Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/JHO4JTtzzMfgkEERx9BbM0O1n6Y.roa
File: JHO4JTtzzMfgkEERx9BbM0O1n6Y.roa (raw, json)
Hash identifier: /JBifWUyeNiCcHC49m38VxKMp8BYdMmfnaXKQ7emK+k=
Subject key identifier: 24:73:B8:25:3B:73:CC:C7:E0:90:41:11:C7:D0:5B:33:43:B5:9F:A6
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194DF1387883082E5697BF53F2E6598DE67
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/JHO4JTtzzMfgkEERx9BbM0O1n6Y.roa
Signing time: Fri 07 Feb 2025 06:23:06 +0000
ROA not before: Fri 07 Feb 2025 06:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.62.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 15:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:13:87:88:30:82:e5:69:7b:f5:3f:2e:65:98:de:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 7 06:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2473b8253b73ccc7e0904111c7d05b3343b59fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:28:d2:6f:ff:98:39:85:3e:ed:a8:84:36:
ea:8f:b8:77:c1:85:92:ed:77:c1:9d:b9:00:d3:9a:
bc:dc:88:03:7b:d9:78:5b:c1:f4:c8:bb:b9:ef:20:
7e:92:ae:c9:1b:68:8e:63:f8:3e:f6:5e:c1:4a:25:
82:41:80:93:50:0b:73:a1:78:f2:db:fb:35:7a:ed:
b4:7e:ce:70:d6:dc:05:71:23:50:e4:e2:ee:d3:93:
5b:f8:e8:41:85:9f:22:6e:2e:f2:5b:d2:7d:c4:ae:
e4:81:fc:58:40:5a:37:ec:d8:c9:c0:dd:19:37:db:
c9:74:0b:e4:39:19:e8:00:0a:1c:40:23:1b:77:ab:
9c:33:22:f5:77:1f:2b:9d:1c:ca:f3:09:44:44:b4:
6c:14:ec:64:ee:5b:d0:8e:79:d9:94:3a:e7:3f:ae:
2a:d9:9f:df:9a:4d:ba:26:c4:6c:13:19:38:68:0c:
a5:34:c5:74:e6:e1:fe:82:d9:54:96:1f:9c:f8:9f:
33:c2:b6:c0:2b:0c:a2:3d:95:f7:1d:08:42:83:16:
8e:12:23:db:c7:5f:38:63:6a:c8:b3:fc:d0:2e:e2:
28:d8:86:7a:d4:d1:41:58:7c:05:01:22:d3:c0:a7:
1d:db:74:2d:ec:58:73:a2:ed:d0:2f:9b:2c:54:f1:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:73:B8:25:3B:73:CC:C7:E0:90:41:11:C7:D0:5B:33:43:B5:9F:A6
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/JHO4JTtzzMfgkEERx9BbM0O1n6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1a:c4:ed:d9:a6:0e:bf:2a:a2:9b:5d:61:a0:57:b1:54:30:
ba:1d:a7:e0:4b:cc:0d:e5:f7:f1:e5:e8:8d:74:30:55:40:d6:
c5:81:e8:dd:eb:2e:e6:ca:d2:e8:e5:70:ea:0d:0c:5a:f4:d4:
1d:9b:67:04:38:ac:2b:e4:bf:f1:73:30:36:b6:cc:1b:3e:47:
70:bc:73:d0:6c:d0:40:89:db:c7:61:8a:5e:7d:dc:6c:1e:2d:
4c:4c:20:e3:fa:a4:1f:c4:0b:5d:64:89:5e:2b:3a:d7:8a:65:
76:31:20:54:7b:f7:74:91:e9:91:cb:15:2e:a0:b9:44:50:20:
58:0e:2e:27:e6:0c:7d:b6:cd:9a:b3:e9:73:62:17:b1:c4:e6:
1f:5b:e2:9b:b9:af:97:3c:f4:9c:ba:40:8c:73:4d:0a:0b:d7:
1a:3e:b4:8e:20:46:90:1c:9c:2d:fd:13:ee:83:69:80:91:c8:
fa:1d:83:fa:96:de:de:59:59:c0:30:fa:0c:13:b5:09:11:79:
ca:cc:00:d5:cc:71:a6:82:a0:98:f7:25:ca:bc:4e:89:ca:08:
26:44:86:6e:f7:33:55:2e:e3:a3:a0:17:6e:5c:f6:f0:ee:02:
11:a8:a8:82:98:5a:96:c9:9a:73:3c:b3:7a:ab:de:b1:26:37:
8f:6f:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:04 2025 by rpki-client