Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JQoDcWAatplGLA7qeje3iFQOZy4.roa
File: JQoDcWAatplGLA7qeje3iFQOZy4.roa (raw, json)
Hash identifier: Ajw+I477wgA1n/WgEBD9JRPpreR3R4KhPun005weL1k=
Subject key identifier: 25:0A:03:71:60:1A:B6:99:46:2C:0E:EA:7A:37:B7:88:54:0E:67:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194FFF3EBB163965E0C54539764E9BF1867
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JQoDcWAatplGLA7qeje3iFQOZy4.roa
Signing time: Thu 13 Feb 2025 15:36:03 +0000
ROA not before: Thu 13 Feb 2025 15:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401120
IP address blocks: 94.156.105.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 11:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:f3:eb:b1:63:96:5e:0c:54:53:97:64:e9:bf:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 13 15:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=250a0371601ab699462c0eea7a37b788540e672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:45:64:ca:70:fa:b6:cc:76:5a:03:b1:17:
58:8c:76:75:ea:6e:05:85:50:60:2b:8b:6a:10:c4:
43:0a:ad:24:81:b4:7d:6c:e9:04:20:51:1e:26:0c:
3c:2a:a9:81:b2:32:1f:d7:c1:ba:fe:35:72:fe:30:
79:e5:29:2e:d6:b8:c0:e4:79:af:44:e5:0c:e6:f2:
6d:66:4b:56:5e:19:13:68:8e:10:86:e8:38:93:98:
1d:e9:99:69:3c:2e:f4:87:33:d6:4a:93:0c:bb:a0:
2b:32:8f:f9:6f:4f:91:f3:6b:86:d5:96:b7:eb:fc:
ff:ca:1e:81:a7:6b:ea:0e:83:d1:36:b4:fa:b6:b0:
b8:0d:51:76:3a:c6:7c:8e:60:3a:8d:a8:d4:23:dd:
a0:4b:4b:e2:a5:23:2c:d0:0b:5f:ad:1e:e8:ce:e3:
4a:42:d5:17:79:24:99:9b:c2:40:6c:32:2b:58:fc:
f6:44:78:6f:69:85:f5:76:e2:6a:3c:ed:a8:f5:98:
a6:fe:6c:c4:1c:53:0c:09:06:74:33:a8:3e:36:0c:
43:ce:fe:7e:c2:2e:51:22:81:31:50:53:9d:19:23:
be:b1:09:b9:94:7d:e3:ba:ca:8a:8a:bd:a9:b4:6b:
b2:fb:83:ac:4e:8a:c1:d8:4a:71:83:54:35:39:fd:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0A:03:71:60:1A:B6:99:46:2C:0E:EA:7A:37:B7:88:54:0E:67:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JQoDcWAatplGLA7qeje3iFQOZy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.105.0/24
94.156.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8b:f3:80:24:8f:d6:e8:6e:ba:19:c5:e5:47:e7:48:f1:77:
bd:88:74:bd:13:51:d3:b2:c5:47:4f:76:e8:62:78:83:54:c5:
d4:30:3f:af:f2:93:70:54:d3:97:60:4d:b6:e9:b6:4b:c0:4c:
57:c1:aa:7a:4b:a1:61:ba:7e:5b:95:bd:f3:a3:e3:bf:c3:84:
b8:0b:95:a9:4a:d0:4c:01:2b:e3:7b:af:ad:70:27:8f:70:2f:
20:da:50:11:69:bc:42:37:38:e7:42:21:3a:46:3e:f8:85:1e:
2c:38:c6:1d:28:e9:fd:f8:6f:04:44:3a:1e:66:fd:aa:ba:f5:
e8:92:c9:45:11:b1:1f:d2:82:d2:be:6c:ec:f6:eb:54:0f:2a:
d4:1d:e7:11:e0:2e:38:9a:dc:8c:81:d8:29:b2:b3:94:ca:3d:
28:58:84:81:9e:32:00:2f:cf:48:04:15:4d:25:6b:cf:a8:45:
02:4a:ce:22:d1:e1:7d:f0:43:0c:03:cb:59:3e:c4:c7:af:cc:
1e:d4:9b:08:37:91:0c:a3:a1:c0:24:2f:50:3b:7b:53:64:d2:
f3:80:2b:b5:22:a2:d5:77:fd:cc:61:11:49:07:46:93:ee:4b:
10:2c:9b:9f:32:bc:7f:fc:b9:11:48:21:ef:7f:c1:cb:e6:a4:
e9:40:b3:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZT/8+uxY5ZeDFRTl2TpvxhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjEzMTUzNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTBhMDM3MTYwMWFiNjk5NDYyYzBlZWE3YTM3Yjc4ODU0MGU2NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZhFZMpw+rbMdloDsRdYjHZ16m4F
hVBgK4tqEMRDCq0kgbR9bOkEIFEeJgw8KqmBsjIf18G6/jVy/jB55Sku1rjA5Hmv
ROUM5vJtZktWXhkTaI4Qhug4k5gd6ZlpPC70hzPWSpMMu6ArMo/5b0+R82uG1Za3
6/z/yh6Bp2vqDoPRNrT6trC4DVF2OsZ8jmA6jajUI92gS0vipSMs0AtfrR7ozuNK
QtUXeSSZm8JAbDIrWPz2RHhvaYX1duJqPO2o9Zim/mzEHFMMCQZ0M6g+NgxDzv5+
wi5RIoExUFOdGSO+sQm5lH3jusqKir2ptGuy+4OsTorB2Epxg1Q1Of2vFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCUKA3FgGraZRiwO6no3t4hUDmcuMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSlFvRGNXQWF0cGxHTEE3cWVqZTNpRlFPWnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpxpAwQA
XpynMA0GCSqGSIb3DQEBCwUAA4IBAQCsi/OAJI/W6G66GcXlR+dI8Xe9iHS9E1HT
ssVHT3boYniDVMXUMD+v8pNwVNOXYE226bZLwExXwap6S6Fhun5blb3zo+O/w4S4
C5WpStBMASvje6+tcCePcC8g2lARabxCNzjnQiE6Rj74hR4sOMYdKOn9+G8ERDoe
Zv2quvXokslFEbEf0oLSvmzs9utUDyrUHecR4C44mtyMgdgpsrOUyj0oWISBnjIA
L89IBBVNJWvPqEUCSs4i0eF98EMMA8tZPsTHr8we1JsIN5EMo6HAJC9QO3tTZNLz
gCu1IqLVd/3MYRFJB0aT7ksQLJufMrx//LkRSCHvf8HL5qTpQLN0
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:04:17 2025 by rpki-client