Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/j4BNllhE42YSfxfB0r_ZT9HcfLE.roa
File: j4BNllhE42YSfxfB0r_ZT9HcfLE.roa (raw, json)
Hash identifier: xF1kLHrbG04MdvpkypEDM+7VG09FquhuczVHMhaLheo=
Subject key identifier: 8F:80:4D:96:58:44:E3:66:12:7F:17:C1:D2:BF:D9:4F:D1:DC:7C:B1
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019424B3A6D56F90021AAFF2E290EB462A4E
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/j4BNllhE42YSfxfB0r_ZT9HcfLE.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41079
IP address blocks: 91.199.22.0/24 maxlen: 24
91.228.196.0/22 maxlen: 24
91.234.146.0/24 maxlen: 24
91.237.52.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
178.250.40.0/21 maxlen: 24
185.5.96.0/22 maxlen: 24
185.25.148.0/22 maxlen: 24
185.123.160.0/22 maxlen: 24
185.180.204.0/22 maxlen: 24
185.193.112.0/22 maxlen: 24
185.201.112.0/22 maxlen: 24
185.204.216.0/22 maxlen: 24
185.208.164.0/24 maxlen: 24
185.243.52.0/22 maxlen: 24
193.17.184.0/24 maxlen: 24
193.218.152.0/22 maxlen: 24
194.169.227.0/24 maxlen: 24
195.2.254.0/23 maxlen: 24
195.78.66.0/23 maxlen: 24
195.114.0.0/23 maxlen: 24
195.242.116.0/23 maxlen: 24
2a02:1778::/32 maxlen: 32
2a02:1778::/48 maxlen: 64
2a02:1778:194::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 29 Jan 2025 18:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a6:d5:6f:90:02:1a:af:f2:e2:90:eb:46:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f804d965844e366127f17c1d2bfd94fd1dc7cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:69:18:a6:dd:ca:d1:21:41:a7:9f:90:3e:
81:73:e2:fc:1a:ec:4c:f6:93:8d:7f:3b:11:5b:b2:
0c:2e:62:2a:f5:ce:9f:16:18:2c:39:2e:f7:11:48:
0a:23:37:57:dc:57:2a:8a:e6:a6:ec:a1:71:41:03:
df:4b:1d:80:45:1b:2b:19:de:4a:76:0b:87:47:70:
dc:fa:b4:71:08:88:68:2c:0d:8c:a9:5e:37:b3:a4:
55:d5:76:7d:38:2c:a1:1d:92:1b:4b:78:43:6f:90:
75:87:ae:cd:97:d2:52:94:e3:2a:81:aa:70:0f:67:
f7:3a:c0:47:07:e8:4e:31:2b:70:64:4b:a1:f1:53:
7d:54:63:c7:d6:0c:c7:ae:50:34:52:99:ec:d4:27:
45:1b:dc:46:58:47:da:34:7e:e7:25:cf:b4:ef:b5:
61:6d:98:01:92:c9:3d:13:21:40:43:b7:10:80:44:
f7:46:8f:c5:d9:99:fd:12:d3:e2:fe:04:9f:8c:50:
09:c9:83:d9:76:4b:c8:1e:a4:f0:45:67:a0:02:26:
44:cb:9d:9e:ce:79:48:d4:b5:a7:c7:41:d5:db:c6:
09:18:61:6b:7d:ee:c2:1d:92:f2:65:82:55:25:ef:
d8:bb:a8:b4:ea:d4:15:a4:03:42:d8:36:ba:59:9a:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:4D:96:58:44:E3:66:12:7F:17:C1:D2:BF:D9:4F:D1:DC:7C:B1
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/j4BNllhE42YSfxfB0r_ZT9HcfLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.22.0/24
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
178.250.40.0/21
185.5.96.0/22
185.25.148.0/22
185.123.160.0/22
185.180.204.0/22
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/24
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.169.227.0/24
195.2.254.0/23
195.78.66.0/23
195.114.0.0/23
195.242.116.0/23
IPv6:
2a02:1778::/32
Signature Algorithm: sha256WithRSAEncryption
2a:2c:22:40:ca:c5:8e:f7:08:09:f7:75:35:a6:88:ff:d0:1f:
91:ca:d3:72:fa:c8:82:e1:ae:93:7f:54:99:7e:29:d3:8a:d3:
ed:0f:2b:20:13:51:37:8d:a0:0d:7a:82:68:29:8e:58:dd:ac:
65:99:d7:a9:1f:92:59:67:3b:69:d4:ed:4a:0f:2a:d9:27:5a:
9a:ac:fd:17:b6:b1:73:cf:a5:5d:ce:7c:d6:c2:cf:2e:1e:f1:
33:08:5b:4a:cb:f6:72:bf:bf:e1:1e:7f:20:d5:2f:6a:f2:47:
5d:db:40:bf:20:4e:cd:5a:ff:1a:b6:2d:ae:b9:88:4b:f5:f9:
40:5b:95:c2:66:6e:70:da:82:f5:c7:c5:35:32:c5:ce:1a:d4:
66:3a:c6:41:96:51:40:5c:2d:e2:e8:a0:c8:d4:d8:58:be:a1:
02:51:f2:4a:6f:f1:d6:6b:29:97:8b:f7:04:ff:70:f5:b5:01:
4e:cb:9e:a1:06:ce:62:8a:27:5c:1c:0c:b7:86:d5:4b:40:83:
67:b6:c2:68:70:a6:0e:75:15:84:5c:32:41:cd:93:41:0e:6c:
d3:e5:07:ff:09:bd:bc:33:a2:67:41:92:c1:03:01:cb:14:a4:
90:53:d5:c8:3a:f7:3b:53:19:58:26:e0:af:06:dc:05:f5:64:
47:6d:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:47 2025 by rpki-client