Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JZS-BGakimEwrv3QbsXN_pmDZXI.roa
File: JZS-BGakimEwrv3QbsXN_pmDZXI.roa (raw, json)
Hash identifier: /h6X8teiyF0lJDbUuBhHz7NvD5Rfj1un7gTNCA8I/Yc=
Subject key identifier: 25:94:BE:04:66:A4:8A:61:30:AE:FD:D0:6E:C5:CD:FE:99:83:65:72
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786EFFACAD4769A5D540BE6B22669328B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JZS-BGakimEwrv3QbsXN_pmDZXI.roa
Signing time: Thu 19 Jun 2025 06:46:03 +0000
ROA not before: Thu 19 Jun 2025 06:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.245.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 07:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:ef:fa:ca:d4:76:9a:5d:54:0b:e6:b2:26:69:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2594be0466a48a6130aefdd06ec5cdfe99836572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:8c:cf:f6:c0:fb:87:01:d0:39:da:c8:5f:
69:07:ea:73:64:06:93:4c:c5:dd:27:0f:8d:0c:a4:
70:b1:6e:2a:23:0e:25:36:a6:1a:49:59:ab:42:c4:
e7:93:12:d0:e4:b4:71:ac:b4:9a:f3:a3:af:54:a7:
52:64:fb:11:35:c9:5e:14:e7:ea:29:3a:0e:f1:f7:
b1:1c:3c:57:42:da:a5:9c:fe:1b:90:0f:22:51:0c:
cd:d7:b7:df:20:ee:4c:05:73:f5:0d:86:d6:6d:46:
e2:40:48:f8:c6:8e:c0:9e:6c:81:4d:11:2b:0a:33:
f2:33:61:a9:46:f9:7c:e1:5d:54:e0:5d:b4:f2:7b:
4a:38:29:36:97:3a:31:76:34:c6:02:cd:eb:65:7c:
b6:8a:f9:11:1d:88:9f:61:7f:07:43:77:72:80:1d:
8a:eb:53:ff:b3:b4:53:4d:3f:15:a3:74:a5:4d:14:
16:95:1d:ba:7a:e2:15:73:87:1c:27:e3:e4:aa:55:
22:6f:06:27:12:64:8e:87:29:08:49:d1:fc:a0:82:
1a:95:6f:08:3c:83:51:f9:77:cd:de:f5:27:d7:f3:
d1:fd:91:1e:49:32:26:95:d9:5f:70:76:78:05:56:
30:21:a5:00:c5:d8:1d:4a:92:8b:87:e1:2f:67:96:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:BE:04:66:A4:8A:61:30:AE:FD:D0:6E:C5:CD:FE:99:83:65:72
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JZS-BGakimEwrv3QbsXN_pmDZXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.14.0/24
151.240.17.0/24
151.241.76.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.160.0/22
151.244.78.0/24
151.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b8:45:71:a0:b1:61:23:50:17:aa:87:e2:3e:2c:15:bf:cc:
7f:8e:55:50:d4:72:cf:fa:19:bd:e8:4a:c3:95:fe:81:1f:a1:
df:e1:74:69:21:87:4a:75:5c:06:f9:44:9c:0e:b0:09:4e:fb:
22:20:0c:de:e6:6c:98:af:20:6f:0a:7d:17:aa:80:40:16:58:
86:2e:e7:b0:2d:48:9d:bc:7a:d3:ff:4c:db:90:52:3a:e8:8e:
e6:02:17:f8:e2:56:cf:52:cd:be:da:da:34:33:1c:24:32:bf:
73:37:20:47:99:da:5d:fd:52:0e:04:70:ef:53:9b:d4:d0:35:
10:e7:ec:24:b6:1e:69:88:89:a6:d8:f0:ad:33:91:bd:f5:98:
7e:a5:06:7c:0c:f2:0e:3d:1a:8e:15:7c:29:76:6d:6f:eb:2d:
ce:d8:11:e7:ec:85:0c:9c:c3:3c:8d:9f:8d:b3:d2:01:a0:a8:
34:90:5b:87:e7:f0:57:9c:b5:e8:6f:7d:14:34:eb:0d:20:d1:
43:8e:b5:de:c0:bb:3a:e6:cd:37:32:b1:c4:62:39:92:81:5b:
e9:a3:c0:98:d3:8f:af:36:2d:2a:a2:d9:03:0d:5a:6f:d0:d9:
46:37:67:b2:20:2f:c7:d5:27:86:89:49:dc:5d:c9:38:db:81:
01:c3:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:38:30 2025 by rpki-client