Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/j3TC2TLYdwhanDRu2W951Ux-tfA.roa
File: j3TC2TLYdwhanDRu2W951Ux-tfA.roa (raw, json)
Hash identifier: OXizqyC1UVJJx8574QZ+VLZcjwVENxwHYZz2pJhBnLI=
Subject key identifier: 8F:74:C2:D9:32:D8:77:08:5A:9C:34:6E:D9:6F:79:D5:4C:7E:B5:F0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019402712D38C21FCFC9F1CAB2EDF94E0468
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/j3TC2TLYdwhanDRu2W951Ux-tfA.roa
Signing time: Thu 26 Dec 2024 10:09:19 +0000
ROA not before: Thu 26 Dec 2024 10:09:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 85.133.197.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:71:2d:38:c2:1f:cf:c9:f1:ca:b2:ed:f9:4e:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 26 10:09:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f74c2d932d877085a9c346ed96f79d54c7eb5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:19:b9:b1:94:2c:c3:2e:e6:14:1c:28:69:
22:84:e0:20:ea:68:86:75:e2:a1:8d:ac:45:71:0b:
4b:0c:48:cd:76:47:03:f4:07:db:fd:13:24:11:f6:
70:db:a5:48:d3:bd:4a:b1:df:53:57:14:ae:de:b0:
05:85:0d:e0:f7:e4:26:3c:89:97:a5:45:a9:9a:0b:
6e:87:48:21:31:01:d8:43:c4:56:32:53:69:89:66:
70:7e:e6:52:62:c7:dc:82:c4:69:cc:59:0b:15:37:
0b:2b:2b:f1:5c:a2:7b:88:0a:aa:72:75:a7:28:1b:
5c:f5:ba:74:57:2d:64:a1:dc:3e:b7:4c:58:24:db:
56:61:e5:70:56:31:43:d6:07:e5:25:89:be:0e:25:
59:66:e8:fc:30:70:25:95:eb:c5:5f:0b:b1:b8:49:
14:d0:00:2f:07:13:03:a3:f7:6a:a0:f5:2e:b8:e1:
e2:17:37:57:e8:c0:b2:52:0f:8f:dc:4f:f3:c9:07:
52:64:e3:10:1a:a9:7c:e2:e1:91:8c:4d:93:90:2a:
a4:a7:14:8f:af:f0:c2:7b:b1:48:41:3c:ed:92:a1:
76:e0:89:42:ba:f6:b2:0c:eb:41:84:68:32:b4:bc:
73:e3:cb:53:7b:14:44:8c:09:06:04:c1:11:1f:47:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:C2:D9:32:D8:77:08:5A:9C:34:6E:D9:6F:79:D5:4C:7E:B5:F0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/j3TC2TLYdwhanDRu2W951Ux-tfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.197.0/24
85.133.227.0/24
Signature Algorithm: sha256WithRSAEncryption
03:29:ae:47:a5:02:2f:30:4b:e4:46:fd:f1:ea:40:b6:b6:c9:
54:76:81:77:cc:35:97:2c:f3:72:30:34:8e:c0:db:55:4a:66:
16:2d:64:f8:de:af:87:6a:7a:2e:e2:c8:1a:48:7b:62:57:9e:
94:47:06:ce:4f:15:77:f8:9c:eb:96:75:88:d1:47:34:08:c1:
fd:57:68:d5:88:4a:a3:fc:18:70:ae:76:6a:f3:9a:04:a7:3d:
20:da:47:02:86:9e:27:20:cc:1e:3c:62:06:ef:c8:cf:2e:65:
b4:cb:c5:12:8f:45:b5:4b:78:82:f0:a9:39:32:00:5c:b8:bf:
9e:df:d1:64:fd:f2:8b:53:00:47:9a:73:b2:c3:f6:4c:dd:7d:
4d:d2:a4:16:4f:1a:87:37:5b:d2:35:ae:cb:1e:fd:bf:dc:9a:
fc:4f:b3:6c:98:49:a7:ca:a5:dc:46:9e:83:65:39:47:53:b1:
a5:82:4a:45:9a:c9:5e:f0:b6:0a:0c:87:db:e3:a7:c4:28:9c:
03:63:2a:07:1f:de:d8:e7:22:69:6c:f1:8b:d5:a9:93:c6:27:
33:6c:a9:e5:4e:38:2d:1e:66:93:38:1e:cd:d9:f4:9e:20:c9:
10:38:d5:07:09:86:d0:dc:0b:18:60:68:b5:ba:b7:ec:fd:07:
7e:f6:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:45 2025 by rpki-client