Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jBoLcvKf8pSqpV4bo6C4JxitlIQ.roa
File: jBoLcvKf8pSqpV4bo6C4JxitlIQ.roa (raw, json)
Hash identifier: yMlfCkCxxY6KzWrzhpt6Bzb866zfKF7O29XTmGGLxes=
Subject key identifier: 8C:1A:0B:72:F2:9F:F2:94:AA:A5:5E:1B:A3:A0:B8:27:18:AD:94:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01968054E9DA84BB5446474F792543D4F3BF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jBoLcvKf8pSqpV4bo6C4JxitlIQ.roa
Signing time: Tue 29 Apr 2025 06:56:10 +0000
ROA not before: Tue 29 Apr 2025 06:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.76.229.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
192.124.175.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.58.36.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 29 Apr 2025 14:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:54:e9:da:84:bb:54:46:47:4f:79:25:43:d4:f3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 29 06:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c1a0b72f29ff294aaa55e1ba3a0b82718ad9484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:63:c1:54:dd:87:c6:df:c4:49:b4:4e:09:
45:58:37:68:98:51:f4:e5:bb:de:25:bc:56:7b:68:
73:e6:de:73:f0:ea:d3:bd:c7:e2:11:25:32:4c:b4:
5c:29:da:fc:cd:67:c1:1d:ea:35:0d:8b:33:65:16:
81:70:2e:f8:a5:b2:dd:86:c2:88:69:6a:0c:5a:4f:
9b:f5:c4:8a:83:46:bc:66:3c:b0:84:a4:1f:a2:41:
ab:2b:79:c2:e3:bf:6d:67:e6:20:07:8c:97:42:74:
3b:69:49:fe:6d:df:62:1d:ee:23:11:87:3a:46:f7:
6a:f5:ae:90:ac:68:dd:60:34:63:fc:21:c4:82:ce:
04:b5:1d:2f:2d:76:e2:02:4f:66:5f:95:ed:48:fe:
61:0f:c9:15:7a:9f:07:b1:85:02:c2:b8:e9:d4:fb:
82:ac:bb:b8:37:45:73:53:97:5d:52:32:e1:13:f8:
75:fd:92:0b:a1:d0:ad:0e:bd:db:bf:4f:d8:26:e6:
a2:c0:13:24:14:fa:a1:17:3d:49:5d:77:ca:b1:e4:
eb:95:d8:ea:29:90:dd:9f:8b:7f:16:8c:13:48:ed:
bb:96:f7:8e:90:b3:47:a9:ca:42:9c:f7:c1:46:f9:
8f:7c:b5:47:df:37:11:85:89:b0:82:cd:75:a4:bf:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1A:0B:72:F2:9F:F2:94:AA:A5:5E:1B:A3:A0:B8:27:18:AD:94:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jBoLcvKf8pSqpV4bo6C4JxitlIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
62.76.232.0/24
192.124.175.0/24
193.124.7.0/24
194.58.36.0/24
194.58.155.0/24
194.58.223.0/24
194.87.53.0/24
194.87.119.0/24
194.87.126.0/24
194.87.169.0/24
194.87.179.0/24
195.133.9.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.241.0/24
212.193.8.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
25:b7:fd:c3:1e:50:e3:b7:90:c4:06:6e:ff:1a:cc:5a:26:3a:
c7:ee:b0:52:c6:6b:47:48:25:30:55:cf:6a:11:77:05:d7:d9:
d1:34:2d:c7:be:3a:a6:ca:06:31:aa:34:3a:9d:f8:b5:24:6c:
22:75:cb:e1:aa:4e:42:9c:48:aa:3a:82:e2:b4:90:eb:4c:ff:
b4:e7:2d:a9:74:56:35:f6:ac:d4:76:1a:ec:b0:ba:5d:53:eb:
df:d3:ba:25:48:75:96:f8:1f:95:67:37:40:0b:49:d9:2b:4c:
a7:82:56:75:07:79:17:4a:9a:7f:51:7e:f4:48:7e:e2:6c:92:
2d:23:fe:47:91:49:b0:a9:1f:c1:75:4d:09:69:45:e1:bb:90:
ba:d7:6b:4b:d4:81:1c:e1:79:ff:d4:16:6d:df:b1:a5:71:ef:
6e:66:51:5d:27:8f:af:0d:fa:2e:0f:e0:d2:8f:31:d2:ca:a6:
ea:b5:de:10:85:75:c3:34:50:91:8f:63:a2:cb:78:86:94:12:
60:5a:70:a9:78:86:ec:e2:c0:4b:ff:55:1c:96:59:c6:fc:44:
9a:2e:a9:c9:89:6f:57:e3:71:25:1e:ae:05:6f:cf:ac:8e:fb:
c3:63:00:d8:bb:4b:2a:5f:db:99:9e:62:f3:f6:e0:64:72:cc:
5f:a1:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:02 2025 by rpki-client