Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/JUggZ54nh451O4djV9Kq_9h-rE0.roa
File: JUggZ54nh451O4djV9Kq_9h-rE0.roa (raw, json)
Hash identifier: 7EcKoA9QLlkRF/WSyIt3mTsxE4r+U1TXfu5es0Zh4j8=
Subject key identifier: 25:48:20:67:9E:27:87:8E:75:3B:87:63:57:D2:AA:FF:D8:7E:AC:4D
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 01926608D96390A23A78BCF7D73A928B4C70
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/JUggZ54nh451O4djV9Kq_9h-rE0.roa
Signing time: Mon 07 Oct 2024 08:11:48 +0000
ROA not before: Mon 07 Oct 2024 08:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15659
IP address blocks: 80.202.0.0/16 maxlen: 16
84.48.0.0/18 maxlen: 18
84.49.0.0/16 maxlen: 17
84.49.128.0/17 maxlen: 17
89.10.0.0/16 maxlen: 16
89.11.0.0/17 maxlen: 17
213.145.160.0/19 maxlen: 19
213.187.160.0/19 maxlen: 19
213.187.190.0/24 maxlen: 24
217.13.0.0/19 maxlen: 19
2a04:980::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 08 Oct 2024 06:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:08:d9:63:90:a2:3a:78:bc:f7:d7:3a:92:8b:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Oct 7 08:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=254820679e27878e753b876357d2aaffd87eac4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:b7:d7:b8:d2:a4:ad:ad:b7:cf:f1:70:c8:
61:6e:bc:a9:43:46:8d:39:ac:a6:36:ca:ca:e6:7e:
00:01:93:0c:84:55:9d:c8:71:bb:de:d9:a8:5a:64:
ca:68:99:e7:06:b1:81:f9:28:06:cb:74:d9:62:a6:
88:7c:da:52:49:2f:5d:ac:83:08:31:c0:60:3a:51:
69:9a:77:9b:b1:aa:24:a1:45:ec:62:0f:9e:07:a6:
4b:6a:01:8e:36:dc:3a:7b:75:20:25:2f:62:38:01:
4c:29:25:27:85:79:39:37:17:52:fd:bf:58:ad:c4:
dd:2b:7e:51:bc:43:7f:aa:77:c4:a8:87:c1:49:d3:
20:4d:c0:9d:7d:b5:2c:cb:4c:00:b8:41:0f:b7:3c:
44:46:61:7a:a9:bd:38:e1:77:18:ff:6f:23:1a:69:
00:c3:97:6d:26:97:1c:bf:b4:33:32:66:fb:d9:04:
e2:e1:9c:85:85:15:a9:0d:43:8f:c6:45:5f:68:5c:
fc:e2:f3:84:8a:84:f9:dd:90:6d:8d:f2:38:81:57:
81:5f:62:57:74:f3:ee:a7:d7:8f:e4:6a:20:07:e7:
b9:d0:28:c9:9f:b7:22:c1:f2:12:d5:8a:44:b5:c9:
0e:f3:eb:b4:e2:df:18:85:49:96:01:bf:da:c5:5d:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:20:67:9E:27:87:8E:75:3B:87:63:57:D2:AA:FF:D8:7E:AC:4D
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/JUggZ54nh451O4djV9Kq_9h-rE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.202.0.0/16
84.48.0.0/18
84.49.0.0/16
89.10.0.0-89.11.127.255
213.145.160.0/19
213.187.160.0/19
217.13.0.0/19
IPv6:
2a04:980::/29
Signature Algorithm: sha256WithRSAEncryption
52:2e:c5:70:22:32:7f:5b:fc:32:ef:c8:60:e2:fa:1b:de:30:
2f:bc:95:d2:76:9c:52:3f:e0:44:f4:94:06:b8:17:ba:06:72:
36:12:e1:9e:08:9f:19:4c:48:ba:ed:62:f9:47:16:6d:03:48:
ad:97:5c:8b:32:10:18:e6:08:f7:55:2f:cc:e1:16:e4:d9:79:
07:f8:7d:76:b8:fa:78:38:ad:ba:5f:b8:eb:bc:c5:1d:be:65:
fc:42:24:a0:b8:0c:39:6c:fd:e5:a8:8b:62:03:ca:0d:ae:22:
81:2b:40:0a:c3:6d:43:38:29:02:b6:87:b3:7d:c0:7b:7d:04:
05:93:52:26:ef:b2:56:56:c2:fc:9a:9e:fa:a3:b8:9b:e5:4d:
30:db:cd:48:60:48:23:e1:e4:ab:d1:49:f4:d7:65:ed:f9:e3:
60:8a:18:50:b3:9a:f7:f5:7c:a0:4c:a6:de:4d:a4:7b:22:10:
d1:a4:7e:8b:8b:db:9b:a7:a6:49:bf:fd:ee:de:a4:c3:4b:84:
1f:d2:6c:50:4d:fd:e0:b9:67:73:a6:04:56:2f:b2:35:52:80:
c0:85:c7:df:a2:39:eb:83:a8:4d:dc:f2:ff:5e:2e:3f:84:0f:
d1:8d:b3:fa:de:b7:39:1e:d2:78:1e:af:ad:41:ec:16:f2:11:
bb:79:8e:43
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZJmCNljkKI6eLz31zqSi0xwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjQxMDA3MDgxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTQ4MjA2NzllMjc4NzhlNzUzYjg3NjM1N2QyYWFmZmQ4N2VhYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwui317jSpK2tt8/xcMhhbrypQ0aN
OaymNsrK5n4AAZMMhFWdyHG73tmoWmTKaJnnBrGB+SgGy3TZYqaIfNpSSS9drIMI
McBgOlFpmnebsaokoUXsYg+eB6ZLagGONtw6e3UgJS9iOAFMKSUnhXk5NxdS/b9Y
rcTdK35RvEN/qnfEqIfBSdMgTcCdfbUsy0wAuEEPtzxERmF6qb044XcY/28jGmkA
w5dtJpccv7QzMmb72QTi4ZyFhRWpDUOPxkVfaFz84vOEioT53ZBtjfI4gVeBX2JX
dPPup9eP5GogB+e50CjJn7ciwfIS1YpEtckO8+u04t8YhUmWAb/axV2y/wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFCVIIGeeJ4eOdTuHY1fSqv/YfqxNMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEvSlVnZ1o1NG5oNDUxTzRkalY5S3FfOWgtckUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwMAUMoDBAZU
MAADAwBUMTALAwMBWQoDBAdZCwADBAXVkaADBAXVu6ADBAXZDQAwDQQCAAIwBwMF
AyoECYAwDQYJKoZIhvcNAQELBQADggEBAFIuxXAiMn9b/DLvyGDi+hveMC+8ldJ2
nFI/4ET0lAa4F7oGcjYS4Z4InxlMSLrtYvlHFm0DSK2XXIsyEBjmCPdVL8zhFuTZ
eQf4fXa4+ng4rbpfuOu8xR2+ZfxCJKC4DDls/eWoi2IDyg2uIoErQArDbUM4KQK2
h7N9wHt9BAWTUibvslZWwvyanvqjuJvlTTDbzUhgSCPh5KvRSfTXZe3542CKGFCz
mvf1fKBMpt5NpHsiENGkfouL25unpkm//e7epMNLhB/SbFBN/eC5Z3OmBFYvsjVS
gMCFx9+iOeuDqE3c8v9eLj+ED9GNs/retzke0nger61B7BbyEbt5jkM=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:16 2025 by rpki-client