Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jEKnnGmGcLANYHifDSmufnKvmkM.roa
File: jEKnnGmGcLANYHifDSmufnKvmkM.roa (raw, json)
Hash identifier: l2wA6Cr/XazrGhHhUTuCDTkh6wpVs68NePnSxQ6Qxcc=
Subject key identifier: 8C:42:A7:9C:69:86:70:B0:0D:60:78:9F:0D:29:AE:7E:72:AF:9A:43
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0196C5AED4558E8A6386D0A8AEF2FA6FF010
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jEKnnGmGcLANYHifDSmufnKvmkM.roa
Signing time: Mon 12 May 2025 18:08:11 +0000
ROA not before: Mon 12 May 2025 18:08:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 45.132.180.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120:6::/48 maxlen: 48
2a01:7120:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 17:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:ae:d4:55:8e:8a:63:86:d0:a8:ae:f2:fa:6f:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 12 18:08:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c42a79c698670b00d60789f0d29ae7e72af9a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:d8:4b:d8:b1:4b:95:90:14:77:f1:d0:ce:
b4:59:73:77:06:62:dc:d9:4c:df:08:7b:9e:0b:6a:
4e:ad:f5:0b:c4:d7:ef:42:81:44:cc:b6:5a:2e:01:
46:b8:ea:b8:f1:8a:1d:3c:db:25:7e:1d:11:81:6f:
bd:ce:00:b9:32:d3:b9:c0:92:11:96:21:ba:c0:7e:
e0:57:f4:0f:41:8c:3d:ad:b8:50:1c:2f:58:91:d9:
63:91:24:fb:23:23:b2:d1:38:df:12:28:7c:b0:f4:
c3:62:d6:61:14:8b:96:a5:cb:8c:e8:5b:40:3e:dc:
5b:9b:28:e1:36:97:73:ab:32:ef:96:c0:3a:bc:eb:
c2:7f:95:01:3e:db:aa:0f:4e:18:67:74:d9:f5:bf:
0e:5a:23:d1:07:07:cd:66:1b:14:1a:c3:cb:9b:62:
db:d0:c7:b0:8e:7e:5a:66:41:19:7f:3f:8b:7d:bc:
41:a1:d9:4c:64:8d:f7:a2:ab:5c:1f:5a:e1:09:d1:
db:71:16:91:de:ed:f0:bf:01:23:c3:6d:1c:cc:4a:
ea:a7:4b:cf:7a:8e:c9:ad:bd:78:2a:2e:24:a4:ff:
e4:c7:de:8e:2f:68:6a:40:42:e7:db:ee:27:da:03:
c7:b7:0b:64:f0:29:b5:a0:8a:55:71:40:fe:4f:61:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:A7:9C:69:86:70:B0:0D:60:78:9F:0D:29:AE:7E:72:AF:9A:43
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jEKnnGmGcLANYHifDSmufnKvmkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
195.211.188.0/24
195.211.190.0/24
IPv6:
2a01:7120:6::/47
Signature Algorithm: sha256WithRSAEncryption
5c:f3:c7:18:ae:a4:64:77:b9:d9:3e:57:8b:44:18:6b:bc:6d:
71:a8:a4:16:3d:8d:d1:6a:bf:ca:af:1f:29:73:32:1c:3a:3a:
08:b8:e5:44:08:8c:ed:41:13:80:54:b0:b1:2f:92:27:4e:73:
18:a9:df:af:6e:0e:c3:69:63:1b:14:32:bb:63:5b:05:a1:aa:
d8:0c:2e:53:f4:a8:d8:93:a5:89:bd:65:cb:4e:c8:db:94:de:
77:64:65:b2:c8:ef:53:76:1b:da:f2:5c:29:09:ca:13:b4:0e:
63:63:5a:92:ad:df:b3:dd:19:89:64:da:ed:be:31:15:29:c8:
35:4d:b1:a0:14:c5:c1:bd:41:5b:72:6a:d4:7a:0d:25:d5:9e:
8f:5c:ea:7c:87:7e:98:4e:45:9e:2b:2b:94:c1:2b:02:c9:4c:
ef:79:09:ba:58:dc:0d:83:8f:15:52:b9:bf:84:7d:fc:a1:08:
e2:0f:b5:6a:18:1c:3d:8c:c6:73:9c:2a:e9:06:8d:2d:2f:e6:
aa:0d:55:00:db:14:c6:8c:a9:b4:f4:c8:73:02:7f:35:d7:16:
d7:b0:6c:ee:39:30:d4:66:67:5a:c5:7d:65:a2:0e:0c:49:48:
b2:36:87:43:e9:53:40:54:ca:70:65:f8:be:af:76:62:c3:2e:
bf:79:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:17 2025 by rpki-client