Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jDpGdOmoJ6JxgVRhVCYDCmafgAI.roa
File: jDpGdOmoJ6JxgVRhVCYDCmafgAI.roa (raw, json)
Hash identifier: cus7AJaII36eOHhzdK5o/XPU+agtYGZtpbNhwM5kJgc=
Subject key identifier: 8C:3A:46:74:E9:A8:27:A2:71:81:54:61:54:26:03:0A:66:9F:80:02
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942825135E591766A9FD52774E3599094F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jDpGdOmoJ6JxgVRhVCYDCmafgAI.roa
Signing time: Thu 02 Jan 2025 17:51:45 +0000
ROA not before: Thu 02 Jan 2025 17:51:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215346
IP address blocks: 193.124.15.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 14:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:13:5e:59:17:66:a9:fd:52:77:4e:35:99:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c3a4674e9a827a2718154615426030a669f8002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:85:2e:c8:5f:89:78:5f:74:e9:0b:3f:85:
9e:fd:ee:55:77:21:05:2b:cd:01:f8:22:6e:fc:d0:
b9:1d:8a:fb:cc:e8:f4:61:2d:83:8c:ae:01:33:f7:
c3:6b:09:b7:21:e0:2b:93:f7:00:0c:c5:35:57:9e:
50:09:4a:a1:6e:70:3b:51:13:22:6e:18:1b:2e:6c:
4a:96:02:b6:f5:d2:e2:bf:95:6c:bd:46:30:3b:fe:
67:2a:6f:af:93:9d:d5:d1:bd:97:eb:0a:ab:01:97:
fb:65:13:2a:31:b8:e4:8a:c2:89:bc:af:e0:af:5b:
2b:95:f9:85:d3:13:a3:56:72:47:9e:4b:6b:bb:4e:
6f:a1:ab:8d:0f:32:25:03:91:17:f8:74:52:f7:93:
f4:2b:6d:48:9e:af:14:8b:52:4a:00:3b:77:dd:00:
89:71:aa:1a:0a:6f:5c:5a:fd:dc:72:b9:48:2b:92:
31:0c:ef:a4:c1:7c:00:97:e1:e7:9d:7e:e4:3a:4d:
f4:42:b0:34:65:25:24:fc:88:eb:b4:49:f4:8a:bf:
54:16:2f:0f:a9:74:5e:3b:39:e2:4b:a8:d9:42:a9:
60:aa:a0:34:89:ed:7e:0d:25:2a:39:9a:e8:03:c2:
04:31:32:34:4c:9f:16:3f:ec:1f:19:fe:7b:01:09:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:46:74:E9:A8:27:A2:71:81:54:61:54:26:03:0A:66:9F:80:02
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jDpGdOmoJ6JxgVRhVCYDCmafgAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.15.0/24
195.133.94.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e8:e8:f1:5c:98:6e:9c:cb:9a:e5:14:e0:60:ac:4e:85:ca:
9a:1f:a2:c0:01:90:51:00:9f:e9:2c:f1:38:e5:21:0e:a1:23:
50:a0:61:f3:92:41:95:5c:73:38:5b:7f:1b:df:47:4a:06:0c:
7a:c7:d4:a3:04:6e:80:7a:b4:be:59:d0:29:ef:17:e5:4b:ad:
cc:a4:f8:63:fe:bb:bc:f5:9e:41:08:a4:52:59:68:4e:d7:3f:
4f:dd:ad:ff:09:94:fa:6a:2d:30:e3:34:ea:57:e2:74:37:9a:
4b:92:cf:dd:e0:dc:9c:f5:b7:5a:b1:49:f5:1b:80:aa:a0:6e:
c2:66:1d:8f:b3:ca:78:0d:4b:1b:96:25:0e:6b:15:91:a8:d3:
10:55:96:c9:fa:d2:a6:de:6b:95:22:47:70:0a:5e:ac:5b:68:
46:59:95:aa:eb:69:04:9d:e7:e8:ac:7b:e1:bb:3f:90:ee:0b:
e8:0a:8b:3e:11:b6:77:b8:19:11:83:a7:06:07:74:72:d6:6a:
ed:c5:94:90:d3:23:f0:80:a1:85:50:03:99:42:f3:1e:54:89:
d5:7d:1c:56:25:1e:1d:09:37:fb:ce:42:f3:e3:d4:10:35:6a:
28:81:0b:f9:54:8e:d3:55:26:ea:2c:70:e0:98:a1:9c:47:0d:
6a:e9:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:19:26 2025 by rpki-client