Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/jdCh1FSNfN6FNkwsodt_92dv8VQ.roa
File: jdCh1FSNfN6FNkwsodt_92dv8VQ.roa (raw, json)
Hash identifier: fI8HiZ9y5/gDvFdLqgz6SK+Ui609BhcaZ5aIG02/j0o=
Subject key identifier: 8D:D0:A1:D4:54:8D:7C:DE:85:36:4C:2C:A1:DB:7F:F7:67:6F:F1:54
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0197D0DD70AB2DBD1AF602A22BB6CE0A24DA
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/jdCh1FSNfN6FNkwsodt_92dv8VQ.roa
Signing time: Thu 03 Jul 2025 15:17:42 +0000
ROA not before: Thu 03 Jul 2025 15:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 94.131.13.0/24 maxlen: 24
94.131.14.0/24 maxlen: 24
103.113.69.0/24 maxlen: 24
103.231.72.0/24 maxlen: 24
103.231.73.0/24 maxlen: 24
146.19.170.0/24 maxlen: 24
176.120.67.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
213.159.69.0/24 maxlen: 24
2a09:7c43::/32 maxlen: 32
2a0b:cf43::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
2a11:4c00::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:7e06::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3086::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Jul 2025 12:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:dd:70:ab:2d:bd:1a:f6:02:a2:2b:b6:ce:0a:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 3 15:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dd0a1d4548d7cde85364c2ca1db7ff7676ff154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:48:33:41:0d:1a:cf:f7:2f:fe:98:1d:42:
47:b8:65:2d:6f:d3:81:fc:af:95:33:18:ba:6c:46:
60:01:ed:39:df:da:aa:b7:20:0d:75:e3:d8:cc:c8:
a8:72:83:7d:8a:98:cf:06:72:4c:02:dd:90:49:ab:
f7:8b:63:10:17:cd:b8:ac:b9:1c:dd:e0:3e:bc:41:
ea:a6:e8:f6:1d:87:9d:1a:51:0b:62:d3:6f:49:45:
1a:08:6b:57:7a:88:f4:12:5f:65:c9:5f:a7:99:8f:
00:e4:74:77:05:fb:b8:ae:39:7e:35:91:07:f0:69:
6c:ab:28:7a:0b:b3:4d:08:f9:20:02:a3:87:40:8a:
27:fa:1d:4a:34:bd:48:1c:e3:26:bd:07:3a:8e:46:
49:ff:ab:b4:e1:aa:9c:b7:4e:3b:c2:c9:05:eb:c0:
44:85:ed:2d:ac:f7:93:c5:a8:04:43:6d:e6:2a:f5:
93:59:c7:3f:b1:0f:3e:46:35:0f:0f:05:63:08:13:
bd:88:d8:21:db:2c:b9:a8:89:ba:cc:f6:40:4d:69:
fc:d5:53:6b:b0:37:78:f7:8e:dd:9d:24:79:40:35:
9e:70:e0:e2:34:cd:d8:c1:18:f8:64:4f:f5:8b:54:
ff:d7:cc:d8:08:67:d1:b0:f5:81:20:33:fd:da:28:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:A1:D4:54:8D:7C:DE:85:36:4C:2C:A1:DB:7F:F7:67:6F:F1:54
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/jdCh1FSNfN6FNkwsodt_92dv8VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.13.0-94.131.14.255
103.113.69.0/24
103.231.72.0/23
146.19.170.0/24
176.120.67.0/24
185.242.84.0/24
213.159.69.0/24
IPv6:
2a09:7c43::/32
2a0b:cf43::/32
2a11:3c01::/32
2a11:4c00::/32
2a11:4c04::/32
2a11:7e06::/32
2a14:3081::/32
2a14:3086::/32
Signature Algorithm: sha256WithRSAEncryption
07:52:c7:cd:23:cb:46:d7:ba:90:76:43:00:3d:31:39:58:1e:
75:c1:18:5e:2a:b4:ec:aa:98:f3:04:97:d9:8e:49:3f:0d:60:
4e:21:3c:cf:a0:65:83:1e:a3:2a:8e:86:da:a5:8a:b8:55:28:
5e:7f:15:52:46:c2:bd:1a:02:54:29:3a:24:23:46:a8:05:72:
a5:8e:7a:45:61:96:40:47:ff:36:87:b2:68:b5:d7:da:e8:77:
07:80:a9:42:47:5d:46:3b:e1:f0:1a:0a:4f:ec:47:b9:90:83:
6e:33:8e:e6:1e:ce:d0:29:78:de:a1:d5:a2:56:b6:9f:98:a2:
57:ce:09:59:f1:c7:64:6f:4c:19:27:cf:0b:4e:06:d3:85:81:
4c:78:69:ea:c2:e3:5b:14:04:35:fd:2b:bf:fb:9d:1a:71:10:
82:0f:d6:60:3e:1c:69:f5:d5:72:55:07:8c:8d:0d:2b:a7:0e:
80:23:e5:3c:82:6d:5d:14:cb:b5:17:f4:d2:d5:08:bf:68:a9:
b0:2e:03:e7:07:c7:4d:9e:1d:28:f2:53:9a:78:d0:99:82:ec:
f6:3a:c6:23:1c:9b:be:4a:f0:eb:c9:72:67:97:b6:34:97:3c:
4f:5c:02:79:b2:25:d0:ec:cc:5d:8e:49:df:a7:93:e5:d3:f7:
8f:09:a1:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:29:01 2025 by rpki-client