Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J_7sXV5upphrMeWmQSnXCwIXDQA.roa
File: J_7sXV5upphrMeWmQSnXCwIXDQA.roa (raw, json)
Hash identifier: 4h+WY70LRmxdfxtGlC8W0Wab1ZRWFoqI3ixaLgWSM0o=
Subject key identifier: 27:FE:EC:5D:5E:6E:A6:98:6B:31:E5:A6:41:29:D7:0B:02:17:0D:00
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 019425211B246BFA8E99569BF5EC7F82FAEE
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J_7sXV5upphrMeWmQSnXCwIXDQA.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49549
IP address blocks: 146.19.128.0/24 maxlen: 24
178.250.187.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
193.0.227.0/24 maxlen: 24
193.0.229.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
193.0.239.0/24 maxlen: 24
217.119.129.0/24 maxlen: 24
2a0f:cdc2::/32 maxlen: 32
2a0f:cdc4::/32 maxlen: 32
2a0f:cdc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1b:24:6b:fa:8e:99:56:9b:f5:ec:7f:82:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27feec5d5e6ea6986b31e5a64129d70b02170d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:8e:e0:30:09:a2:df:84:6a:a4:64:c5:f9:
69:c2:d8:cb:4a:32:c5:b9:f8:c6:d4:98:a4:6e:70:
8f:e7:1c:18:ad:34:f2:cb:d9:f2:cb:c5:f3:5b:6e:
0a:9b:50:33:21:a6:d5:1b:a2:66:e1:4c:9c:fa:3c:
fe:ac:b9:b5:f9:04:40:96:e1:19:af:34:43:47:ab:
06:84:00:b3:c4:93:08:f1:b5:67:3d:53:c5:52:a1:
a9:b1:02:b9:8b:02:8c:4c:fd:a9:b3:dc:b0:c0:55:
00:d5:88:26:da:d1:0f:da:e2:1d:c0:d7:d5:19:c9:
be:a6:41:cd:f0:56:43:07:a8:b8:59:11:2a:c5:b0:
60:a5:26:3a:a3:9e:32:8f:2f:9f:b3:27:5d:c1:7f:
ca:f6:07:27:3b:d9:a8:f5:96:51:aa:f4:33:4b:aa:
11:b6:90:f1:72:56:94:d3:57:f7:22:01:ed:b4:32:
6b:58:16:19:34:34:99:31:29:a6:ef:4e:f6:a3:37:
ac:73:cc:cc:84:22:ea:6a:ea:80:f1:ac:9e:0d:ac:
63:bb:0c:33:ae:43:22:b0:6c:82:b3:db:51:48:f3:
e0:ab:83:91:4b:50:97:1a:3b:bb:58:3e:97:6f:3b:
f2:dc:cd:66:ae:b5:19:b2:71:b5:4f:f9:de:38:44:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FE:EC:5D:5E:6E:A6:98:6B:31:E5:A6:41:29:D7:0B:02:17:0D:00
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/J_7sXV5upphrMeWmQSnXCwIXDQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
178.250.187.0/24
178.250.191.0/24
193.0.227.0/24
193.0.229.0-193.0.230.255
193.0.239.0/24
217.119.129.0/24
IPv6:
2a0f:cdc2::/32
2a0f:cdc4::/31
Signature Algorithm: sha256WithRSAEncryption
5f:6c:dc:6e:2d:c0:7f:fa:9c:94:d4:d8:6f:e0:70:77:63:86:
d7:83:94:f8:d5:40:f0:b4:cb:5b:7c:2a:89:45:2c:5a:8e:45:
98:58:8d:50:9e:10:41:3b:cc:78:b4:ef:82:4d:06:04:36:53:
da:e2:eb:f8:8f:21:51:49:13:f0:e8:0d:ee:ce:e3:10:79:6c:
23:74:a8:8f:91:57:e5:a7:f7:ed:56:0b:a4:79:5f:b1:26:fb:
5e:29:1b:88:a9:72:d8:e6:51:14:99:1c:11:0f:cb:1e:e2:32:
0f:a8:85:10:f7:4f:15:5e:37:c5:6b:79:63:7a:89:2f:45:e8:
d1:6d:76:57:a4:c5:22:e1:e0:c9:af:17:45:a5:80:e6:90:6b:
90:a6:d5:70:7e:d6:53:a6:7a:08:9c:05:76:d8:38:92:7b:46:
5b:8f:b7:f6:67:50:a6:56:12:0b:13:09:a6:89:03:ab:f2:c0:
e7:a3:3b:64:96:ef:3c:5e:43:0a:15:4c:c7:24:c5:65:fe:6c:
5f:1e:e3:af:11:8e:e5:76:b5:9c:6f:b7:eb:62:a7:cf:8d:9f:
3e:34:57:4c:47:fb:ba:7b:5e:de:3d:5d:4a:68:1f:7e:06:60:
cf:2b:fb:76:23:d3:93:fb:bb:4f:3b:ab:f0:82:b9:a1:92:6e:
75:95:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:41:44 2025 by rpki-client