Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JNzdaqA_-4-anoJ6AgPRnluWIow.roa
File: JNzdaqA_-4-anoJ6AgPRnluWIow.roa (raw, json)
Hash identifier: TlFFxMRFaRya1kx5c1ebgM/s+sVtWmwoXfLI4prGivQ=
Subject key identifier: 24:DC:DD:6A:A0:3F:FB:8F:9A:9E:82:7A:02:03:D1:9E:5B:96:22:8C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683E163F39342F2D90870D975EE178
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JNzdaqA_-4-anoJ6AgPRnluWIow.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 193.233.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 15:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3e:16:3f:39:34:2f:2d:90:87:0d:97:5e:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24dcdd6aa03ffb8f9a9e827a0203d19e5b96228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:43:fa:a6:35:cf:26:25:a6:1b:6b:7b:db:
36:55:f9:e5:50:2e:7a:74:33:c8:9a:95:2d:9d:6a:
8d:98:5e:50:a4:48:b9:13:e8:52:60:a6:f7:3a:2a:
2f:cd:1a:2d:73:b5:f4:e0:af:5b:21:e7:65:38:68:
e4:9a:05:e8:19:50:50:88:01:47:0a:f2:72:09:76:
5f:ca:84:ae:a9:63:39:95:93:24:db:54:92:0c:ac:
3f:dd:49:0f:1c:96:eb:6e:65:4b:59:94:93:ce:6f:
76:16:c3:94:86:ca:1b:7b:9f:f2:42:56:71:42:11:
95:8a:72:7f:f0:86:0c:a4:ca:c8:d4:f9:ba:12:ca:
ef:2d:4a:a9:ea:71:bc:2a:a1:95:8f:90:43:bf:1d:
d1:1c:f7:fd:a4:c7:d4:67:8a:2e:aa:ce:00:c7:f3:
53:95:83:f4:72:73:63:15:d0:c1:cb:15:31:78:73:
dd:53:ba:c5:06:28:10:cc:8a:79:20:5b:6f:b5:0b:
9f:95:21:4a:12:17:a4:b1:f5:2b:a3:b3:38:21:49:
1c:49:55:2d:03:22:31:be:c0:5b:78:b6:ab:7d:86:
1a:87:21:85:d2:57:1e:82:7f:65:e7:46:e8:b7:fd:
e4:cc:aa:0d:49:28:f4:1a:58:6e:2a:fa:c6:37:13:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:DD:6A:A0:3F:FB:8F:9A:9E:82:7A:02:03:D1:9E:5B:96:22:8C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JNzdaqA_-4-anoJ6AgPRnluWIow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.100.0/22
Signature Algorithm: sha256WithRSAEncryption
22:1c:16:83:3b:72:eb:c9:9e:38:5e:b9:10:9b:fc:32:a8:4a:
ac:54:34:eb:81:5b:5c:a1:3b:a3:16:0f:d4:09:c4:2c:6a:01:
80:43:4f:aa:5d:70:4c:92:4d:69:c8:29:d9:86:3e:95:f5:dd:
7d:a2:c7:25:3d:c6:cb:ae:e8:49:57:91:0e:96:5b:8a:9c:5e:
a3:b0:26:fd:99:ed:32:e9:cb:74:56:a2:35:fe:78:65:d2:6d:
b0:f0:49:9a:c5:e8:a4:3a:f9:d9:21:1a:72:b2:35:7a:66:21:
8a:f0:cb:e1:c2:29:77:e9:4d:00:0f:7d:8d:9a:44:23:88:0c:
0a:6f:69:f7:e5:ba:34:8f:75:d5:ec:e8:fd:6d:28:3e:e8:9e:
cd:e2:ce:2e:83:26:2a:90:34:ff:9b:62:cb:b4:69:bf:c7:2b:
44:e5:6e:f7:91:4e:0f:ff:5d:98:ad:99:d3:3f:93:d1:e2:c8:
7a:32:3f:5a:48:a2:0e:7f:cf:65:64:51:48:15:60:35:00:b4:
c8:04:43:26:39:e9:db:b7:d4:41:fb:88:bb:43:d2:fc:83:3d:
3f:e6:3f:de:4a:c4:37:8b:f0:82:0a:17:33:3f:ca:1f:8d:6e:
1c:33:18:a7:ae:57:ad:4e:d1:60:d4:fd:49:96:4f:31:aa:f5:
fe:17:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:05:08 2025 by rpki-client