Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/JOAx_L-BMBRQCiDop77sctqNYMk.roa
File: JOAx_L-BMBRQCiDop77sctqNYMk.roa (raw, json)
Hash identifier: AeQeVlxTCEZIGppp6D+2aITOhySD4WORo7FNLihqUF4=
Subject key identifier: 24:E0:31:FC:BF:81:30:14:50:0A:20:E8:A7:BE:EC:72:DA:8D:60:C9
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01956790D65A89A190A1B1BEA63A21231FD7
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/JOAx_L-BMBRQCiDop77sctqNYMk.roa
Signing time: Wed 05 Mar 2025 18:28:20 +0000
ROA not before: Wed 05 Mar 2025 18:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 84.239.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 18:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:90:d6:5a:89:a1:90:a1:b1:be:a6:3a:21:23:1f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Mar 5 18:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24e031fcbf813014500a20e8a7beec72da8d60c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:e2:a9:b4:86:58:60:04:64:2e:09:88:f6:
ea:93:df:c3:73:a9:e3:bc:5d:66:7d:98:fd:80:69:
9a:d7:bc:d9:38:8a:74:fb:ed:a9:a7:eb:ad:e5:b3:
f3:3a:fd:4d:f5:a0:ea:6c:f6:9d:b3:31:67:ac:a3:
a8:d0:c4:99:03:4f:4b:86:13:c6:38:de:1b:15:da:
bf:5b:b2:18:5e:49:08:f2:1e:fa:74:c8:52:48:44:
5b:c1:3a:53:bc:95:e3:d2:01:48:59:37:91:09:3e:
c9:53:00:b0:dc:c2:d9:25:0e:3b:7f:91:ea:66:4e:
32:bd:eb:bf:d1:b9:bb:44:0d:1f:35:d0:e9:b2:27:
8c:e6:b6:7f:31:8d:af:46:6f:23:b2:8f:6d:97:07:
7c:5b:d6:66:11:1a:5f:b4:04:ee:3b:04:8d:54:03:
53:24:36:3b:ac:d0:6d:09:92:37:6a:cb:49:ca:ae:
ca:7e:6b:a6:ef:9b:6d:0b:58:7e:6c:f7:bf:a0:47:
0a:b0:f8:a7:e0:44:ba:b1:ae:d4:6f:44:d9:8d:e8:
16:ed:d9:af:a2:6e:12:bd:04:3e:57:75:70:03:51:
a9:de:08:ad:b7:2a:3c:a6:f2:3b:be:63:a4:be:14:
a1:fe:2d:b0:09:24:b8:21:8d:88:bc:1b:d5:29:6d:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E0:31:FC:BF:81:30:14:50:0A:20:E8:A7:BE:EC:72:DA:8D:60:C9
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/JOAx_L-BMBRQCiDop77sctqNYMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5b:5c:89:f7:e8:e8:c3:fc:f8:81:cf:10:e3:02:2c:a4:7b:
db:e4:0f:e8:d3:23:16:cc:5d:6e:dc:21:38:76:b2:a6:61:84:
b6:d1:dd:2d:ea:c1:29:0d:40:e4:86:5f:79:38:9a:d9:f0:02:
7f:aa:e7:1d:31:4e:ff:9c:5e:13:9b:7b:e9:aa:2d:97:8f:0d:
59:bf:99:e0:2a:68:cc:10:ba:03:ff:bc:dc:df:2b:90:15:7a:
3d:c5:8e:6c:cb:b5:4f:0e:a8:c4:28:23:8e:aa:18:9d:67:1c:
57:8c:cf:7d:c3:43:4a:3e:c6:cd:f9:71:29:b5:3f:5b:10:b2:
d0:ca:81:be:81:0a:13:10:2e:29:3e:aa:90:89:0c:e6:ba:c0:
f3:93:67:c5:08:7a:64:6a:d5:81:50:14:6b:ed:58:56:14:67:
a8:01:78:57:69:87:54:74:91:38:4c:06:c6:0e:3c:1e:2a:f5:
a6:8d:08:f2:ec:aa:f5:fe:69:1f:f0:5d:a4:b9:00:75:ce:3e:
3d:91:1d:a0:e0:1e:c3:99:0e:ca:f6:58:8a:13:68:fa:b1:60:
b2:73:f1:1f:27:cd:60:30:04:03:45:b2:5b:9b:d0:6f:ba:a6:
59:77:6a:a6:33:21:1e:b9:6a:91:75:08:12:17:7b:90:e2:c6:
c3:2b:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:18:34 2025 by rpki-client