Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/J_D9qXGDX_rF52FZ2foOqini9oc.roa
File: J_D9qXGDX_rF52FZ2foOqini9oc.roa (raw, json)
Hash identifier: Y+zWHWr6i709sDVscOFaELPOKHA4xtRhH1i1QXyfbzE=
Subject key identifier: 27:F0:FD:A9:71:83:5F:FA:C5:E7:61:59:D9:FA:0E:AA:29:E2:F6:87
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 019368C67C9C0B401EC4B10EBFDB4638AEF4
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/J_D9qXGDX_rF52FZ2foOqini9oc.roa
Signing time: Tue 26 Nov 2024 14:00:58 +0000
ROA not before: Tue 26 Nov 2024 14:00:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8368
IP address blocks: 46.243.24.0/21 maxlen: 24
85.158.208.0/21 maxlen: 24
94.158.248.0/24 maxlen: 24
178.132.8.0/21 maxlen: 24
188.64.72.0/21 maxlen: 24
188.118.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 15:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c6:7c:9c:0b:40:1e:c4:b1:0e:bf:db:46:38:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Nov 26 14:00:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f0fda971835ffac5e76159d9fa0eaa29e2f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:26:11:cf:c5:7f:c5:54:a7:ad:5b:5c:b0:
31:93:c6:7c:62:1a:75:a1:66:cb:d7:a4:d4:4d:a1:
aa:85:e3:ba:42:2c:a4:23:f8:ad:2e:18:8c:12:fd:
e4:4d:7b:89:3f:29:d2:02:45:da:ad:74:9f:6e:47:
50:63:1c:e0:bf:e4:cc:bd:2c:fd:1f:c1:39:5d:f3:
f5:f0:06:80:60:54:1d:6b:ba:2d:84:4c:4d:20:d0:
91:bf:98:46:61:ae:35:57:87:ff:70:6a:8c:35:fa:
c6:22:97:26:0c:5c:d0:aa:fa:1e:e5:b3:8f:de:66:
b6:e0:64:cf:e4:bb:f3:88:02:5c:b5:e8:94:78:c9:
a1:68:13:38:8d:84:43:71:8c:00:d9:de:14:42:96:
74:2d:56:53:47:2c:45:89:00:69:57:66:51:e7:47:
1f:bd:94:3a:b1:80:cc:98:37:ec:71:0e:f9:ca:c2:
82:d4:d0:62:a2:e3:4f:29:1f:bb:ac:26:6c:90:42:
46:fe:3c:e8:b1:bc:2a:43:c5:f7:fb:37:ec:c0:dc:
c4:51:f2:54:3f:f9:a4:dc:10:eb:ab:a7:0c:0c:e7:
fb:63:45:0e:8b:65:d9:cf:7b:52:de:4e:d9:59:2e:
ed:2a:28:fb:5e:fc:db:5b:f3:0f:64:cc:7e:0b:24:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:FD:A9:71:83:5F:FA:C5:E7:61:59:D9:FA:0E:AA:29:E2:F6:87
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/J_D9qXGDX_rF52FZ2foOqini9oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.24.0/21
85.158.208.0/21
94.158.248.0/24
178.132.8.0/21
188.64.72.0/21
188.118.0.0/18
Signature Algorithm: sha256WithRSAEncryption
41:0f:9c:9b:7e:54:aa:d4:5a:a3:b3:c2:2d:64:3a:e3:f5:2b:
ac:3e:2f:81:81:17:19:58:73:24:6a:5d:29:1e:72:e9:b2:95:
5c:ec:56:01:e6:3a:dc:80:2a:9e:b6:4b:71:2b:ef:a8:72:63:
09:4e:59:c1:dd:aa:c7:a9:9e:88:dd:49:6c:33:fa:b9:8d:44:
f2:90:26:1b:92:22:45:d9:00:33:65:93:fb:b1:2d:ca:cb:c1:
55:51:59:72:4e:23:7b:2a:9b:dc:54:34:ee:52:35:0a:ac:75:
80:66:43:ed:0d:cd:2e:06:0a:2d:8f:0c:86:d2:ef:1a:c5:57:
e6:9b:01:4f:62:85:4b:a6:92:e7:ce:01:94:78:a9:a5:07:42:
db:77:06:15:1b:02:72:a0:1f:d0:b3:b4:91:d1:e6:7a:cc:02:
72:27:96:30:86:56:6b:ae:51:e8:4f:a5:8e:f7:01:7c:4b:d0:
a2:32:cf:a7:be:ca:df:eb:c6:0e:f2:8e:71:00:9e:89:75:c6:
33:62:4c:31:1e:bb:1c:08:8b:09:d5:2a:d2:81:ad:ad:e5:84:
88:f2:5d:a6:dd:36:9c:c8:96:92:31:a8:a7:1d:d3:a3:87:63:
2e:0f:2e:66:04:13:0f:d0:99:b0:30:fd:0a:d6:98:1c:30:44:
21:b9:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:38:03 2025 by rpki-client