Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/JjZJxEV6ZjNuXpv6CvEzT34RLHo.roa
File: JjZJxEV6ZjNuXpv6CvEzT34RLHo.roa (raw, json)
Hash identifier: OV4Ija7yDnlvKpEICmKtxDfV6X/yLeqB8KTVwsEbQ7E=
Subject key identifier: 26:36:49:C4:45:7A:66:33:6E:5E:9B:FA:0A:F1:33:4F:7E:11:2C:7A
Certificate issuer: /CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Certificate serial: 018CC2DB3BBAEF4CBD30C6E443F397D89FD2
Authority key identifier: 89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/JjZJxEV6ZjNuXpv6CvEzT34RLHo.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56439
IP address blocks: 91.223.152.0/24 maxlen: 24
2001:678:564::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3b:ba:ef:4c:bd:30:c6:e4:43:f3:97:d8:9f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=263649c4457a66336e5e9bfa0af1334f7e112c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:6e:5a:33:46:49:d1:7d:1e:e1:41:c1:d9:
a0:15:7c:57:c8:e7:4a:19:4d:75:59:6a:3b:25:94:
2c:7e:18:ad:5c:96:51:4e:97:ea:8c:3a:87:4e:56:
17:eb:c5:5b:4b:07:58:39:c4:16:39:43:eb:40:d2:
52:f9:26:07:28:b1:bb:45:c2:75:b3:c3:3c:0e:bd:
23:c4:e0:dd:23:49:eb:5b:51:23:be:ec:a9:80:7c:
64:8d:25:ec:09:cc:fe:d5:3b:7c:5c:e7:92:9a:e6:
9c:08:ea:57:9f:c8:a9:86:4e:3e:7e:49:5a:7a:61:
e0:c6:b3:e3:f7:a7:14:c5:47:23:01:dd:cd:fe:05:
87:16:46:c8:f5:2f:f6:69:4e:4d:f7:c2:5d:49:98:
6f:d0:a2:e1:55:80:77:6a:b2:97:0a:58:dd:eb:19:
68:b3:fe:78:15:96:f9:4a:de:c7:18:d2:63:0b:2a:
2a:0d:6b:f5:b9:5c:bd:e7:20:1e:a4:18:4f:54:5d:
d0:46:88:b3:18:c7:49:df:20:44:86:05:13:61:fb:
c8:66:a5:ab:50:76:cd:cf:ad:b0:3f:82:5d:43:9c:
73:81:22:dc:ff:fd:01:82:73:e7:db:36:8e:94:f2:
6e:3c:d6:ad:69:e1:62:8c:8c:c2:94:11:3c:c4:18:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:49:C4:45:7A:66:33:6E:5E:9B:FA:0A:F1:33:4F:7E:11:2C:7A
X509v3 Authority Key Identifier:
keyid:89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/JjZJxEV6ZjNuXpv6CvEzT34RLHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.152.0/24
IPv6:
2001:678:564::/48
Signature Algorithm: sha256WithRSAEncryption
30:4d:cd:55:1e:df:88:37:ef:65:5a:e6:d4:80:c3:0e:8f:9b:
f3:64:90:42:dd:77:47:a2:9e:38:fd:eb:7d:0a:e6:13:d5:02:
ed:55:9e:5b:d9:81:55:d4:4d:01:cc:f7:d3:3b:72:36:be:55:
2b:8c:38:3e:92:00:af:a3:b6:56:80:e3:d3:d6:db:9a:58:78:
7e:c4:ae:26:95:47:04:8a:2e:22:c8:34:9f:d9:bf:c5:25:72:
42:08:c8:85:e1:df:23:f3:39:99:6a:8a:b3:63:d6:9e:d2:d5:
9d:60:22:72:f3:03:41:43:8a:4b:68:54:a6:8e:56:a6:64:17:
60:83:d9:7e:54:24:de:00:f0:51:de:c1:5d:55:02:c6:4b:d7:
de:34:b5:9b:93:ac:61:c0:7a:94:74:13:c2:22:44:a6:42:95:
83:d3:ac:e9:8c:b4:81:9f:2a:d7:f4:3b:fc:5c:c6:c4:c5:08:
ca:30:fd:fd:67:a5:02:79:ba:25:51:0c:b0:3a:2f:50:50:4f:
80:49:f5:c6:ed:2d:d9:79:67:47:e2:75:27:c6:c4:20:f6:c1:
81:f8:f4:49:18:04:65:f7:bb:ad:59:c9:f7:4a:aa:4a:a8:ea:
e4:57:19:74:a8:5a:67:11:37:8c:ac:74:6e:ae:ff:88:f3:18:
a4:f5:26:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzC2zu670y9MMbkQ/OX2J/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmYzNWM1ZTAzMjFhY2QwMjE2N2RlZjg4MDdmMGJiNmY3
MWMyOGQwHhcNMjQwMTAxMDIyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjM2NDljNDQ1N2E2NjMzNmU1ZTliZmEwYWYxMzM0ZjdlMTEyYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMBuWjNGSdF9HuFBwdmgFXxXyOdK
GU11WWo7JZQsfhitXJZRTpfqjDqHTlYX68VbSwdYOcQWOUPrQNJS+SYHKLG7RcJ1
s8M8Dr0jxODdI0nrW1EjvuypgHxkjSXsCcz+1Tt8XOeSmuacCOpXn8iphk4+fkla
emHgxrPj96cUxUcjAd3N/gWHFkbI9S/2aU5N98JdSZhv0KLhVYB3arKXCljd6xlo
s/54FZb5St7HGNJjCyoqDWv1uVy95yAepBhPVF3QRoizGMdJ3yBEhgUTYfvIZqWr
UHbNz62wP4JdQ5xzgSLc//0BgnPn2zaOlPJuPNataeFijIzClBE8xBgYRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCY2ScRFemYzbl6b+grxM09+ESx6MB8GA1UdIwQY
MBaAFIlvNcXgMhrNAhZ974gH8LtvccKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYt
MjI5OWE2N2U2MDAxLzEvSmpaSnhFVjZaak51WHB2NkN2RXpUMzRSTEhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYtMjI5OWE2N2U2MDAx
LzEvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9+YMA8E
AgACMAkDBwAgAQZ4BWQwDQYJKoZIhvcNAQELBQADggEBADBNzVUe34g372Va5tSA
ww6Pm/NkkELdd0einjj9630K5hPVAu1VnlvZgVXUTQHM99M7cja+VSuMOD6SAK+j
tlaA49PW25pYeH7EriaVRwSKLiLINJ/Zv8UlckIIyIXh3yPzOZlqirNj1p7S1Z1g
InLzA0FDiktoVKaOVqZkF2CD2X5UJN4A8FHewV1VAsZL1940tZuTrGHAepR0E8Ii
RKZClYPTrOmMtIGfKtf0O/xcxsTFCMow/f1npQJ5uiVRDLA6L1BQT4BJ9cbtLdl5
Z0fidSfGxCD2wYH49EkYBGX3u61ZyfdKqkqo6uRXGXSoWmcRN4ysdG6u/4jzGKT1
JrQ=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:45 2025 by rpki-client