Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/JQ6y93ZQCwf6F2PLaFuDyRd4ivQ.roa
File: JQ6y93ZQCwf6F2PLaFuDyRd4ivQ.roa (raw, json)
Hash identifier: 2wT4Y0TShwBTYRVH8KXWsr+kkcZo3lbKp+/4bC0Lk2g=
Subject key identifier: 25:0E:B2:F7:76:50:0B:07:FA:17:63:CB:68:5B:83:C9:17:78:8A:F4
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 0193CA0E1C838473A564EF0CB16F1EBE0870
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/JQ6y93ZQCwf6F2PLaFuDyRd4ivQ.roa
Signing time: Sun 15 Dec 2024 11:22:22 +0000
ROA not before: Sun 15 Dec 2024 11:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 83.101.128.0/19 maxlen: 19
83.101.128.0/24 maxlen: 24
83.101.129.0/24 maxlen: 24
83.101.137.0/24 maxlen: 24
83.101.138.0/24 maxlen: 24
83.101.139.0/24 maxlen: 24
83.101.140.0/24 maxlen: 24
83.101.141.0/24 maxlen: 24
83.101.143.0/24 maxlen: 24
83.101.149.0/24 maxlen: 24
83.101.150.0/24 maxlen: 24
83.101.151.0/24 maxlen: 24
83.101.154.0/24 maxlen: 24
83.101.155.0/24 maxlen: 24
83.101.156.0/24 maxlen: 24
212.70.32.0/19 maxlen: 19
212.70.32.0/24 maxlen: 24
212.70.34.0/24 maxlen: 24
212.70.36.0/24 maxlen: 24
212.70.40.0/24 maxlen: 24
212.70.45.0/24 maxlen: 24
212.70.47.0/24 maxlen: 24
212.70.48.0/24 maxlen: 24
212.70.49.0/24 maxlen: 24
212.70.50.0/24 maxlen: 24
212.70.51.0/24 maxlen: 24
212.70.52.0/24 maxlen: 24
212.70.53.0/24 maxlen: 24
212.70.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:0e:1c:83:84:73:a5:64:ef:0c:b1:6f:1e:be:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Dec 15 11:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=250eb2f776500b07fa1763cb685b83c917788af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:9b:f5:ba:5d:35:ea:b2:bd:39:94:08:10:
aa:b6:7b:45:bd:27:10:c6:9e:4c:c4:14:2e:c1:5f:
2f:c7:38:30:76:25:d3:78:ea:9f:71:80:d1:d6:03:
07:41:2c:4e:41:72:34:ec:e5:7b:53:9c:0c:6d:b2:
18:5d:04:c4:a9:34:2a:92:b3:b8:3f:46:18:e5:81:
8c:99:a4:98:4e:8c:09:e5:f1:13:59:59:50:e6:dd:
e9:79:dc:cc:d8:9f:05:de:12:02:c5:57:6c:9d:eb:
4f:ce:9b:f0:10:90:41:f8:ce:9b:fd:3f:05:2f:05:
f8:9c:96:83:23:02:02:02:01:fd:96:39:85:c9:56:
07:73:b8:86:c6:36:6f:35:ca:2f:f6:03:00:50:45:
32:51:eb:26:fc:92:2f:29:78:6d:bc:96:ba:ba:a0:
42:0f:20:a2:82:9a:81:87:91:58:fe:fb:30:68:3f:
58:6d:6f:a6:8e:63:c0:42:e9:bb:b8:94:81:af:59:
4e:30:b6:c8:2e:7d:dc:41:7f:0a:d7:65:1c:7e:0b:
d9:02:06:95:14:5e:07:fa:f6:1b:50:79:42:b0:5b:
ac:7c:8a:5e:a9:38:ac:5f:9e:b1:41:a7:43:63:5c:
75:33:e7:90:a7:3d:05:aa:49:1b:bc:3e:59:17:77:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:B2:F7:76:50:0B:07:FA:17:63:CB:68:5B:83:C9:17:78:8A:F4
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/JQ6y93ZQCwf6F2PLaFuDyRd4ivQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.101.128.0/19
212.70.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:96:ff:44:48:96:9b:b9:83:0b:a7:88:5b:6b:1e:e5:80:ba:
ae:a9:fb:b9:ff:01:3c:8b:f5:e7:b6:86:3f:13:11:dc:6c:90:
3f:92:00:5f:a9:6d:00:52:d1:43:34:84:1b:95:dd:c9:44:b7:
a9:6f:2e:7f:c7:d3:82:69:d5:fa:3a:22:da:d7:9c:0d:e4:d6:
72:95:5d:11:5b:a7:fd:57:5b:15:f2:ef:03:85:21:9b:fb:a2:
77:3a:0d:5b:64:90:8d:a6:f1:ee:d6:27:b9:2c:90:f4:44:cf:
e3:7c:b8:d6:65:56:de:f9:a5:86:85:27:7f:a7:4e:5f:af:e3:
0c:ba:8c:c3:93:ff:4d:bd:54:c8:9b:f9:17:71:60:24:c3:c9:
ed:68:bb:f4:fb:b6:78:97:47:07:ca:a1:3e:ec:af:10:a7:ef:
89:8d:9f:7b:c7:c7:a0:9f:91:39:37:bf:36:da:7a:62:fd:f2:
71:f6:7d:80:d6:40:77:00:a3:0c:72:15:a5:55:8b:7e:54:6b:
1e:d3:87:e7:0b:e5:ed:8c:5b:01:5a:32:00:44:73:51:95:70:
2a:d1:6a:44:d4:af:8c:4b:2b:19:95:bb:8a:89:ba:91:96:c0:
df:96:2c:49:e3:eb:a0:92:fb:df:76:f6:75:80:18:88:4d:6f:
8b:78:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:28 2025 by rpki-client