Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/j0cxYgDocsW6alWe7FTZK9cs4D8.roa
File: j0cxYgDocsW6alWe7FTZK9cs4D8.roa (raw, json)
Hash identifier: U5hnXmucXElNgOBihk5qCqPThhHVS4p2SKj8Qi5wcFw=
Subject key identifier: 8F:47:31:62:00:E8:72:C5:BA:6A:55:9E:EC:54:D9:2B:D7:2C:E0:3F
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 0193CE8CECF798B29BD75DC2C1E6A626822E
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/j0cxYgDocsW6alWe7FTZK9cs4D8.roa
Signing time: Mon 16 Dec 2024 08:19:22 +0000
ROA not before: Mon 16 Dec 2024 08:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 86.105.18.0/24 maxlen: 24
89.42.212.0/24 maxlen: 24
93.119.123.0/24 maxlen: 24
94.177.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:8c:ec:f7:98:b2:9b:d7:5d:c2:c1:e6:a6:26:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Dec 16 08:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f47316200e872c5ba6a559eec54d92bd72ce03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:1f:7b:8d:8c:00:f8:72:57:be:ab:2e:b5:
37:bb:e9:42:18:30:61:aa:58:cd:84:30:04:13:c7:
c2:55:5c:4b:2a:07:bc:29:45:c5:a6:bc:12:31:a4:
6a:c4:1f:68:2b:12:d7:15:92:5e:36:6c:5d:ff:d0:
d0:a9:29:7e:4b:3e:53:dc:6d:7d:a4:b8:4c:da:ba:
64:c4:60:07:ae:a5:ff:d5:8f:27:ac:f1:83:7e:26:
08:37:6d:64:26:78:21:34:c6:99:a6:49:5a:df:00:
a0:e2:64:78:81:f5:50:a6:03:1c:fe:e2:6f:bb:bc:
c0:68:80:1c:b5:74:bb:d4:c1:69:8f:21:9f:31:09:
14:8f:63:ae:67:06:0c:43:d0:9c:b3:fc:87:81:75:
b3:89:d4:a6:41:40:99:fa:6a:9f:ac:72:98:19:9c:
46:f0:1f:4b:2b:34:a5:db:54:a0:d9:1b:09:59:b6:
02:88:01:de:1f:fd:88:c1:35:8b:fa:28:16:76:53:
7e:84:49:a6:f8:91:71:3f:aa:e1:36:7b:d4:2f:5a:
0a:63:b2:19:f5:8e:86:66:2e:77:66:f2:0a:d2:cd:
50:18:0b:60:1a:a6:7e:dd:14:3c:98:45:7f:88:76:
16:4c:fd:37:6a:25:e8:2a:c3:d3:ea:c1:8f:af:90:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:31:62:00:E8:72:C5:BA:6A:55:9E:EC:54:D9:2B:D7:2C:E0:3F
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/j0cxYgDocsW6alWe7FTZK9cs4D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.18.0/24
89.42.212.0/24
93.119.123.0/24
94.177.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a5:f4:17:72:25:c8:f6:4c:78:a4:53:c6:0b:bd:e0:e1:ef:
85:9f:55:3e:38:09:f8:11:3f:fb:fd:0a:bf:20:76:f8:d3:11:
f7:60:55:27:c4:e1:77:f4:8c:ef:5f:57:0e:e3:6a:f4:66:fd:
73:94:9a:dd:ba:d7:d5:8b:19:3c:44:f4:15:b5:50:75:e0:2b:
da:b3:a7:70:16:8f:af:62:79:5b:4c:ce:30:58:d3:23:93:40:
8d:44:3c:b7:47:ed:9c:73:87:44:a7:e9:26:ef:e7:95:8f:95:
85:d4:c7:db:cc:97:79:f4:c2:ec:59:02:bc:5e:9f:2e:fe:a4:
1c:ce:4e:0e:c0:cf:62:e8:fc:80:84:37:7b:92:52:05:1f:7d:
d1:bb:2f:d9:63:20:4b:55:fd:91:b6:9d:9b:89:86:e0:17:54:
37:01:64:f4:b3:3b:6b:9f:ae:2f:de:74:e7:cb:1a:f2:90:d1:
39:e4:0a:4f:75:23:4a:ad:80:fe:74:58:70:54:af:86:cf:f4:
45:0f:1b:53:6a:c8:4c:f6:e8:10:53:b0:0e:76:5c:22:eb:85:
af:31:0e:0b:e6:88:08:be:c1:60:a4:8f:6f:14:85:0d:70:a4:
b1:3a:10:c5:75:fb:2d:80:e5:df:52:06:77:12:3d:a3:49:60:
40:67:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:03:26 2025 by rpki-client