Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JCvYLGmDY0WJUKa_tCTSAfSD8EY.roa
File: JCvYLGmDY0WJUKa_tCTSAfSD8EY.roa (raw, json)
Hash identifier: 31XOLpcZqnG8JBvPmt/Vh0VGA4uEZCLFb5zavcxbLds=
Subject key identifier: 24:2B:D8:2C:69:83:63:45:89:50:A6:BF:B4:24:D2:01:F4:83:F0:46
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019425CDE9A7CA0F0A2C731838BF32DD03B0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JCvYLGmDY0WJUKa_tCTSAfSD8EY.roa
Signing time: Thu 02 Jan 2025 06:57:19 +0000
ROA not before: Thu 02 Jan 2025 06:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:cd:e9:a7:ca:0f:0a:2c:73:18:38:bf:32:dd:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 06:57:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=242bd82c698363458950a6bfb424d201f483f046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:ed:b8:ee:fc:b4:df:86:51:e3:2c:21:24:
48:ee:f6:96:48:94:db:f2:04:f1:3f:c9:14:e7:06:
e1:a3:a7:59:34:49:89:d9:da:9f:ac:b9:3e:2b:4c:
71:2b:e1:0e:a3:b2:6c:41:fe:73:17:28:5f:2b:5a:
cf:1b:c0:d5:39:97:1f:60:b4:c4:32:b1:42:88:f5:
52:87:b2:2b:76:94:1d:70:ee:ae:85:f4:92:55:6d:
69:11:b2:ca:9d:5d:be:fb:f1:fe:3d:cf:b3:a0:76:
49:ea:0d:af:bb:c2:c0:ee:b5:cd:81:12:02:59:66:
52:ad:3d:46:a3:66:b9:2e:42:81:5c:e5:b3:b5:d7:
2d:f3:01:67:f7:20:7b:69:0e:2b:4e:64:9f:14:97:
d4:97:d6:48:f4:23:24:c8:96:e4:30:7f:87:4b:c3:
95:ca:ee:87:b6:c1:92:fd:64:1f:c8:4e:81:a3:33:
cb:5b:ee:ac:f3:34:89:73:5f:c3:bc:c7:1f:15:63:
d5:96:ac:ae:e2:99:f0:b0:1e:b7:ae:5a:14:bd:d8:
8b:0e:e8:bc:d1:d7:ad:e5:dc:57:fc:f7:4e:86:34:
d0:c5:72:1f:a2:91:f7:27:4a:5c:8d:3f:69:1b:03:
97:fe:4c:0b:b9:ed:61:44:0c:2f:af:f9:03:e2:59:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:D8:2C:69:83:63:45:89:50:A6:BF:B4:24:D2:01:F4:83:F0:46
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JCvYLGmDY0WJUKa_tCTSAfSD8EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ed:66:17:b4:4e:47:1a:55:cd:bb:c1:26:78:06:57:7b:81:
e7:1e:63:de:da:fc:47:d1:c5:81:1c:0a:5b:bf:f1:5f:97:19:
c9:da:ce:03:c2:a2:c8:81:a3:13:6d:08:67:13:b5:14:f9:e0:
ea:38:b7:e7:e9:ff:0a:c6:45:f1:10:7c:1c:07:2f:d4:68:5c:
f9:2b:11:b0:6f:b9:55:6a:28:f4:16:ac:8a:e6:16:66:1a:66:
b7:96:e3:91:c8:4d:52:55:2d:18:e6:a1:e7:00:c6:67:43:50:
09:ba:af:61:76:e0:89:ab:c9:78:74:3e:a0:e6:e1:5a:08:35:
e2:5e:fa:64:44:29:1d:a0:4b:cf:55:a9:92:10:ef:95:58:a0:
6e:39:b2:2a:9d:67:f6:86:21:3d:19:5d:56:39:c5:b8:ec:d0:
f1:e4:cd:e6:84:b6:80:b0:fe:ef:a9:cc:58:21:10:87:61:b4:
43:b5:2b:3c:5c:eb:b3:08:b4:d1:99:e2:d8:95:ae:c3:05:a7:
ae:43:89:73:f3:cb:b2:4d:6a:3a:d6:53:fd:38:6b:37:18:6d:
7a:35:e0:51:e9:9f:9e:d1:ab:a0:10:dc:39:e9:b7:94:9c:fb:
5c:2a:ee:f1:c8:f5:df:55:21:a1:5b:14:78:cb:1c:d0:8f:6c:
1c:79:23:3e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlzemnyg8KLHMYOL8y3QOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMDY1NzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDJiZDgyYzY5ODM2MzQ1ODk1MGE2YmZiNDI0ZDIwMWY0ODNmMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9DtuO78tN+GUeMsISRI7vaWSJTb
8gTxP8kU5wbho6dZNEmJ2dqfrLk+K0xxK+EOo7JsQf5zFyhfK1rPG8DVOZcfYLTE
MrFCiPVSh7IrdpQdcO6uhfSSVW1pEbLKnV2++/H+Pc+zoHZJ6g2vu8LA7rXNgRIC
WWZSrT1Go2a5LkKBXOWztdct8wFn9yB7aQ4rTmSfFJfUl9ZI9CMkyJbkMH+HS8OV
yu6HtsGS/WQfyE6BozPLW+6s8zSJc1/DvMcfFWPVlqyu4pnwsB63rloUvdiLDui8
0det5dxX/PdOhjTQxXIfopH3J0pcjT9pGwOX/kwLue1hRAwvr/kD4lnE5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCQr2Cxpg2NFiVCmv7Qk0gH0g/BGMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSkN2WUxHbURZMFdKVUthX3RDVFNBZlNEOEVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvECOAwQA
2RMEMA0GCSqGSIb3DQEBCwUAA4IBAQAL7WYXtE5HGlXNu8EmeAZXe4HnHmPe2vxH
0cWBHApbv/FflxnJ2s4DwqLIgaMTbQhnE7UU+eDqOLfn6f8KxkXxEHwcBy/UaFz5
KxGwb7lVaij0FqyK5hZmGma3luORyE1SVS0Y5qHnAMZnQ1AJuq9hduCJq8l4dD6g
5uFaCDXiXvpkRCkdoEvPVamSEO+VWKBuObIqnWf2hiE9GV1WOcW47NDx5M3mhLaA
sP7vqcxYIRCHYbRDtSs8XOuzCLTRmeLYla7DBaeuQ4lz88uyTWo61lP9OGs3GG16
NeBR6Z+e0augENw56beUnPtcKu7xyPXfVSGhWxR4yxzQj2wceSM+
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client