Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/jJvkQhiJrEbrFOSWWmtj17Cs_n4.roa
File: jJvkQhiJrEbrFOSWWmtj17Cs_n4.roa (raw, json)
Hash identifier: lXkLuN4SNk8GXBRhzKZk7mxAAhhK89us9mTGH/t7YWQ=
Subject key identifier: 8C:9B:E4:42:18:89:AC:46:EB:14:E4:96:5A:6B:63:D7:B0:AC:FE:7E
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0194C7689126D274247C15BBED61329B8FE5
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/jJvkQhiJrEbrFOSWWmtj17Cs_n4.roa
Signing time: Sun 02 Feb 2025 16:05:06 +0000
ROA not before: Sun 02 Feb 2025 16:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 91.239.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 10:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:68:91:26:d2:74:24:7c:15:bb:ed:61:32:9b:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Feb 2 16:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c9be4421889ac46eb14e4965a6b63d7b0acfe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:cc:e6:a1:22:c8:35:e6:2b:99:c9:eb:e8:
cd:29:b2:d1:1d:d6:cb:00:ed:04:f8:4a:bb:0f:14:
cb:c4:36:4b:71:d2:c5:e8:84:5c:db:c5:90:6c:dd:
5b:23:68:66:ce:df:59:bc:1a:10:eb:df:23:0a:4d:
a4:16:2f:a3:2b:9d:6c:40:76:df:73:72:3b:ad:2e:
03:2c:5c:78:77:7d:8a:50:66:48:32:3c:6d:dc:ad:
a9:54:55:17:1e:da:68:39:0a:d1:61:5e:ab:59:92:
4f:ca:0e:fa:e9:30:57:40:4d:f1:fc:2e:a3:5c:93:
aa:53:ba:b6:91:4f:7a:28:d4:5e:f1:47:11:a2:da:
10:71:1a:1c:45:82:9e:ab:79:bc:29:23:4f:40:88:
a6:df:07:f4:11:25:55:79:9c:dc:db:6f:a8:ee:51:
26:14:26:bb:54:bd:f5:bb:f3:8f:8c:51:c3:2a:d6:
97:d4:17:6d:a1:93:2c:55:43:0b:a6:9f:0d:65:75:
c6:3d:1f:71:ff:da:ae:04:f1:55:bc:de:8c:0f:17:
16:6c:42:3d:40:3b:1b:a2:39:65:70:82:2d:0b:3a:
2e:46:11:d7:7b:4c:8d:69:97:f8:9d:2f:4a:d5:bc:
aa:fa:be:ff:33:1d:de:66:77:62:41:c8:c3:81:25:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:E4:42:18:89:AC:46:EB:14:E4:96:5A:6B:63:D7:B0:AC:FE:7E
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/jJvkQhiJrEbrFOSWWmtj17Cs_n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a6:82:08:e8:b3:b9:c2:41:09:f9:10:5a:15:49:19:a7:96:
3e:b7:e7:54:5d:a3:b8:bd:b9:e8:61:c3:d7:a9:c6:c3:ee:c9:
86:d8:52:32:50:e4:de:b8:77:c2:0c:56:d0:e7:ff:62:0e:91:
7d:be:04:b1:5e:4d:f6:41:62:4d:82:37:b7:00:df:49:fd:48:
f8:b6:8d:a2:64:73:9f:5a:34:7d:07:71:ba:a2:07:91:31:95:
3f:7e:f9:c6:ab:01:e5:1e:a1:d6:a8:a8:0d:74:21:e3:e0:71:
17:04:7f:9d:93:43:1c:60:f8:7e:7c:67:36:9a:67:0b:a1:95:
7f:5e:f0:a5:ec:3a:0d:f4:cf:5d:9f:d9:5c:69:ea:32:aa:5f:
2e:4a:58:dc:40:2a:1f:8c:1a:60:12:3e:fa:55:c5:93:71:c8:
27:18:c9:db:79:82:ba:4b:0b:6d:4a:34:53:58:74:61:ba:91:
99:4f:42:be:44:2f:78:3a:48:8c:60:80:6c:39:64:74:92:69:
7b:5a:27:65:92:39:39:4b:9e:87:ea:4d:73:a9:75:19:b1:1a:
40:9b:0c:f1:82:08:77:13:5e:bf:86:36:71:a7:07:72:29:bc:
13:f5:04:cb:c9:70:e3:af:bb:0f:7f:03:a3:64:39:74:e0:55:
be:61:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:14 2025 by rpki-client