Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JquSHOA0iziMDK-KqEnlgTRzysA.roa
File: JquSHOA0iziMDK-KqEnlgTRzysA.roa (raw, json)
Hash identifier: NpASV9ub6ePmT5V+orC+Vh9l35xEUgSmd0Um7lE3XcA=
Subject key identifier: 26:AB:92:1C:E0:34:8B:38:8C:0C:AF:8A:A8:49:E5:81:34:73:CA:C0
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019725B47FCC252AE154815B9E55431019CB
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JquSHOA0iziMDK-KqEnlgTRzysA.roa
Signing time: Sat 31 May 2025 09:37:55 +0000
ROA not before: Sat 31 May 2025 09:37:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140624
IP address blocks: 87.229.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 14:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:25:b4:7f:cc:25:2a:e1:54:81:5b:9e:55:43:10:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 31 09:37:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ab921ce0348b388c0caf8aa849e5813473cac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:ad:14:6e:29:b8:6d:b5:4f:71:a8:c0:69:
d4:5e:e6:12:ea:a3:86:83:77:62:b0:0a:40:89:69:
80:02:0e:0b:f7:70:b4:b0:dd:b5:59:99:e5:d9:ba:
2d:43:2d:24:f7:a0:37:d2:03:70:0b:a8:7f:a0:16:
93:28:05:74:7d:51:0a:c5:d6:3c:bf:e5:ef:62:e9:
72:23:b2:89:16:64:23:f6:05:69:71:e9:64:f6:20:
57:73:8b:52:15:cd:ff:b2:3b:fa:02:b8:3b:93:9d:
95:11:fb:5a:dc:4e:30:74:80:bd:2e:8a:37:53:67:
e0:3e:89:9b:66:b7:2a:31:40:11:c7:fa:cc:77:ab:
91:dc:b2:d7:3d:e8:ea:c7:cb:79:5a:b3:f8:e8:7c:
94:80:7d:93:51:5f:05:71:1b:cc:6b:e1:df:3a:32:
1e:fb:f7:31:ab:58:b7:a9:32:b2:ff:10:89:62:1c:
ef:f6:f9:28:7d:d9:9a:7f:18:10:54:55:c9:42:91:
7c:40:f6:e8:6c:85:23:0a:f4:4c:d5:e3:1d:3f:31:
12:18:64:13:c3:0e:65:91:a5:c4:d2:fb:15:43:79:
c1:2f:5d:23:71:c6:6b:c7:a0:b9:86:47:1b:62:30:
bd:4e:8e:e0:88:c0:a0:a3:68:60:e9:d8:39:5a:b3:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:92:1C:E0:34:8B:38:8C:0C:AF:8A:A8:49:E5:81:34:73:CA:C0
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JquSHOA0iziMDK-KqEnlgTRzysA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.110.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c6:d2:ed:f1:58:02:19:23:24:25:60:df:7e:68:49:eb:5e:
0d:45:8a:59:f8:96:99:dc:41:72:eb:e0:f1:3f:14:f1:3a:19:
15:44:16:1b:2c:c1:bc:07:5c:4a:3a:ee:23:02:77:d2:a1:3f:
cd:41:b2:4d:36:41:96:3a:6e:f3:4b:d5:b5:9f:4f:4f:11:cb:
f8:48:e6:ad:64:dc:03:59:6c:6a:06:ec:1a:a7:0e:52:65:fa:
c1:68:ef:e9:06:a3:15:07:47:9f:c2:47:0e:12:a0:30:ed:4a:
74:b2:4d:b9:2d:0b:bd:31:f4:60:ac:9d:85:b4:65:04:10:dc:
3d:d0:81:70:2f:f1:4f:9a:92:37:a1:65:8e:07:f2:d3:fe:fc:
88:bc:06:af:f9:ed:35:c4:a6:8c:42:bb:1d:63:45:7c:b1:73:
91:a4:d8:bf:fc:ea:a6:b5:79:6b:58:76:97:c3:f2:1c:8b:fa:
7c:2a:86:5a:65:84:95:69:5c:36:95:9f:67:6f:2b:67:48:a1:
3a:b3:47:49:7c:ee:35:86:87:b5:2a:4b:1c:b6:49:cf:62:0e:
2d:60:7b:3b:06:25:4a:db:0d:c9:cb:29:75:7d:e5:2b:01:d1:
52:d1:93:4a:c1:e6:62:aa:45:8c:93:70:50:5f:f3:40:de:9a:
5b:3f:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:56 2025 by rpki-client