Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/j-U2Off1v9YLHuJNyb3rym0GGyM.roa
File: j-U2Off1v9YLHuJNyb3rym0GGyM.roa (raw, json)
Hash identifier: lDXRtklLqZ82P6GtIXOVL6EB/Kuzf5A0yG5h46x+jmo=
Subject key identifier: 8F:E5:36:39:F7:F5:BF:D6:0B:1E:E2:4D:C9:BD:EB:CA:6D:06:1B:23
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019603F0B91642825872376BBA2D46545A8A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/j-U2Off1v9YLHuJNyb3rym0GGyM.roa
Signing time: Sat 05 Apr 2025 03:13:49 +0000
ROA not before: Sat 05 Apr 2025 03:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6698
IP address blocks: 194.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:f0:b9:16:42:82:58:72:37:6b:ba:2d:46:54:5a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 5 03:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe53639f7f5bfd60b1ee24dc9bdebca6d061b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:3c:47:d8:5f:87:32:7a:31:43:21:9a:77:
45:ba:c0:1e:08:c3:32:42:a4:1b:23:4a:1c:07:40:
ad:24:de:b8:d0:7b:98:ef:be:e6:45:54:31:6c:62:
d3:66:eb:9b:f5:5b:54:46:f4:ce:10:8d:8d:71:cf:
66:8d:20:f6:a4:66:fe:36:50:bf:fa:1f:2f:d7:de:
85:18:2c:6a:12:93:5f:73:e1:7e:55:80:8d:fa:dd:
41:41:a7:58:b1:c5:39:f5:18:46:bf:79:1e:bc:5c:
b5:8f:d1:02:44:c9:bc:b2:55:00:08:8b:24:b9:7c:
c5:2d:e3:57:76:f8:68:1e:d7:1f:67:87:6e:09:0f:
4d:c9:5d:60:e4:66:38:16:a6:79:57:fc:f0:20:b0:
62:8d:0f:dd:a6:be:d5:1d:99:c9:fb:4b:40:04:28:
cc:0d:b7:24:8b:11:a7:9e:7f:d2:d2:dc:7a:eb:ae:
a1:3d:04:c8:94:4a:82:b9:ab:ee:f5:8d:ba:f1:54:
32:2f:d5:20:83:20:b9:e6:a6:12:13:19:79:9f:95:
58:cb:32:8e:e8:1a:41:77:ca:ce:7d:a1:e0:2d:d0:
bb:db:39:92:d6:fd:09:a1:5b:21:e2:02:eb:64:8a:
7b:57:14:aa:8f:04:2a:99:26:07:99:65:6a:db:02:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:36:39:F7:F5:BF:D6:0B:1E:E2:4D:C9:BD:EB:CA:6D:06:1B:23
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/j-U2Off1v9YLHuJNyb3rym0GGyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7c:58:f0:50:2d:27:cd:31:ab:56:72:b1:89:af:f7:a3:6e:
28:67:da:df:54:3c:16:d8:0a:e1:2c:03:de:65:c2:3d:24:32:
17:d7:04:87:96:b8:33:44:89:8d:41:f4:4b:cd:11:68:c7:22:
0c:d6:08:56:cd:58:5b:3f:1a:21:b9:a7:c9:8f:45:d5:a6:65:
f8:47:a6:a2:e8:fe:93:09:40:4d:9f:b6:2c:81:a2:c5:5e:33:
d1:65:a9:86:b4:b5:80:29:f5:4a:ee:b4:43:09:ec:88:0f:d8:
0a:df:8b:13:5d:25:d0:f8:94:f0:91:31:a8:2d:bc:08:d7:54:
c2:32:ed:ff:18:20:56:21:ca:34:11:7e:fd:bc:b7:46:47:eb:
4d:74:55:1c:4b:16:07:f9:25:37:2d:53:1c:a0:28:74:f1:8a:
02:56:6d:b0:96:09:9c:a5:30:cd:6f:b2:87:66:32:c1:54:83:
ca:6b:ef:ab:8f:e7:8f:25:8f:79:80:84:f2:1b:8d:ed:30:1d:
34:5a:d6:31:e6:ba:e3:93:0d:99:3b:24:24:b0:e4:e2:21:b9:
50:30:3d:92:05:68:64:bb:60:7f:87:81:f6:c0:87:5b:52:62:
be:8a:dd:dd:37:f2:7b:de:e3:11:34:ef:8b:60:7b:e1:96:c7:
1d:14:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:57:25 2025 by rpki-client