:fd:20:96:32:e8:36:ea:54:
9b:d5:9d:f3:53:8b:d8:1f:14:25:bb:b3:75:d5:6e:f4:05:67:
aa:46:c3:bd:05:f8:0f:70:e9:04:79:af:30:eb:ad:cb:ed:fa:
62:01:18:48:b2:e3:50:25:08:67:c0:6a:41:90:cd:4e:d0:bf:
60:75:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:35:36 2025 by rpki-client