Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JjhiQTgwo4JF-d_KxYhgqSN2-ks.roa
File: JjhiQTgwo4JF-d_KxYhgqSN2-ks.roa (raw, json)
Hash identifier: eEw5P7ef/gC7by7+1gokaEgk2xLpCqWYKxd9nB4hCbw=
Subject key identifier: 26:38:62:41:38:30:A3:82:45:F9:DF:CA:C5:88:60:A9:23:76:FA:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282458E9AC84A9D58B03D678EB11A82C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JjhiQTgwo4JF-d_KxYhgqSN2-ks.roa
Signing time: Thu 02 Jan 2025 17:50:58 +0000
ROA not before: Thu 02 Jan 2025 17:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.180.0/23 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 17:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:58:e9:ac:84:a9:d5:8b:03:d6:78:eb:11:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=263862413830a38245f9dfcac58860a92376fa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:bc:ab:a2:50:8c:26:28:cb:ca:e9:d5:3e:
d3:ae:4d:09:f2:94:1c:12:79:95:b8:ad:6d:4f:82:
f5:6b:83:00:3f:af:5f:17:44:32:18:5d:de:fd:59:
a4:3c:1e:9c:ce:97:73:96:72:65:20:6f:26:1c:46:
f0:48:c3:8c:ea:64:f5:95:ce:7e:b1:04:9e:d6:52:
62:d0:7d:b8:7e:97:c8:d1:ea:fb:08:99:07:03:e0:
22:6f:d7:c3:ff:0b:f0:3a:a2:d3:47:88:eb:c5:8c:
98:14:46:d4:f1:35:92:16:f9:a4:1d:b8:d7:08:b7:
1d:6d:00:be:a0:b6:8d:2c:f7:ba:29:84:06:ee:37:
1b:c8:d3:e9:3d:4b:d8:db:c8:73:f3:21:07:ad:b9:
2a:9a:93:d0:71:81:21:57:4f:b4:2a:cb:fd:a1:46:
ea:8c:98:05:ca:47:62:dd:0a:b5:54:64:2b:02:b6:
0e:48:ee:f4:56:b7:44:5d:2b:3e:68:df:fc:83:45:
af:80:66:05:37:58:ae:eb:20:6b:21:6a:d3:0f:49:
09:95:40:9b:ab:86:24:aa:76:be:cc:21:2c:27:b6:
e2:be:51:2b:38:63:2b:15:9b:70:f0:9f:95:1a:d2:
a1:5c:98:b3:b4:3a:de:eb:53:50:e4:23:14:db:73:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:62:41:38:30:A3:82:45:F9:DF:CA:C5:88:60:A9:23:76:FA:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JjhiQTgwo4JF-d_KxYhgqSN2-ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/23
45.139.123.0/24
91.92.67.0/24
93.123.76.0/22
94.156.152.0/24
94.156.154.0/23
94.156.180.0/23
185.252.177.0/24
193.47.62.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
84:14:62:80:24:a0:1c:21:27:d2:87:03:cb:da:55:ee:17:8a:
0c:87:9d:c6:bf:7b:37:60:cb:fd:24:41:3e:a1:e9:64:46:09:
60:d9:85:4c:ee:6b:92:2c:0b:58:8f:40:34:93:12:36:d8:f7:
27:99:c7:5b:78:8e:5f:2b:a9:14:1a:e0:e2:c6:fb:78:a9:4d:
59:aa:97:7e:ea:eb:a1:20:f4:d6:1c:58:6d:92:b5:c9:59:4a:
40:92:e2:19:d3:25:7b:f1:e5:64:9d:f4:74:f8:5b:79:a3:cb:
ef:69:66:0b:c2:02:df:5d:a1:a8:1d:f0:ec:69:62:a4:ed:b4:
2f:ca:ba:47:df:7d:21:ca:23:38:20:95:f4:f2:00:72:8d:07:
ad:b6:c8:46:54:7f:16:d9:d2:57:d0:b4:7a:1a:6a:fc:a2:37:
09:2b:8b:4d:ce:af:bc:26:46:c1:38:b3:66:ad:b1:5e:24:f3:
67:39:41:86:0e:f1:40:9c:9e:5f:b9:98:05:a8:c3:79:b1:b1:
fe:e4:77:7d:04:83:6f:42:48:20:f9:68:13:9e:a8:50:45:bd:
11:8d:96:e1:cb:1f:6d:63:99:65:8f:d5:18:14:22:9f:fa:15:
af:78:37:79:c1:67:6c:4f:09:28:4f:ae:4f:5b:59:d0:de:9e:
a1:fe:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:37:25 2025 by rpki-client