Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/joHLJT41-wdR-9h6u76VG467t4I.roa
File: joHLJT41-wdR-9h6u76VG467t4I.roa (raw, json)
Hash identifier: Ax9UmVgLqv9YgZorTIE9DtGagKojbf8wTqs9HzdMdQc=
Subject key identifier: 8E:81:CB:25:3E:35:FB:07:51:FB:D8:7A:BB:BE:95:1B:8E:BB:B7:82
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01942825F97F2BC22FA00F936B27E5F80A66
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/joHLJT41-wdR-9h6u76VG467t4I.roa
Signing time: Thu 02 Jan 2025 17:52:44 +0000
ROA not before: Thu 02 Jan 2025 17:52:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47802
IP address blocks: 193.43.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 12:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:f9:7f:2b:c2:2f:a0:0f:93:6b:27:e5:f8:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 2 17:52:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e81cb253e35fb0751fbd87abbbe951b8ebbb782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:bf:93:48:60:30:e8:93:80:ed:71:e2:ae:
25:0c:f4:00:17:c5:27:be:aa:92:ee:14:b0:9f:0e:
da:d5:76:4c:37:a5:a2:6e:75:e2:44:87:43:2c:ed:
3d:c2:c5:75:45:a0:50:c6:24:7f:03:06:d2:b7:28:
91:b9:95:7b:44:d0:e1:18:55:3b:9d:10:72:99:46:
91:d0:f3:44:ff:88:09:03:c9:f1:05:7d:97:ef:8d:
69:8a:ab:b1:62:83:fa:4c:33:47:ab:1f:98:97:e4:
52:89:2a:d6:ad:66:5c:90:03:67:a0:7e:76:3d:18:
16:0f:f7:bc:57:cb:ba:0b:41:d1:1b:40:58:94:bd:
f4:c8:c8:e5:e6:0e:20:70:2a:a8:65:e7:0d:75:c2:
fc:bc:4f:fe:52:38:3d:68:ee:b7:10:c2:b9:86:9a:
87:8b:76:25:0d:50:fb:8c:03:72:a8:fb:70:44:5c:
ae:5b:1c:96:90:c9:3f:e2:d4:a3:86:c0:2b:3f:eb:
72:84:6a:05:03:f1:ba:2b:ea:2c:a5:ed:7c:d4:a9:
0a:7b:a0:b2:8c:82:89:41:9e:45:0a:4d:9d:17:82:
65:6f:11:52:5b:57:cd:9d:5e:da:ad:4f:62:28:6a:
85:a1:34:da:41:17:dd:85:e4:0e:7d:f6:31:2b:67:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:81:CB:25:3E:35:FB:07:51:FB:D8:7A:BB:BE:95:1B:8E:BB:B7:82
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/joHLJT41-wdR-9h6u76VG467t4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ee:6a:2d:3c:0a:98:96:67:8b:50:4b:6c:f8:a6:4f:f9:ae:
4f:87:5b:05:6a:58:04:9e:55:e6:2c:9d:06:17:bf:84:3f:ba:
66:81:c5:25:f5:1a:eb:8b:68:41:12:83:5b:24:38:09:68:9f:
93:65:f0:5e:98:7c:2d:c2:71:16:1a:59:23:6b:9f:03:fb:06:
98:79:fb:95:57:2a:b6:1c:98:86:43:b0:00:49:0d:4b:d3:00:
72:0e:e3:f3:d8:99:32:65:1a:57:64:51:99:f1:4d:f4:ea:7f:
75:57:74:eb:b1:ec:7a:95:3c:ed:32:b1:40:6b:e8:90:ed:f1:
39:b0:60:79:2d:e3:49:7c:e5:29:70:82:0a:e8:13:4b:fb:90:
1c:43:00:5a:c2:b2:35:33:94:c1:43:00:a2:ff:82:f9:ed:17:
db:8b:d7:75:f9:02:23:4d:69:0a:57:85:b1:1f:8f:43:2e:9f:
44:2a:b7:fa:cf:28:2c:f1:ae:7d:b8:d3:76:dc:26:3d:e1:d5:
58:7a:58:8f:25:70:1a:ca:bb:d0:24:ef:46:aa:51:07:eb:a1:
bb:40:16:58:ab:0f:ae:49:fa:49:0a:4f:f2:8f:7d:57:de:34:
8b:b6:ca:b9:d6:4c:5a:04:69:8d:c4:93:ab:95:2d:98:f1:3d:
89:b0:be:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJfl/K8IvoA+Tayfl+ApmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0
ZTc4ZmIwHhcNMjUwMTAyMTc1MjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTgxY2IyNTNlMzVmYjA3NTFmYmQ4N2FiYmJlOTUxYjhlYmJiNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2W/k0hgMOiTgO1x4q4lDPQAF8Un
vqqS7hSwnw7a1XZMN6WibnXiRIdDLO09wsV1RaBQxiR/AwbStyiRuZV7RNDhGFU7
nRBymUaR0PNE/4gJA8nxBX2X741piquxYoP6TDNHqx+Yl+RSiSrWrWZckANnoH52
PRgWD/e8V8u6C0HRG0BYlL30yMjl5g4gcCqoZecNdcL8vE/+Ujg9aO63EMK5hpqH
i3YlDVD7jANyqPtwRFyuWxyWkMk/4tSjhsArP+tyhGoFA/G6K+ospe181KkKe6Cy
jIKJQZ5FCk2dF4JlbxFSW1fNnV7arU9iKGqFoTTaQRfdheQOffYxK2dg1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6ByyU+NfsHUfvYeru+lRuOu7eCMB8GA1UdIwQY
MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt
ZDMyZTI3ZmI3ZTU5LzEvam9ITEpUNDEtd2RSLTloNnU3NlZHNDY3dDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5
LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwStpMA0G
CSqGSIb3DQEBCwUAA4IBAQBe7motPAqYlmeLUEts+KZP+a5Ph1sFalgEnlXmLJ0G
F7+EP7pmgcUl9Rrri2hBEoNbJDgJaJ+TZfBemHwtwnEWGlkja58D+waYefuVVyq2
HJiGQ7AASQ1L0wByDuPz2JkyZRpXZFGZ8U306n91V3Trsex6lTztMrFAa+iQ7fE5
sGB5LeNJfOUpcIIK6BNL+5AcQwBawrI1M5TBQwCi/4L57Rfbi9d1+QIjTWkKV4Wx
H49DLp9EKrf6zygs8a59uNN23CY94dVYeliPJXAayrvQJO9GqlEH66G7QBZYqw+u
SfpJCk/yj31X3jSLtsq51kxaBGmNxJOrlS2Y8T2JsL6s
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:54:52 2025 by rpki-client