Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Joc_egxkwI79WvjzGr2V-HoqeMU.roa
File: Joc_egxkwI79WvjzGr2V-HoqeMU.roa (raw, json)
Hash identifier: GCfacl72iDh+JWAKtI5ePOpWAYfNyB8mBQSI5AKeu9Q=
Subject key identifier: 26:87:3F:7A:0C:64:C0:8E:FD:5A:F8:F3:1A:BD:95:F8:7A:2A:78:C5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194A36AB4B707B6CFD3D0A311A04194B4C3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Joc_egxkwI79WvjzGr2V-HoqeMU.roa
Signing time: Sun 26 Jan 2025 16:21:06 +0000
ROA not before: Sun 26 Jan 2025 16:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 05:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:6a:b4:b7:07:b6:cf:d3:d0:a3:11:a0:41:94:b4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 26 16:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26873f7a0c64c08efd5af8f31abd95f87a2a78c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:9c:24:bc:fb:35:f5:11:f4:e0:85:b9:12:
0e:06:7e:a7:0c:8a:ea:39:bb:02:45:9e:7d:17:00:
3c:a6:58:08:a1:3d:fe:ec:0a:97:34:1c:bf:36:62:
24:a6:eb:35:de:92:fe:2d:f3:a7:ed:ee:18:b2:1a:
79:87:88:ef:9b:41:b4:1d:2c:55:6e:6b:90:01:64:
7e:0c:72:82:3d:f9:f9:db:6b:7a:6d:bd:e3:7d:71:
6b:a5:e5:2f:75:03:b5:f6:93:fa:f2:44:a2:b1:00:
13:7c:cf:b8:c6:9b:a1:64:1b:54:d6:a7:ff:48:c5:
88:b4:7c:09:79:ff:85:d1:cb:ac:6d:b7:e2:09:62:
4b:9f:83:04:2d:62:48:0b:f7:36:41:e4:ff:de:5e:
cb:1c:db:9f:47:b9:9a:c5:f6:da:80:77:19:ce:f9:
19:a0:39:50:ed:11:d2:87:de:20:4c:8a:22:1e:99:
41:9b:e7:4e:8d:85:be:7a:41:eb:2d:9a:c0:4d:d7:
f8:01:5f:76:89:8f:fc:a4:31:b4:c8:a6:43:86:5c:
9a:15:90:ef:8a:3e:d7:32:e0:e1:4f:60:98:2d:64:
84:24:0b:05:d5:1c:70:84:5a:d0:64:d2:01:e6:69:
c4:6c:cb:88:76:4a:b8:0c:af:62:68:cc:c6:11:2a:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:3F:7A:0C:64:C0:8E:FD:5A:F8:F3:1A:BD:95:F8:7A:2A:78:C5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Joc_egxkwI79WvjzGr2V-HoqeMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
89.106.69.0/24
94.103.163.0-94.103.164.255
94.249.148.0/24
94.249.153.0/24
94.249.158.0/24
94.249.195.0/24
94.249.212.0/24
94.249.214.0/23
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b2:22:83:42:6a:8b:bc:56:8f:3e:e5:b0:d4:1f:39:70:b9:
aa:47:2d:2f:ef:2d:d2:92:6e:c5:94:56:fb:77:b1:fb:d9:43:
ee:19:e9:81:18:b8:4d:29:5f:04:cd:78:f0:8c:5e:02:61:68:
64:85:56:19:cd:82:e5:58:eb:5f:91:bf:7d:96:68:2e:25:1c:
ce:bf:1d:b5:a4:f5:3c:4d:26:81:19:ee:ab:89:0d:53:37:2c:
15:93:7a:de:d5:21:33:b3:58:75:ba:4f:55:f5:1f:28:b9:8b:
c7:2f:cb:64:cb:3f:75:f4:05:c6:91:5f:62:dd:22:d8:03:30:
7b:59:a0:1d:42:75:c8:67:7d:cc:31:e7:b3:bf:fa:c8:e3:e6:
e2:65:b9:d5:3c:df:10:95:51:55:67:ff:a9:9c:2b:d3:95:ba:
6c:38:ed:e9:8e:1b:8b:99:e1:93:f7:9c:7d:70:78:20:3a:94:
fd:ec:b2:38:91:96:ad:06:2f:29:20:6b:a8:1f:60:77:5f:3b:
8d:fa:81:94:b8:63:3f:9e:33:6e:91:d9:42:f0:e0:1e:2b:c3:
f4:79:45:bc:e2:a9:bc:da:05:0e:55:67:0a:33:14:06:f7:fe:
f5:98:1c:64:b8:29:ec:cd:71:90:a1:c4:93:a7:27:f6:89:8e:
c6:14:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:29 2025 by rpki-client