Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jk-zOIp5qBPkiUzmq0k4u6qM_Co.roa
File: Jk-zOIp5qBPkiUzmq0k4u6qM_Co.roa (raw, json)
Hash identifier: FAe1Oj5iKUMb5FwMuQHfSAh8bRLc108HOny80D9oLV0=
Subject key identifier: 26:4F:B3:38:8A:79:A8:13:E4:89:4C:E6:AB:49:38:BB:AA:8C:FC:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A168F9D677C986CEB185D44D1B91
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jk-zOIp5qBPkiUzmq0k4u6qM_Co.roa
Signing time: Thu 02 Jan 2025 17:51:16 +0000
ROA not before: Thu 02 Jan 2025 17:51:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 94.156.117.0/24 maxlen: 24
94.156.119.0/24 maxlen: 24
94.156.122.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 14:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a1:68:f9:d6:77:c9:86:ce:b1:85:d4:4d:1b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=264fb3388a79a813e4894ce6ab4938bbaa8cfc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ba:a5:5a:6e:0f:d6:ac:17:90:51:85:6d:96:
97:dd:f1:31:9a:cf:8f:8e:0f:82:2a:fb:a2:31:f1:
c2:0d:1a:da:bd:38:4e:17:86:ae:32:4e:8c:8c:8c:
a0:34:71:32:74:83:8d:66:88:b4:36:e1:de:6c:02:
d5:03:93:b3:5c:79:97:8f:40:6a:c8:ed:85:d0:f0:
4b:eb:8c:61:b2:ee:e2:c9:b6:f4:70:0b:a9:9e:b1:
84:f9:3d:5c:cc:c0:50:1c:5d:a0:8d:55:ed:50:f8:
5b:cb:fd:00:af:61:c2:19:6d:c6:51:0c:df:5d:f6:
d3:18:71:00:1b:54:4a:43:cb:18:64:27:68:ec:c7:
58:6f:4a:6b:ee:d7:bd:2d:9f:59:f9:cd:f1:28:dc:
c7:4b:cc:68:01:b6:b5:93:37:af:8c:d9:cb:82:73:
3d:6a:9c:7c:c8:d0:5d:49:ab:27:02:a5:4b:a4:d5:
bf:66:c7:b4:54:43:15:c8:0d:ff:24:aa:9a:69:a3:
f1:a8:d0:9b:9c:58:50:25:9a:49:9e:ec:91:e3:d0:
69:80:74:53:51:15:e0:5e:52:65:3e:ae:47:70:00:
90:d7:ec:f5:e7:6d:41:fc:45:c0:be:75:d6:85:b2:
c4:bd:83:f3:58:cb:9a:9f:04:59:a4:4f:90:72:33:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4F:B3:38:8A:79:A8:13:E4:89:4C:E6:AB:49:38:BB:AA:8C:FC:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jk-zOIp5qBPkiUzmq0k4u6qM_Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.117.0/24
94.156.119.0/24
94.156.122.0/24
94.156.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:dc:f3:a0:2b:38:47:71:49:09:c0:7b:11:59:fa:d4:a6:
2d:de:b0:09:90:9e:1a:71:f0:d0:03:ac:f9:6e:3c:15:24:21:
78:43:36:5c:d5:67:d4:5a:10:f0:b6:5e:1f:62:de:dd:4b:79:
08:5f:d4:72:71:ab:c5:ca:44:41:91:a9:2b:c1:79:22:88:b8:
d4:67:cb:84:cb:3f:1e:49:53:59:e8:9e:0f:3a:35:01:f1:43:
dc:e6:b5:4f:b8:38:54:80:41:7b:51:a7:33:ee:22:9d:3e:e8:
7f:a6:cb:04:28:d5:c0:33:9c:06:d6:7a:df:47:3a:dd:72:98:
08:b0:05:d4:88:80:58:de:e6:a4:62:ab:2c:bd:57:38:95:c6:
be:16:8f:2f:79:02:c6:8d:f3:53:01:90:42:44:54:67:7d:20:
ea:7f:e1:cc:49:d3:e0:b3:fb:f0:f1:65:b2:2e:c7:ef:83:2f:
7b:28:2e:12:89:c7:d8:ce:94:18:e7:6b:90:e8:36:74:f1:0d:
82:e3:d8:1b:c2:5c:7d:f9:37:90:2a:2a:93:3e:1d:b2:bd:04:
62:30:7a:61:07:1c:e5:41:ec:68:69:73:61:a0:f6:3d:9f:71:
62:0f:5d:ac:c6:cf:8f:b8:f1:b9:8a:99:98:b8:c6:92:61:36:
50:b6:22:7b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQoJKFo+dZ3yYbOsYXUTRuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjRmYjMzODhhNzlhODEzZTQ4OTRjZTZhYjQ5MzhiYmFhOGNmYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87qlWm4P1qwXkFGFbZaX3fExms+P
jg+CKvuiMfHCDRravThOF4auMk6MjIygNHEydIONZoi0NuHebALVA5OzXHmXj0Bq
yO2F0PBL64xhsu7iybb0cAupnrGE+T1czMBQHF2gjVXtUPhby/0Ar2HCGW3GUQzf
XfbTGHEAG1RKQ8sYZCdo7MdYb0pr7te9LZ9Z+c3xKNzHS8xoAba1kzevjNnLgnM9
apx8yNBdSasnAqVLpNW/Zse0VEMVyA3/JKqaaaPxqNCbnFhQJZpJnuyR49BpgHRT
URXgXlJlPq5HcACQ1+z1521B/EXAvnXWhbLEvYPzWMuanwRZpE+QcjNVzQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCZPsziKeagT5IlM5qtJOLuqjPwqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSmstek9JcDVxQlBraVV6bXEwazR1NnFNX0NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXpx1AwQA
Xpx3AwQAXpx6AwQAXpyDMA0GCSqGSIb3DQEBCwUAA4IBAQBth9zzoCs4R3FJCcB7
EVn61KYt3rAJkJ4acfDQA6z5bjwVJCF4QzZc1WfUWhDwtl4fYt7dS3kIX9RycavF
ykRBkakrwXkiiLjUZ8uEyz8eSVNZ6J4POjUB8UPc5rVPuDhUgEF7Uacz7iKdPuh/
pssEKNXAM5wG1nrfRzrdcpgIsAXUiIBY3uakYqssvVc4lca+Fo8veQLGjfNTAZBC
RFRnfSDqf+HMSdPgs/vw8WWyLsfvgy97KC4SicfYzpQY52uQ6DZ08Q2C49gbwlx9
+TeQKiqTPh2yvQRiMHphBxzlQexoaXNhoPY9n3FiD12sxs+PuPG5ipmYuMaSYTZQ
tiJ7
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:24 2025 by rpki-client