Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/jkV6lPcn3ZhNbYk3eVydOBP6nYk.roa
File: jkV6lPcn3ZhNbYk3eVydOBP6nYk.roa (raw, json)
Hash identifier: 7B4yoGTkbwjXl6RRIOpoE3WoiYeXRd17dyl2U3Fe+7Y=
Subject key identifier: 8E:45:7A:94:F7:27:DD:98:4D:6D:89:37:79:5C:9D:38:13:FA:9D:89
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 0190169D1FD13D78AC98F8DDBEB89E33942C
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/jkV6lPcn3ZhNbYk3eVydOBP6nYk.roa
Signing time: Fri 14 Jun 2024 11:58:34 +0000
ROA not before: Fri 14 Jun 2024 11:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204151
IP address blocks: 46.32.144.0/21 maxlen: 21
78.31.252.0/22 maxlen: 22
87.104.128.0/18 maxlen: 18
87.104.240.0/20 maxlen: 20
185.107.12.0/22 maxlen: 22
185.107.13.0/24 maxlen: 24
185.107.14.0/24 maxlen: 24
185.161.77.0/24 maxlen: 24
185.233.252.0/22 maxlen: 22
194.45.76.0/22 maxlen: 22
212.237.176.0/21 maxlen: 21
2a00:8200::/32 maxlen: 32
2a06:4000::/29 maxlen: 29
2a0c:f900::/29 maxlen: 29
2a12:3d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:9d:1f:d1:3d:78:ac:98:f8:dd:be:b8:9e:33:94:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jun 14 11:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e457a94f727dd984d6d8937795c9d3813fa9d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:d8:af:5e:4d:38:5a:8c:f2:15:95:cd:3b:
65:f3:32:0d:47:91:86:71:c5:f2:9c:ea:6d:a1:57:
a2:0f:bb:4c:01:90:e8:78:34:4a:fa:44:b0:75:d2:
82:57:59:cb:c6:7b:ff:14:17:3a:ff:8f:8d:c2:69:
b3:0d:fa:1e:cb:dc:7b:5e:fa:62:31:a8:2e:d7:c6:
a2:e9:e9:c8:d0:3f:f0:4c:38:3e:c2:92:f2:cf:f6:
a4:11:31:45:a8:f9:e7:eb:98:7b:e6:8e:86:d6:c5:
1e:42:c7:44:51:2c:e2:8f:38:d6:ca:c6:3e:3f:84:
65:52:bd:52:01:df:1e:e7:e8:a1:f4:48:cc:d2:e9:
22:81:84:53:11:ed:17:ba:0d:15:6c:54:1c:6a:32:
3d:ac:f7:93:35:3b:c7:76:a5:c2:5a:6c:fd:f2:a8:
77:53:d5:b5:af:2d:6d:1b:de:a3:49:cd:94:33:4b:
df:33:42:cb:d8:ae:66:9e:b0:5b:66:ae:31:fc:50:
84:5a:02:85:65:f7:85:86:77:58:07:d3:26:39:a2:
3a:cc:78:c7:43:f2:cb:c2:75:8f:43:f7:b9:e4:42:
f3:e5:2c:fb:09:a8:37:91:04:d9:ba:bf:d4:8a:a4:
af:d9:8b:18:62:e5:01:d5:aa:09:95:59:85:e3:31:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:45:7A:94:F7:27:DD:98:4D:6D:89:37:79:5C:9D:38:13:FA:9D:89
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/jkV6lPcn3ZhNbYk3eVydOBP6nYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.144.0/21
78.31.252.0/22
87.104.128.0/18
87.104.240.0/20
185.107.12.0/22
185.161.77.0/24
185.233.252.0/22
194.45.76.0/22
212.237.176.0/21
IPv6:
2a00:8200::/32
2a06:4000::/29
2a0c:f900::/29
2a12:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
6a:c7:c2:04:63:8c:48:06:ef:23:b0:f0:eb:09:4a:2e:27:be:
fd:dc:cb:24:01:02:24:98:41:d5:e3:5b:15:c2:a0:ec:b7:61:
75:81:94:5d:f4:61:19:36:d8:45:a1:8c:e2:e9:c6:dc:c1:7d:
6a:ce:9a:6d:fb:62:f5:e4:62:98:10:1f:df:35:4d:59:fe:fc:
d6:32:a7:d3:b9:6c:45:df:f2:bc:a6:03:90:d7:8a:cc:3b:10:
31:83:22:0e:08:f1:f1:4d:d3:35:05:3a:7f:c7:0e:f8:68:f2:
67:9c:c4:ee:6d:45:a6:f6:0b:f6:35:df:ea:ff:f4:74:7d:fb:
48:34:5f:6b:bc:3f:7a:8b:46:9f:8c:0d:a4:dd:0b:ec:b6:55:
57:68:7b:39:fb:e6:f9:5c:7a:36:da:8b:41:b6:d8:5e:6e:bd:
e4:84:6e:c6:12:9e:63:30:30:a8:85:a1:8b:c1:54:69:87:7a:
30:4b:ab:94:8c:10:b1:81:6c:f7:3d:a5:ba:50:48:93:18:a5:
0d:b2:72:47:cf:55:46:87:a5:34:2d:e8:19:57:a5:2e:83:fb:
97:15:0e:f9:47:e5:b6:68:35:35:f4:73:43:ce:dc:a1:9f:af:
ad:ac:5f:74:76:ba:c7:ab:8d:c7:18:b7:c9:2b:8f:2c:8d:ff:
7f:da:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:15 2025 by rpki-client