Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jcUpf74R0uRVQfthTa9dNS_-rE4.roa
File: jcUpf74R0uRVQfthTa9dNS_-rE4.roa (raw, json)
Hash identifier: JvX/IBDTgBXXOAQJ6e4TbRIVoLrU4QE2UkdTTA+X6PI=
Subject key identifier: 8D:C5:29:7F:BE:11:D2:E4:55:41:FB:61:4D:AF:5D:35:2F:FE:AC:4E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0196E78933AE30A0AEF07034FDAF7975D387
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jcUpf74R0uRVQfthTa9dNS_-rE4.roa
Signing time: Mon 19 May 2025 07:54:10 +0000
ROA not before: Mon 19 May 2025 07:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 46.161.56.0/21 maxlen: 24
193.93.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 11:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:89:33:ae:30:a0:ae:f0:70:34:fd:af:79:75:d3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 19 07:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dc5297fbe11d2e45541fb614daf5d352ffeac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:9d:5b:b9:02:97:e2:e2:1b:ba:eb:63:20:
48:ed:89:16:65:0f:2e:74:c0:c9:3d:45:1c:27:a2:
26:53:fe:3a:2a:9b:51:af:b8:3c:da:53:a1:57:03:
6c:38:b0:84:95:e1:e2:a1:fd:96:36:84:50:b5:0a:
59:85:88:f4:54:78:e4:b0:9c:fc:ff:28:ce:ce:28:
6d:42:39:7b:82:25:b7:c9:65:1b:b2:a7:05:ef:05:
1b:10:fc:85:f7:b3:73:8c:f4:13:d3:bd:6f:51:17:
d9:6c:0a:47:0d:ca:5e:02:b4:07:72:42:79:13:b6:
55:48:ff:3e:ad:1b:11:0a:4c:1c:a8:f1:cb:cf:f4:
81:6f:cf:19:70:2e:25:86:33:68:b7:5a:35:2d:50:
ca:f6:a0:38:55:63:16:be:c7:ec:c5:71:61:3b:dd:
a3:84:16:a2:18:60:04:8d:18:8b:6c:1e:7d:ac:cb:
8a:06:23:79:93:ac:dc:4b:f8:c2:17:98:a7:38:3e:
4c:45:21:06:91:39:30:bb:d6:ba:cc:a4:d0:f5:05:
28:02:e8:6a:58:96:f3:da:d8:52:3e:9d:a3:41:1b:
6c:eb:ca:d3:ed:e5:42:da:c6:e7:bd:c1:8b:44:30:
47:16:5e:6b:b9:16:da:57:c7:1e:73:71:9c:8e:2b:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:29:7F:BE:11:D2:E4:55:41:FB:61:4D:AF:5D:35:2F:FE:AC:4E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jcUpf74R0uRVQfthTa9dNS_-rE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.56.0/21
193.93.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:28:fe:97:37:70:29:65:1f:ec:60:96:e2:d5:75:fc:8c:26:
b6:7a:93:c7:2a:80:8b:5c:1a:9a:18:0b:da:56:e7:7d:68:a7:
32:8b:18:9f:e0:85:33:bc:1b:fa:4c:9c:83:06:b6:cd:16:93:
01:93:3d:46:ea:56:e6:06:83:c6:bc:0c:f6:19:28:ea:0d:fa:
6e:f1:73:65:a0:33:67:c1:82:3f:2f:73:8d:e5:1a:e5:25:c0:
ca:7f:b2:4c:36:37:44:a9:ed:6d:84:ce:54:c0:5f:2a:3b:e9:
8d:c2:c4:e0:ce:3a:66:63:a1:2f:75:84:dd:c1:4d:41:ee:81:
77:ca:24:49:ae:77:74:3a:6a:b3:d6:91:5c:19:c0:a6:2a:bc:
ef:06:1d:b8:0f:18:da:d8:7f:a9:e4:e2:a6:f7:84:ff:96:e7:
32:c6:ca:42:da:ab:94:f3:7e:ec:6d:e9:c6:8c:75:bf:e0:54:
2a:5c:03:4c:2d:13:85:9b:c6:85:3c:2c:3a:2e:84:db:5a:56:
39:b1:26:dc:0d:e9:6a:d0:85:ed:c6:47:80:94:6c:42:18:16:
c8:fe:f2:3a:72:3b:ce:ed:d9:b7:bc:57:c0:0c:f3:32:74:99:
23:f0:bb:23:2b:ab:8a:d6:66:34:b4:35:fd:b5:b0:e1:d7:91:
8c:3a:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:12:43 2025 by rpki-client