Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/j0ecjLziGy7oJfbiz0dIS6shkGo.roa
File: j0ecjLziGy7oJfbiz0dIS6shkGo.roa (raw, json)
Hash identifier: vZ3VHncsciWhxxsQQGaEaCjcGBrT59iyhwRkgDhbVS4=
Subject key identifier: 8F:47:9C:8C:BC:E2:1B:2E:E8:25:F6:E2:CF:47:48:4B:AB:21:90:6A
Certificate issuer: /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial: 01903524115F6B8ABC972905974B3916F238
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/j0ecjLziGy7oJfbiz0dIS6shkGo.roa
Signing time: Thu 20 Jun 2024 10:14:34 +0000
ROA not before: Thu 20 Jun 2024 10:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8758
IP address blocks: 185.168.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 10:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:24:11:5f:6b:8a:bc:97:29:05:97:4b:39:16:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9f4510444a17add7327146152943495ababb968
Validity
Not Before: Jun 20 10:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f479c8cbce21b2ee825f6e2cf47484bab21906a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:ae:0c:17:63:5f:88:95:e8:ce:2a:25:c0:
12:39:69:2f:75:25:a5:3f:a6:e9:9e:3a:11:ba:a4:
3a:17:9a:2a:81:83:f8:45:07:45:00:a1:2e:e6:5e:
cd:57:bd:0b:86:2e:e5:e9:12:52:49:af:b2:80:7c:
4c:d8:7b:22:ad:32:de:8f:cb:61:d5:94:94:f6:4c:
22:e3:e6:3b:dd:0a:66:e3:94:e4:d3:c5:26:ff:2a:
2f:55:e8:3a:c9:de:0a:b8:44:33:f9:f8:72:4b:1e:
5e:5a:d0:26:09:b8:c4:fd:8a:fb:40:7f:5d:fa:43:
50:9b:fa:a5:6a:03:e6:33:01:c7:c7:fc:0a:6c:7a:
0c:74:91:f0:78:95:4a:51:bf:70:3e:45:1e:98:ae:
d4:65:40:d5:a2:3e:9c:24:ef:28:fc:d7:fa:45:86:
2a:7c:54:04:5d:94:6a:0c:d1:e4:02:d8:a8:d5:67:
24:52:8e:d9:d5:8a:c1:42:62:39:02:62:0c:65:a3:
ce:06:11:f9:8c:f6:4f:2f:9c:47:df:74:1b:34:bc:
2b:e0:7c:f4:ee:59:81:6f:95:9a:27:62:24:ce:3a:
a5:f1:3e:6e:1d:11:13:98:91:fd:e9:cd:cb:75:70:
82:cd:22:7b:61:65:94:2a:aa:f8:91:b6:e0:67:68:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:9C:8C:BC:E2:1B:2E:E8:25:F6:E2:CF:47:48:4B:AB:21:90:6A
X509v3 Authority Key Identifier:
keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/j0ecjLziGy7oJfbiz0dIS6shkGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.143.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a0:b4:e1:c7:34:87:a3:3d:26:c4:35:a8:60:ca:6d:58:9b:
6c:32:78:12:ea:46:76:1d:6a:19:05:2d:de:64:04:17:c7:84:
4e:50:6a:7c:81:32:a6:a1:6c:f6:10:2e:a6:be:36:1d:5b:4f:
08:78:7b:8e:98:3d:dc:8c:c1:03:56:25:80:8a:40:2f:24:84:
97:79:a7:16:4a:8d:70:dc:d3:eb:c4:a4:07:dd:b2:a4:a0:4f:
31:f4:19:73:8b:5c:c5:1c:f2:d7:c4:32:63:91:f1:65:89:0f:
9e:af:ba:be:7d:3a:cf:ae:c4:c2:02:60:8b:e3:f9:ad:e2:6e:
b1:9d:58:69:24:50:32:65:56:26:95:c6:28:17:07:5b:b3:b9:
d7:1a:21:7c:da:db:89:cc:fe:93:ea:81:ef:ed:b9:23:95:54:
65:a7:8e:09:7e:c4:93:e5:94:2f:fa:21:2c:85:f2:e5:07:38:
bd:45:7e:f5:5c:18:13:69:5f:ac:c8:2b:ef:71:ca:ae:4e:54:
71:67:fa:a5:13:40:c7:b5:d0:c7:21:9b:a5:36:c4:93:d3:66:
2d:94:f9:61:ed:ee:6c:4a:21:2e:b0:15:55:a7:a3:37:40:79:
c7:37:5d:4d:b4:7e:32:48:1d:56:d1:9a:ca:6a:d3:bf:5f:89:
25:d1:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:05:28 2025 by rpki-client