Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Jvtt52qvIOhBpPDEIZT9b3rR8Gc.roa
File: Jvtt52qvIOhBpPDEIZT9b3rR8Gc.roa (raw, json)
Hash identifier: d+mBiwme175/PUvOi17qVaTEZlYy5Nm/4l+M4nu8Y/0=
Subject key identifier: 26:FB:6D:E7:6A:AF:20:E8:41:A4:F0:C4:21:94:FD:6F:7A:D1:F0:67
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 0193E068C9356885686B185CDEB7E084BA45
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Jvtt52qvIOhBpPDEIZT9b3rR8Gc.roa
Signing time: Thu 19 Dec 2024 19:33:03 +0000
ROA not before: Thu 19 Dec 2024 19:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 5.8.248.0/24 maxlen: 24
62.233.53.0/24 maxlen: 24
77.220.212.0/24 maxlen: 24
77.220.213.0/24 maxlen: 24
109.107.157.0/24 maxlen: 24
178.159.43.0/24 maxlen: 24
185.93.6.0/24 maxlen: 24
185.201.252.0/24 maxlen: 24
185.229.251.0/24 maxlen: 24
185.235.128.0/24 maxlen: 24
185.237.165.0/24 maxlen: 24
185.241.61.0/24 maxlen: 24
185.244.218.0/24 maxlen: 24
185.244.219.0/24 maxlen: 24
185.250.207.0/24 maxlen: 24
185.251.25.0/24 maxlen: 24
193.3.168.0/24 maxlen: 24
193.169.105.0/24 maxlen: 24
194.15.46.0/24 maxlen: 24
194.26.232.0/24 maxlen: 24
194.62.105.0/24 maxlen: 24
212.86.114.0/24 maxlen: 24
212.86.115.0/24 maxlen: 24
212.162.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e0:68:c9:35:68:85:68:6b:18:5c:de:b7:e0:84:ba:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Dec 19 19:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26fb6de76aaf20e841a4f0c42194fd6f7ad1f067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:ab:a8:db:b7:48:88:5c:30:49:0e:92:db:
77:f5:45:05:1c:5a:a6:73:9f:f6:73:b6:2a:b3:67:
ff:7b:c8:f3:6a:59:97:90:32:8a:1a:a7:f5:7e:45:
e8:54:e6:c2:e2:83:25:37:9d:d3:d5:ae:59:2c:df:
53:21:2b:f7:3d:6f:d9:e0:20:be:74:09:b9:2a:61:
47:7e:74:24:25:e7:3f:ad:7a:be:ac:f2:d8:7e:15:
a1:fd:0e:a5:9d:d3:23:55:8b:34:1c:c5:fb:db:fc:
17:89:94:be:73:67:1e:2b:49:62:69:2f:79:a6:44:
3e:c0:a2:2e:06:45:d3:e5:e2:2b:02:72:54:85:b0:
7d:e2:d7:a8:1b:9a:7d:c9:a9:b9:ca:6c:27:1b:fc:
a7:e5:ae:62:9c:f1:b0:ba:c2:8e:7d:f5:00:04:05:
93:fa:b5:d9:3b:36:f8:b1:e6:a2:02:cc:96:bf:5c:
5f:f7:c0:0d:16:63:c0:e5:12:99:9d:2f:96:24:ab:
0e:8a:45:f5:a2:0d:86:48:21:89:ad:e2:00:e3:b0:
1c:50:a2:53:7d:cc:de:2e:23:76:f9:62:c4:a4:11:
97:e3:e7:a2:e5:e7:c5:bb:b7:80:b2:99:b0:eb:e0:
ea:e0:53:d6:aa:f4:68:d9:68:0e:eb:6b:f4:2d:92:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:6D:E7:6A:AF:20:E8:41:A4:F0:C4:21:94:FD:6F:7A:D1:F0:67
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Jvtt52qvIOhBpPDEIZT9b3rR8Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.248.0/24
62.233.53.0/24
77.220.212.0/23
109.107.157.0/24
178.159.43.0/24
185.93.6.0/24
185.201.252.0/24
185.229.251.0/24
185.235.128.0/24
185.237.165.0/24
185.241.61.0/24
185.244.218.0/23
185.250.207.0/24
185.251.25.0/24
193.3.168.0/24
193.169.105.0/24
194.15.46.0/24
194.26.232.0/24
194.62.105.0/24
212.86.114.0/23
212.162.154.0/24
Signature Algorithm: sha256WithRSAEncryption
79:0e:c6:ff:00:09:ad:92:33:35:26:53:f9:49:a8:f0:dc:4d:
e8:d2:92:50:1c:bd:0d:6e:41:86:9b:5f:e6:59:fa:51:95:8b:
91:1d:38:dc:95:dd:bc:d4:4e:8c:76:52:8f:43:b1:07:eb:36:
0e:de:42:80:94:5d:ac:01:16:ab:98:8c:94:31:43:22:d5:eb:
83:14:94:13:24:de:e0:41:93:06:a3:6a:dc:02:f1:12:d9:ef:
94:e6:26:59:a6:9c:9c:d5:d4:fc:b9:69:32:e5:be:7e:ac:9d:
d0:36:3f:ab:cb:98:c2:66:21:8e:c9:b0:5c:ea:f0:9a:76:5a:
0f:16:cc:ea:0f:5e:95:5c:8b:b4:b8:99:ed:3f:9c:7d:8d:e8:
50:81:13:4d:e9:24:f3:23:45:8e:1f:b3:4d:ea:e1:50:3a:02:
db:9d:dc:51:62:12:84:c5:5a:6d:22:d6:a5:43:e5:8b:ee:22:
6c:90:46:28:64:9f:ae:c1:23:47:35:39:6e:9e:87:e4:a3:a2:
8e:d3:3f:8e:d7:e1:52:19:b7:22:7d:03:e1:c2:34:c2:ff:7e:
47:13:5a:55:ac:8a:05:69:f6:7a:03:77:21:c9:98:2a:eb:b5:
0e:42:9c:19:3a:a4:40:83:cd:94:58:41:c7:66:11:00:d5:3f:
8f:5f:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 16:37:12 2025 by rpki-client