Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jp-w2RDuz0DGeSWhTEgSmjpxxzQ.roa
File: jp-w2RDuz0DGeSWhTEgSmjpxxzQ.roa (raw, json)
Hash identifier: /r8hgj50OzOAgzwYH9rAcXwMPo9dfO2k+Ug4MaMw2Y4=
Subject key identifier: 8E:9F:B0:D9:10:EE:CF:40:C6:79:25:A1:4C:48:12:9A:3A:71:C7:34
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019754C8D73EFD328D2E010334272D0A2686
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jp-w2RDuz0DGeSWhTEgSmjpxxzQ.roa
Signing time: Mon 09 Jun 2025 13:02:17 +0000
ROA not before: Mon 09 Jun 2025 13:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.26.0/24 maxlen: 24
89.21.84.0/24 maxlen: 24
194.61.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c8:d7:3e:fd:32:8d:2e:01:03:34:27:2d:0a:26:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 9 13:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e9fb0d910eecf40c67925a14c48129a3a71c734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:28:f3:3c:04:fb:f2:8c:87:73:a3:d2:85:
c0:6d:70:b2:d8:90:38:d0:77:fe:55:a3:82:53:cd:
58:8a:e9:31:00:87:5c:7c:5b:ee:c5:26:54:36:fa:
94:fc:4b:f9:6c:ec:b3:27:fe:fe:f7:88:b0:ca:72:
4c:46:35:2a:52:63:fc:a7:0f:e8:16:9c:ce:f1:59:
72:d7:12:7c:48:54:a3:4c:7b:02:35:1d:19:b6:0f:
5e:56:1d:d7:8e:96:f3:d5:ab:8a:d2:86:9b:6d:39:
9b:f8:2e:d7:ed:b8:fb:65:38:9e:50:54:c0:f7:d4:
31:34:ae:7a:7f:51:f1:f8:2c:c9:67:79:3f:23:fa:
71:e3:3e:05:8e:e3:22:d6:96:08:ee:67:b4:c5:be:
2a:ca:97:ba:bf:9a:a6:9d:6f:e0:46:79:09:16:ac:
6a:46:44:9b:46:f3:f8:45:78:a8:02:42:b0:3e:26:
44:6f:05:bd:4c:4e:a5:73:18:63:e9:68:1a:06:47:
c1:1c:f0:f4:7d:98:4d:7e:79:9a:a6:6b:21:02:0a:
7b:14:64:fe:9c:8e:cf:0a:9b:f3:b7:9a:0e:f7:0a:
ce:48:dc:f3:3b:0a:77:dd:7a:7f:e4:69:bd:0a:60:
0a:2f:b4:d9:7c:93:dd:9e:e8:07:56:d4:43:98:d6:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:B0:D9:10:EE:CF:40:C6:79:25:A1:4C:48:12:9A:3A:71:C7:34
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jp-w2RDuz0DGeSWhTEgSmjpxxzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
89.21.84.0/24
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:44:f3:61:30:92:f0:b1:03:9a:14:d6:c7:73:10:dd:0f:d8:
1a:46:07:90:59:88:b4:da:72:1b:e6:b3:89:10:10:c7:3f:d7:
95:5e:f3:db:e3:75:9e:db:d6:00:d8:2c:88:a6:94:c8:00:91:
95:f3:fa:51:4c:71:f2:fc:4a:6e:1f:7d:ba:3e:0b:bf:c6:fe:
fb:a9:0d:0f:fe:70:9a:43:ac:68:5b:c9:74:67:3a:6c:04:17:
ee:dc:8e:1f:0e:59:19:b6:a0:65:66:ed:7f:ee:f9:21:2c:c2:
df:ee:c2:21:1e:a0:41:da:51:4c:f9:43:47:dc:7a:0b:53:7a:
07:75:be:94:88:a8:7c:75:c1:2b:97:66:e7:1a:76:ad:c9:d9:
d7:e3:5c:ac:7d:21:d2:30:96:67:63:3e:a6:b3:93:99:d1:2e:
af:7e:0d:fd:a6:3d:8e:b9:88:cc:d6:dd:3e:65:f9:3c:17:30:
97:f6:2e:83:98:dc:fb:63:fd:6f:bc:83:ac:b4:bd:c0:ba:b6:
dc:d9:f7:42:f8:97:8a:b2:e8:67:cf:99:60:47:15:7b:79:08:
07:10:df:eb:b9:54:b3:cb:61:d3:0c:21:07:2f:62:2c:4a:c6:
da:eb:b0:b8:51:4a:6c:d0:5a:e6:95:ce:67:ad:7b:3c:d7:61:
36:e1:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:31:52 2025 by rpki-client