Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ju6MMkfcjnclrpbY1AGhlbTeRuc.roa
File: ju6MMkfcjnclrpbY1AGhlbTeRuc.roa (raw, json)
Hash identifier: Aa4p9veYQ/pUweCXxO8JcFzi5Zf2XHjhNXdRUMuUFbw=
Subject key identifier: 8E:EE:8C:32:47:DC:8E:77:25:AE:96:D8:D4:01:A1:95:B4:DE:46:E7
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01979E6FE84855C07278AFF40277F60C1021
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ju6MMkfcjnclrpbY1AGhlbTeRuc.roa
Signing time: Mon 23 Jun 2025 20:17:03 +0000
ROA not before: Mon 23 Jun 2025 20:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 04:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:6f:e8:48:55:c0:72:78:af:f4:02:77:f6:0c:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 23 20:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eee8c3247dc8e7725ae96d8d401a195b4de46e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:0e:37:33:52:82:78:a5:73:dd:c3:dd:8f:
f6:54:88:5e:31:8a:02:3b:0f:c6:bc:cc:6d:e6:6e:
28:b8:aa:e1:20:1b:09:a1:86:cc:18:a3:32:34:e2:
1e:c2:a0:02:83:07:10:e6:42:52:0f:10:2b:15:50:
41:93:6e:55:5e:d1:7f:c1:23:18:11:f8:3c:b5:9a:
96:2c:5c:26:f8:db:3a:a4:a0:cb:f9:90:4f:64:c7:
2f:98:03:9b:13:b2:57:2e:34:d5:86:2e:8a:27:74:
f9:4e:7b:a1:de:8a:42:ec:d0:20:8f:ad:88:0d:1f:
16:50:79:59:5a:07:f3:fa:7d:8a:70:f6:93:88:5a:
3f:a0:82:39:9a:f6:f1:da:49:61:ff:4d:40:f3:52:
2b:19:70:b3:65:a1:64:3c:dc:07:ed:ff:99:11:94:
d8:42:dd:44:c6:4f:33:86:dc:28:32:9c:29:cd:2b:
90:3c:bd:10:59:aa:2b:90:87:94:5e:53:a5:c6:de:
6a:eb:b2:ba:53:7e:bf:fe:d1:a3:90:7a:88:d8:35:
c7:dd:d2:2c:cf:f8:59:a4:12:2c:45:13:5f:c7:3a:
29:d0:7e:dc:9a:fd:31:73:b1:8f:49:16:32:67:02:
70:57:5c:94:4c:7c:13:f2:f1:6d:95:4c:96:c9:8f:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:8C:32:47:DC:8E:77:25:AE:96:D8:D4:01:A1:95:B4:DE:46:E7
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ju6MMkfcjnclrpbY1AGhlbTeRuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c6:77:cc:11:f0:09:b0:c8:04:6d:91:b3:fb:21:82:e7:9a:
e6:62:cb:d5:84:4c:5f:02:79:bc:e8:bb:26:92:a6:85:f6:f6:
18:fd:ac:2e:da:a3:3c:a8:16:95:fd:8f:f4:b8:cb:a3:b9:36:
63:17:2d:c4:59:ff:0e:79:c0:79:d7:23:34:ba:9c:68:b7:6c:
f8:6f:ac:42:92:b8:24:d7:fa:0b:a0:97:73:d5:67:6e:4c:f4:
89:17:96:84:e7:a7:73:cd:db:e0:bc:72:43:34:0a:96:ed:f9:
60:77:76:8f:27:21:77:2c:fc:f3:9f:54:64:ad:5b:19:ff:a9:
12:8f:fe:ab:80:50:85:37:9d:3a:49:61:f5:cb:ea:a5:af:26:
cd:95:b1:d9:d4:6b:62:53:0c:d1:9a:88:9f:2b:05:28:11:f1:
c4:6a:e9:69:e4:9e:8e:50:63:4f:52:08:60:b5:c9:37:c6:32:
88:ce:3d:1c:02:4d:ad:e4:89:a4:e2:21:c7:ce:64:8d:ad:90:
62:d9:e8:74:01:f4:56:41:0e:7c:75:f0:98:89:f3:e5:c8:bf:
4f:32:4c:f2:66:47:da:c5:aa:6e:95:a6:8e:28:33:7f:fc:e6:
2f:e5:0f:a3:88:19:41:2a:1f:5a:69:86:56:d2:81:25:6f:02:
bd:25:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:10:00 2025 by rpki-client