Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/JKk1PogvEPutTlr-vKz4h7jK55E.roa
File: JKk1PogvEPutTlr-vKz4h7jK55E.roa (raw, json)
Hash identifier: HzrN3ox3x+jKD2+NyeM4RHtgpm5fPYi7uMT2JgdUqho=
Subject key identifier: 24:A9:35:3E:88:2F:10:FB:AD:4E:5A:FE:BC:AC:F8:87:B8:CA:E7:91
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 01946DD0C6EAB141D31BEE71592EB0CE9A16
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/JKk1PogvEPutTlr-vKz4h7jK55E.roa
Signing time: Thu 16 Jan 2025 06:33:06 +0000
ROA not before: Thu 16 Jan 2025 06:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34655
IP address blocks: 5.159.216.0/24 maxlen: 24
5.159.217.0/24 maxlen: 24
93.93.54.0/24 maxlen: 24
95.128.120.0/24 maxlen: 24
95.128.121.0/24 maxlen: 24
95.128.122.0/24 maxlen: 24
95.128.123.0/24 maxlen: 24
95.128.124.0/24 maxlen: 24
95.128.125.0/24 maxlen: 24
95.128.126.0/24 maxlen: 24
95.128.127.0/24 maxlen: 24
109.71.162.0/24 maxlen: 24
109.71.163.0/24 maxlen: 24
109.71.164.0/24 maxlen: 24
109.71.165.0/24 maxlen: 24
109.71.166.0/24 maxlen: 24
109.71.167.0/24 maxlen: 24
185.13.89.0/24 maxlen: 24
185.13.91.0/24 maxlen: 24
2a03:9c40::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:800::/48 maxlen: 48
2a03:9c40:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 20 Jan 2025 06:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6d:d0:c6:ea:b1:41:d3:1b:ee:71:59:2e:b0:ce:9a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jan 16 06:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24a9353e882f10fbad4e5afebcacf887b8cae791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:a3:6b:7c:c0:d9:46:fe:67:e3:c7:1f:ce:
e4:d0:6a:cb:14:46:a8:d5:d4:e7:e0:9f:66:15:83:
54:24:54:79:0a:77:2f:58:f1:3d:60:9c:8f:de:33:
82:43:4c:a5:00:e3:0f:51:f1:e0:98:6b:0c:e2:3b:
20:58:63:dc:96:8d:91:ec:18:fa:f9:0f:2e:8e:2b:
4f:e7:33:99:be:af:99:64:3a:6e:ae:c8:0b:18:15:
6b:17:04:1d:65:db:cd:02:1a:1c:ec:5d:42:16:89:
40:51:76:25:76:84:8e:25:27:89:b2:96:a7:ac:c2:
af:9e:db:b0:44:6b:66:6f:c0:db:3e:f7:58:0f:a1:
c5:b7:2f:56:1b:0b:8b:d8:21:76:d3:d3:56:7e:65:
bb:5a:cc:28:08:ba:c2:37:a2:46:00:2a:05:57:ff:
57:61:c7:45:26:9e:6d:7b:cc:fe:70:7f:ff:99:57:
0d:da:9f:36:bc:e0:38:e6:f6:4b:04:83:78:66:aa:
f2:94:63:1d:98:aa:19:bf:52:85:0b:d5:61:dd:e7:
eb:15:4e:e9:7a:d4:3d:fa:8e:4c:01:ba:2a:e2:f5:
44:d8:ca:08:b7:05:1f:fd:c4:24:a1:74:2d:61:04:
46:9a:92:17:cc:94:03:f2:6f:4d:48:50:1d:e4:75:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:35:3E:88:2F:10:FB:AD:4E:5A:FE:BC:AC:F8:87:B8:CA:E7:91
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/JKk1PogvEPutTlr-vKz4h7jK55E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.216.0/23
93.93.54.0/24
95.128.120.0/21
109.71.162.0-109.71.167.255
185.13.89.0/24
185.13.91.0/24
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
2a03:9c40:1000::/48
Signature Algorithm: sha256WithRSAEncryption
78:3b:b2:67:e2:85:c3:03:16:ae:bb:2c:7f:e6:b1:ed:a4:f7:
a6:24:47:e2:ed:eb:0f:93:68:2d:55:93:02:50:88:99:c5:de:
1f:81:61:ab:ca:0f:9d:41:91:9b:50:91:c8:dd:d8:34:30:43:
10:4d:9d:77:9f:a7:49:95:41:91:41:2b:51:17:ce:3b:d3:a6:
16:d0:8c:87:7d:4b:52:17:e5:65:48:69:4f:37:4e:58:6f:6a:
4e:53:63:2b:fd:e8:c4:44:cc:c8:71:d5:c7:55:5e:8f:da:f6:
39:58:1c:26:00:22:cc:50:5e:9e:1f:f1:fc:1f:33:26:df:a0:
cf:04:5a:ce:99:2c:06:2d:b0:9c:1c:67:58:f8:0c:4e:a1:77:
c7:37:ae:d6:d5:e0:73:7c:64:ff:66:93:eb:8d:d1:13:be:9a:
39:a6:07:fa:9b:4a:fd:01:20:18:c5:19:81:54:95:62:4b:2b:
f1:d8:64:2d:92:3a:42:25:0c:ca:36:bb:27:51:d6:b4:f0:b3:
7e:ef:d2:8e:9c:fa:77:30:6e:53:a1:ce:a1:b6:9e:f3:5d:ba:
0f:0a:fb:af:55:e2:b3:7a:0a:37:dd:d7:5a:c7:f5:e3:59:9f:
12:f5:1c:77:3b:cc:04:41:bb:93:ba:76:9e:d8:b4:ef:38:2a:
b7:d0:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:49 2025 by rpki-client