Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/JVX4Ula3L8xtvEUtEqLCwyH1WTU.roa
File: JVX4Ula3L8xtvEUtEqLCwyH1WTU.roa (raw, json)
Hash identifier: 8yLHZ8y30AmN6GJfTUs2DuINK/N6/a36iy3RUHInw4w=
Subject key identifier: 25:55:F8:52:56:B7:2F:CC:6D:BC:45:2D:12:A2:C2:C3:21:F5:59:35
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 0194266C153C37C7E676188F83F6F8F5A5EA
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/JVX4Ula3L8xtvEUtEqLCwyH1WTU.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60847
IP address blocks: 91.244.227.0/24 maxlen: 24
185.92.12.0/24 maxlen: 24
185.92.14.0/24 maxlen: 24
185.92.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 21:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:15:3c:37:c7:e6:76:18:8f:83:f6:f8:f5:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2555f85256b72fcc6dbc452d12a2c2c321f55935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:dc:fc:4b:ff:d5:46:76:33:6f:4e:af:e6:
eb:3b:be:1b:f0:e4:13:ab:b4:1a:d8:3f:60:99:2c:
19:ff:cf:b2:24:50:f1:28:25:75:1b:21:51:e2:d5:
08:5a:82:00:7f:1f:93:f3:70:54:50:10:1b:dd:0b:
96:79:4f:2e:79:fd:ed:6d:98:c0:c6:39:3c:db:81:
72:8e:f2:97:07:92:4a:35:1b:dc:ee:e8:8f:7d:8e:
33:84:54:eb:aa:c2:ae:d5:da:68:fd:c4:7e:86:0a:
6d:bd:fd:49:c7:e0:41:92:34:3b:d4:79:d6:55:ef:
54:8e:e1:fc:42:d9:00:0a:c0:8a:12:3a:43:ab:33:
c3:3b:96:a1:ec:18:56:29:8c:24:42:52:98:e3:83:
fb:aa:11:21:ea:84:ea:df:7c:df:1f:de:c7:05:bd:
8a:2a:ce:42:d8:d3:22:00:bf:6f:44:f7:0a:f5:dd:
69:47:10:9c:71:b3:d9:15:e8:aa:a0:0b:a3:8b:c1:
86:62:57:d8:38:9e:37:4d:0b:dd:29:f8:77:4d:ef:
2b:bd:6e:e1:3c:8b:a4:e2:bf:8f:d1:27:22:b9:c6:
c2:b2:6f:ed:21:a0:5c:ce:70:fe:f7:8a:99:2d:17:
87:b7:9a:75:9a:03:b6:63:f5:50:94:40:ee:28:8c:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:F8:52:56:B7:2F:CC:6D:BC:45:2D:12:A2:C2:C3:21:F5:59:35
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/JVX4Ula3L8xtvEUtEqLCwyH1WTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.227.0/24
185.92.12.0/24
185.92.14.0/23
Signature Algorithm: sha256WithRSAEncryption
57:80:df:e8:4e:fa:49:4c:1a:12:f7:f5:7a:03:1e:73:d1:a5:
6a:e0:10:ca:7f:9a:2e:39:8d:49:ad:36:ba:ef:50:b2:cd:32:
d8:35:e3:29:a3:1c:90:93:56:c0:c2:23:74:51:c0:98:5e:c8:
2a:ab:8f:14:34:62:04:a4:5d:51:77:f1:7c:13:d7:53:50:34:
bc:8b:b1:09:2f:d4:d6:73:39:0c:0e:b9:0a:c3:b6:fb:81:22:
bc:e9:86:c9:17:f4:c5:65:5d:6b:a2:ef:95:a2:5f:10:37:6e:
72:e2:d5:d3:25:a8:0e:14:40:f7:e0:87:78:1d:35:1e:53:3f:
78:6c:30:a7:da:dd:46:4d:df:10:f1:6f:50:e1:6a:93:28:54:
27:97:fc:00:14:94:38:1b:e9:a5:db:55:ca:ba:7e:40:74:82:
67:88:72:9d:aa:e4:b7:7d:a1:3d:ad:79:6f:33:17:77:00:09:
4a:15:7b:73:8c:62:26:2b:95:f4:36:de:25:cb:98:b6:72:90:
f8:ee:46:62:10:1f:2f:98:0e:f3:4c:b8:ec:7b:2b:9a:93:30:
a7:f3:9a:0c:33:0a:7b:f5:78:61:6b:e2:9e:6e:dc:9c:bb:ad:
66:24:da:a4:19:f9:22:9a:0e:bb:e3:37:fe:6e:90:ca:d2:dc:
18:38:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:56:01 2025 by rpki-client