Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JhIvYsuFECtJyZo5NLdCTRBuLCY.roa
File: JhIvYsuFECtJyZo5NLdCTRBuLCY.roa (raw, json)
Hash identifier: uL6Dt42J3Hfb5xgbLna9WCNGTTv27VJo8lAJ1bxMT5w=
Subject key identifier: 26:12:2F:62:CB:85:10:2B:49:C9:9A:39:34:B7:42:4D:10:6E:2C:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195F17D851D48C7EC3AC2370E0854EB334B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JhIvYsuFECtJyZo5NLdCTRBuLCY.roa
Signing time: Tue 01 Apr 2025 13:14:49 +0000
ROA not before: Tue 01 Apr 2025 13:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31025
IP address blocks: 5.231.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 14:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:7d:85:1d:48:c7:ec:3a:c2:37:0e:08:54:eb:33:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 1 13:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26122f62cb85102b49c99a3934b7424d106e2c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:b7:f9:d4:36:58:b5:a0:f4:b3:51:b4:2d:
1b:a3:94:0f:ad:92:90:98:67:b5:2b:c8:33:86:1f:
6f:4d:6f:7d:38:94:d6:51:14:3e:f9:91:85:72:8b:
6a:2b:ce:a5:88:6c:df:aa:6d:18:6a:4b:78:d3:d7:
82:17:19:42:f2:16:8c:15:cb:ef:0d:35:8b:da:96:
1e:81:70:72:d3:0b:d4:ac:f9:3f:a0:db:7c:09:a4:
24:ac:3c:80:d7:0f:0a:a2:7c:d1:2f:c7:55:c8:f2:
80:ce:92:c5:8e:90:cf:9d:e5:52:a1:33:41:8c:07:
20:f5:6e:3b:bb:bb:8b:7d:83:44:d2:c4:f9:c8:e3:
62:f2:e7:25:ba:18:f2:2d:c1:16:d1:00:78:23:33:
1d:fb:d0:1b:72:52:34:61:c3:84:8d:ec:8e:7a:d7:
7c:40:08:16:43:7b:74:a9:9b:0a:c6:91:fc:e6:6f:
3b:e4:42:83:90:55:89:39:23:9a:9e:d5:f1:0c:6e:
21:0e:45:0f:cc:5f:f5:67:79:63:a7:4c:77:e3:12:
dc:87:2b:ea:da:d0:42:0e:f0:ca:80:9e:d7:02:cb:
13:16:e4:f1:ee:2d:a7:b0:c0:04:41:c2:54:dc:a6:
a9:4d:35:d7:d4:9d:9f:b2:cb:21:bd:e0:c3:00:59:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:2F:62:CB:85:10:2B:49:C9:9A:39:34:B7:42:4D:10:6E:2C:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JhIvYsuFECtJyZo5NLdCTRBuLCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.254.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:88:6d:39:88:84:17:c8:0d:dd:5a:22:41:8f:24:50:88:43:
7c:b2:ba:39:28:2c:02:4b:e2:1b:2e:77:eb:60:4f:ea:32:af:
53:02:26:62:d0:9e:ac:a4:32:36:f4:d5:a5:76:b2:f0:3e:e2:
dd:4e:9b:d8:56:04:8c:d6:9b:91:20:74:0f:06:02:d7:47:ef:
dc:d8:be:f6:27:36:fd:a1:7e:38:62:76:bc:11:e4:b4:d1:50:
43:f0:df:3c:fd:86:d3:91:36:f1:38:0c:a3:0e:53:0f:60:5f:
a9:e2:b9:68:87:8b:ef:3a:58:fe:f0:54:43:19:36:39:21:ed:
55:40:10:ad:c6:69:3e:a4:af:a0:fc:a7:05:dd:4e:9b:99:3b:
11:76:1e:2c:ce:cf:9f:78:c5:c6:50:3e:65:14:a9:74:13:e9:
68:91:c4:bd:3d:9f:3a:dc:e0:df:c5:84:86:4f:f6:e4:dc:67:
c5:5e:72:c4:0e:bb:6f:02:21:ef:e5:af:06:b5:e5:56:bd:95:
11:fa:14:7b:59:9b:fa:28:03:ef:ba:1d:7a:19:9d:71:28:21:
c3:62:e1:17:13:bc:f0:ad:ae:da:0f:90:3a:9b:16:fa:c7:02:
49:2e:04:a0:f4:5f:c6:78:d0:0e:21:0e:9d:ae:c1:60:88:ce:
89:be:50:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXxfYUdSMfsOsI3DghU6zNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDAxMTMxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjEyMmY2MmNiODUxMDJiNDljOTlhMzkzNGI3NDI0ZDEwNmUyYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/a3+dQ2WLWg9LNRtC0bo5QPrZKQ
mGe1K8gzhh9vTW99OJTWURQ++ZGFcotqK86liGzfqm0Yakt409eCFxlC8haMFcvv
DTWL2pYegXBy0wvUrPk/oNt8CaQkrDyA1w8KonzRL8dVyPKAzpLFjpDPneVSoTNB
jAcg9W47u7uLfYNE0sT5yONi8ucluhjyLcEW0QB4IzMd+9AbclI0YcOEjeyOetd8
QAgWQ3t0qZsKxpH85m875EKDkFWJOSOantXxDG4hDkUPzF/1Z3ljp0x34xLchyvq
2tBCDvDKgJ7XAssTFuTx7i2nsMAEQcJU3KapTTXX1J2fssshveDDAFnc5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYSL2LLhRArScmaOTS3Qk0QbiwmMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSmhJdllzdUZFQ3RKeVpvNU5MZENUUkJ1TENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABef+MA0G
CSqGSIb3DQEBCwUAA4IBAQDGiG05iIQXyA3dWiJBjyRQiEN8sro5KCwCS+IbLnfr
YE/qMq9TAiZi0J6spDI29NWldrLwPuLdTpvYVgSM1puRIHQPBgLXR+/c2L72Jzb9
oX44Yna8EeS00VBD8N88/YbTkTbxOAyjDlMPYF+p4rloh4vvOlj+8FRDGTY5Ie1V
QBCtxmk+pK+g/KcF3U6bmTsRdh4szs+feMXGUD5lFKl0E+lokcS9PZ863ODfxYSG
T/bk3GfFXnLEDrtvAiHv5a8GteVWvZUR+hR7WZv6KAPvuh16GZ1xKCHDYuEXE7zw
ra7aD5A6mxb6xwJJLgSg9F/GeNAOIQ6drsFgiM6JvlCy
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:08 2025 by rpki-client