Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/JqVOAenj4W_q1CfUJtt3eCpQ7a4.roa
File: JqVOAenj4W_q1CfUJtt3eCpQ7a4.roa (raw, json)
Hash identifier: EtDFn6WOKVrAi/yi+Mh8AxSz6WpfZ4CmUHPCg5RdfBU=
Subject key identifier: 26:A5:4E:01:E9:E3:E1:6F:EA:D4:27:D4:26:DB:77:78:2A:50:ED:AE
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 018CC5DC17D807AF09F43DE2217808AC0427
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/JqVOAenj4W_q1CfUJtt3eCpQ7a4.roa
Signing time: Mon 01 Jan 2024 16:29:44 +0000
ROA not before: Mon 01 Jan 2024 16:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211896
IP address blocks: 194.180.20.0/24 maxlen: 24
194.180.25.0/24 maxlen: 24
194.180.52.0/24 maxlen: 24
194.180.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:17:d8:07:af:09:f4:3d:e2:21:78:08:ac:04:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a54e01e9e3e16fead427d426db77782a50edae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b6:2c:b5:64:7a:9a:45:20:3b:e8:cb:44:4b:
d9:23:b0:cc:2b:e0:9a:8f:3d:7e:20:4d:d0:b2:c7:
f1:2e:ca:a3:19:88:64:0d:93:ec:44:c3:ad:02:48:
98:93:10:4e:14:47:b2:1d:4c:e9:0f:f2:d8:0a:cd:
eb:fa:c3:59:6c:e7:96:5f:0b:79:4f:3f:9a:3c:a8:
6f:33:be:d6:82:d6:c9:9a:44:6f:73:a4:ce:cd:e8:
c3:49:01:a2:28:6d:30:a7:ba:8c:d1:d7:e7:bf:c0:
fe:8c:30:63:aa:9f:8f:4b:c9:4f:60:20:49:7c:a9:
2a:7b:d6:36:58:f7:9b:4c:f1:d9:91:ea:35:94:5b:
b1:a0:c8:7c:7b:c4:30:9a:5e:b8:ac:22:0b:b3:d2:
2a:c4:a6:d8:35:c0:f1:6a:84:5a:3e:02:04:23:c4:
cd:cf:00:1a:fc:4b:3c:02:64:f3:a8:07:ce:db:4b:
bf:df:8a:f0:16:51:a9:d9:69:ae:1d:89:14:9b:cd:
c2:89:80:d8:a3:ba:f5:ed:e7:fa:f5:a0:35:37:72:
4a:34:78:0f:3a:fc:e3:ba:11:b0:ec:77:e3:6d:48:
b6:dc:9c:21:4f:c3:1f:0a:c4:2d:da:0f:09:6a:c1:
9c:c8:ba:b3:30:bd:de:e4:18:f7:b3:4d:38:95:cd:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:4E:01:E9:E3:E1:6F:EA:D4:27:D4:26:DB:77:78:2A:50:ED:AE
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/JqVOAenj4W_q1CfUJtt3eCpQ7a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.20.0/24
194.180.25.0/24
194.180.52.0/24
194.180.55.0/24
Signature Algorithm: sha256WithRSAEncryption
62:5e:fa:03:f6:3f:e4:7b:33:ef:e3:2f:23:0f:95:7c:73:cc:
b7:32:84:3f:0f:fa:d8:df:6b:6d:fa:39:ac:38:85:4d:39:b0:
8d:a2:a8:40:cf:e7:6c:36:ed:0c:1d:d3:d4:c9:4a:17:f4:de:
2e:87:0e:8c:73:e8:be:92:87:7e:26:a7:6e:b0:f6:89:9e:1e:
b6:fc:fb:de:6c:c9:a5:58:49:19:00:b6:c1:39:5b:47:29:10:
43:12:cb:a0:7d:3c:84:5f:ed:bc:ee:b6:94:ea:8b:3d:55:9e:
fe:88:01:bb:28:66:9e:b5:85:86:c7:18:3e:8f:2c:62:cf:ec:
a8:9b:35:c3:27:b6:23:d4:ad:25:bd:6e:c3:3b:57:1e:ef:ad:
44:c5:5b:5c:0a:55:7e:20:bd:e5:24:78:03:fe:c3:7c:90:e7:
d0:61:ee:2b:5d:e0:15:c8:c1:df:08:3d:81:52:82:54:f1:c9:
9a:cf:0c:5d:b7:35:67:ea:fe:dd:80:e9:1c:25:a5:e6:71:d5:
fb:0e:55:31:03:bb:74:2a:d1:3a:77:9d:2f:68:95:6d:df:e8:
fa:c6:e3:fd:de:41:15:1b:3c:67:f4:8b:0a:3f:52:d8:5b:d6:
bb:67:c1:2d:52:57:f5:da:bf:49:33:2d:07:29:50:ea:3b:35:
38:23:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:53 2025 by rpki-client