Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Js1nW787MXv0tYhUXGIO15pjh6w.roa
File: Js1nW787MXv0tYhUXGIO15pjh6w.roa (raw, json)
Hash identifier: IhP5oelYSMmWj2DggxmRWnp7cZDMaclrkxIi6bZkdg0=
Subject key identifier: 26:CD:67:5B:BF:3B:31:7B:F4:B5:88:54:5C:62:0E:D7:9A:63:87:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F23AF6F811082F2348A025EC9B04DE0B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Js1nW787MXv0tYhUXGIO15pjh6w.roa
Signing time: Wed 21 May 2025 09:44:32 +0000
ROA not before: Wed 21 May 2025 09:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 5.175.234.0/24 maxlen: 24
77.90.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 23:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:3a:f6:f8:11:08:2f:23:48:a0:25:ec:9b:04:de:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 09:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26cd675bbf3b317bf4b588545c620ed79a6387ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:42:9e:ff:f1:70:7a:c7:0a:c8:c1:88:44:
cb:58:27:bc:fb:3a:b9:7a:70:4c:31:dc:de:a2:44:
42:56:79:e6:ba:3a:e5:cf:10:51:37:d7:ef:1f:1f:
c0:79:e0:35:27:4e:4b:03:de:c2:4e:05:bd:95:ce:
f9:f1:20:9f:80:8c:7e:53:23:fb:9d:b1:86:71:c7:
5b:05:3e:16:4f:86:61:0f:f2:0d:a5:41:35:fd:a3:
72:a6:44:b9:b8:62:66:21:85:01:23:76:cb:1c:9a:
19:fc:e9:d1:37:14:72:df:8f:a0:83:6b:d5:91:ec:
81:bf:c2:00:43:f8:5a:ee:9f:57:56:b5:15:89:72:
49:71:d1:76:f0:e2:25:7c:df:57:55:bf:a7:56:96:
e7:0b:8c:52:70:29:47:f5:f2:22:7f:3d:cb:50:0e:
28:2c:c2:c2:f8:0a:34:53:50:46:1d:df:0b:55:54:
92:2d:9f:47:2f:80:fd:93:a9:51:15:c5:97:03:c2:
9d:90:20:42:30:8a:af:95:3f:25:14:66:04:24:c2:
8e:13:6c:04:51:96:98:a3:65:6a:ed:eb:4b:02:89:
3e:f2:26:3c:5e:2a:f6:94:60:6c:cb:9a:52:a2:e3:
69:6e:b7:22:de:a2:a9:51:c0:19:3b:30:2b:aa:15:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:67:5B:BF:3B:31:7B:F4:B5:88:54:5C:62:0E:D7:9A:63:87:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Js1nW787MXv0tYhUXGIO15pjh6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.234.0/24
77.90.21.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ee:c2:6c:44:2b:41:5a:20:2b:14:a2:92:3b:89:5f:4c:e1:
ff:bc:b6:6b:86:a3:37:cd:cc:20:9f:af:9a:ec:52:58:03:9b:
73:8b:74:fb:b6:3b:60:e6:30:44:9a:d3:70:6b:8a:bf:5a:96:
86:99:54:5e:64:a3:f4:3e:77:7c:07:c6:e7:42:37:d8:dd:ce:
ee:3b:3a:97:26:5a:70:60:3d:ed:1a:0c:00:f3:cf:72:cd:c1:
0c:32:9d:8a:c0:05:aa:90:8b:4d:2e:ca:33:ca:2c:c2:96:08:
ca:3a:bd:2c:76:60:17:1c:46:8e:51:1e:fd:b9:b3:95:9d:46:
f7:fc:67:28:97:42:bf:1e:0f:3e:cd:94:de:db:b8:61:fe:27:
a9:fd:b0:c4:e6:94:bf:bb:bd:f8:50:de:cc:ea:92:4b:b0:cb:
aa:11:be:70:76:19:3d:14:06:82:78:16:29:9c:18:1d:d1:11:
b8:29:ad:03:dc:c5:f9:76:fa:36:26:b0:65:4c:77:30:80:36:
a2:69:52:d0:0e:47:de:7a:ab:49:ec:0d:fa:26:8a:77:43:06:
82:9d:a2:83:06:64:7d:6c:af:4c:d9:e3:82:30:29:1f:17:63:
84:31:c3:1a:0a:dd:8b:13:e6:c9:93:6f:9c:4f:53:40:84:b7:
48:76:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:49 2025 by rpki-client