Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/JqM_ppVILTwYRfVccrV5P9ID1gU.roa
File: JqM_ppVILTwYRfVccrV5P9ID1gU.roa (raw, json)
Hash identifier: y0okOp3pDs08TL8F7W6K9bWJ0PHH3Qv4UjtNC9VSlAE=
Subject key identifier: 26:A3:3F:A6:95:48:2D:3C:18:45:F5:5C:72:B5:79:3F:D2:03:D6:05
Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial: 018FE0610CC58CA938A6B57ED2E04F1BDDF5
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/JqM_ppVILTwYRfVccrV5P9ID1gU.roa
Signing time: Mon 03 Jun 2024 23:13:27 +0000
ROA not before: Mon 03 Jun 2024 23:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29468
IP address blocks: 185.102.16.0/22 maxlen: 22
185.102.16.0/23 maxlen: 23
185.102.16.0/24 maxlen: 24
185.102.17.0/24 maxlen: 24
185.102.18.0/24 maxlen: 24
185.102.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e0:61:0c:c5:8c:a9:38:a6:b5:7e:d2:e0:4f:1b:dd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Validity
Not Before: Jun 3 23:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a33fa695482d3c1845f55c72b5793fd203d605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:1d:e0:c9:55:40:5c:71:83:33:06:0b:00:
9b:61:54:eb:8d:32:45:1f:5b:c3:4d:a0:d5:fe:a0:
28:81:f9:a7:6b:99:46:2b:bc:d1:42:42:a4:39:4b:
16:79:3b:83:f8:47:7d:91:c6:ab:ac:65:b3:17:19:
11:1a:52:56:b5:77:e6:e9:4d:ff:cc:08:4e:3b:86:
fb:47:68:57:41:a5:e1:09:91:6f:5a:85:ca:23:fb:
79:2c:dd:96:e4:5c:55:da:89:56:6c:82:d7:8f:37:
a2:3f:89:1b:52:31:91:31:36:34:d2:60:49:41:b1:
d2:0c:60:c4:7a:98:2e:fb:e5:f5:83:5a:86:2d:a4:
88:c8:d7:47:80:96:b8:61:bb:bc:67:8e:99:a9:f4:
59:d5:c8:3d:ce:c2:92:f3:e8:9a:6a:dd:a3:37:5b:
a7:e7:98:ca:41:79:4c:a9:30:36:bf:c3:f9:65:6b:
a7:b7:a9:cf:3e:b9:29:9e:2f:d2:0d:d7:18:f7:ac:
48:51:dd:ff:bf:c5:b7:24:86:36:a3:41:5c:71:8a:
7a:7b:32:28:8e:c7:a0:d9:4e:5b:0b:bc:a7:26:d4:
07:2c:75:d6:d6:e7:ab:ac:0d:fe:60:6d:c9:b3:15:
71:e2:68:5a:0c:26:d1:14:1d:75:db:39:f5:e1:76:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:3F:A6:95:48:2D:3C:18:45:F5:5C:72:B5:79:3F:D2:03:D6:05
X509v3 Authority Key Identifier:
keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/JqM_ppVILTwYRfVccrV5P9ID1gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:d1:66:a7:f2:92:42:d0:ae:0b:2e:a3:42:38:f0:ac:b8:aa:
e5:97:ca:68:1e:5c:ef:67:28:42:3b:8b:72:94:6f:6f:85:c8:
e3:7e:9f:4f:6e:a4:57:84:ee:56:43:8b:84:16:b0:68:bd:eb:
81:b4:41:80:2a:e5:16:56:69:32:2f:21:41:e1:12:1d:2c:0d:
db:da:f5:f9:a0:b1:48:d1:7d:5c:27:94:7e:42:ed:dd:ae:b1:
0d:0c:34:99:a1:8b:de:ea:cc:a2:e9:02:63:61:6a:a7:40:c6:
c5:6d:ef:e2:77:c8:41:98:d0:0e:fa:69:a8:e9:ba:7f:dd:cb:
d9:06:29:73:ef:6c:cd:6a:ab:63:62:40:9c:bf:ef:a4:6a:35:
75:2d:92:c8:ac:fa:e4:ac:fd:a2:0d:69:0d:16:65:9f:e3:23:
fc:18:1e:e9:9c:63:d1:1f:92:be:f2:8e:e1:28:4c:ef:32:08:
60:5d:d0:2b:ae:c9:4d:0b:bd:1b:65:ef:4d:2d:d2:f0:57:92:
be:83:a8:ca:9f:61:36:1f:a5:05:39:ed:4a:d9:5b:34:04:db:
ec:29:4a:4e:dd:f9:bf:2c:84:21:0b:45:74:a8:45:65:70:c6:
b9:98:85:82:b4:41:2f:57:6c:b9:8b:7d:cb:7f:79:8c:d0:e6:
db:3f:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:09:46 2025 by rpki-client