Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Jhn-GttP9uSZfGzivpw1fKOYGAo.roa
File: Jhn-GttP9uSZfGzivpw1fKOYGAo.roa (raw, json)
Hash identifier: WJT7p9GoXj2eGf68YmKl8LaMO3LDYgFqcdOosy+rJnE=
Subject key identifier: 26:19:FE:1A:DB:4F:F6:E4:99:7C:6C:E2:BE:9C:35:7C:A3:98:18:0A
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0195D1B8E45152676CE7115C33E9EF21F91A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Jhn-GttP9uSZfGzivpw1fKOYGAo.roa
Signing time: Wed 26 Mar 2025 09:11:49 +0000
ROA not before: Wed 26 Mar 2025 09:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57604
IP address blocks: 93.185.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 15:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b8:e4:51:52:67:6c:e7:11:5c:33:e9:ef:21:f9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Mar 26 09:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2619fe1adb4ff6e4997c6ce2be9c357ca398180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:22:b1:44:36:8c:9b:8e:28:e9:27:84:35:
13:6d:45:8c:1f:6f:6e:66:ba:50:6d:d0:6c:b1:81:
59:25:21:3b:96:30:0e:06:55:be:74:1f:4d:c6:6b:
de:a8:42:73:d5:b7:4e:a8:78:4d:5d:66:bd:e8:56:
d9:19:a6:b6:45:70:32:aa:f3:59:52:04:fb:88:d9:
94:d1:da:05:a2:53:25:aa:55:57:2c:aa:58:ec:6d:
4d:a6:31:7c:24:b0:92:d8:b4:98:a5:bd:ba:1a:de:
8c:84:8b:d0:e8:31:60:d7:83:8a:ad:b9:c7:12:79:
00:92:1e:f4:42:1d:99:8c:eb:9d:7e:4c:56:5a:a9:
57:e1:e5:13:7b:ed:43:79:f4:62:31:98:f4:40:0c:
fd:e1:df:95:24:1f:1c:46:b5:7a:ef:dd:33:1a:34:
eb:80:9c:64:56:18:0b:11:a5:41:cd:3c:51:0e:5c:
11:19:97:bb:7a:50:a8:74:0a:16:21:ce:44:cf:df:
1d:31:50:25:f5:06:2b:10:86:c1:31:b8:7e:93:c6:
59:58:3f:1f:37:41:e8:91:ab:3d:11:b1:71:56:7a:
f8:a7:3e:03:05:34:a5:cc:e0:88:84:c1:1e:8a:10:
8e:43:da:02:7c:40:4d:86:24:43:68:b3:92:e1:2a:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:19:FE:1A:DB:4F:F6:E4:99:7C:6C:E2:BE:9C:35:7C:A3:98:18:0A
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Jhn-GttP9uSZfGzivpw1fKOYGAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.164.0/24
Signature Algorithm: sha256WithRSAEncryption
89:35:20:48:0e:eb:87:c9:1b:87:6e:a6:20:39:e1:00:8c:a7:
1f:1c:b2:02:08:4e:b5:2d:0e:bc:40:29:e3:de:84:2e:90:4e:
ac:cf:d2:5b:e2:66:5b:ef:43:c3:e0:be:ec:b8:1e:78:b5:c5:
6a:5d:a8:1a:57:f4:24:86:78:5d:14:1e:fa:be:1b:b1:99:34:
46:15:96:78:7b:80:8b:c1:35:f7:e5:f1:40:fc:9d:44:96:c6:
3b:ac:73:ed:17:33:95:96:b0:96:5e:93:35:7f:6d:3c:c4:7b:
49:ba:b5:20:8e:43:25:58:1b:79:e1:98:4d:c3:7b:f4:52:1d:
fc:7e:c4:6a:bc:bf:c6:78:21:f1:ec:60:c9:d3:e4:b4:8d:67:
e5:a2:13:46:69:54:bf:66:22:96:3a:37:6b:d2:c3:e5:57:70:
5d:83:74:09:cd:9f:fa:95:1c:ed:44:61:1d:65:e4:97:04:5b:
90:21:cf:c6:4a:6c:91:ec:1a:6f:ec:be:dd:1c:1c:39:ce:f5:
ec:36:8e:8e:d1:86:50:ae:ca:f7:c2:28:13:78:24:8b:70:44:
19:8c:0d:cc:90:b2:13:17:a3:64:67:29:6f:6b:44:10:24:72:
af:5a:83:0a:8a:7d:85:06:50:2c:91:b7:88:1a:12:f9:cb:72:
07:1c:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:49 2025 by rpki-client