Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JsNCotYU1ewayRos-BWGG5ufkXI.roa
File: JsNCotYU1ewayRos-BWGG5ufkXI.roa (raw, json)
Hash identifier: ttHT6dE+AsdIqKeTkK21lAV3jdihO9oThbaxvEL93wE=
Subject key identifier: 26:C3:42:A2:D6:14:D5:EC:1A:C9:1A:2C:F8:15:86:1B:9B:9F:91:72
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196D57AB4690AD1A73BA00CECC5B28633DE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JsNCotYU1ewayRos-BWGG5ufkXI.roa
Signing time: Thu 15 May 2025 19:45:10 +0000
ROA not before: Thu 15 May 2025 19:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 151.244.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 18:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:7a:b4:69:0a:d1:a7:3b:a0:0c:ec:c5:b2:86:33:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 15 19:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c342a2d614d5ec1ac91a2cf815861b9b9f9172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:e7:ff:90:48:4d:66:c4:af:df:0a:8e:1e:
f4:ff:cf:5d:43:a1:5c:e4:9c:2e:1f:c4:9a:46:b1:
7f:48:a5:dd:54:a3:af:4d:94:cb:9f:92:4e:4f:d1:
fc:f1:77:3c:3b:df:eb:c1:3a:72:bb:ff:ab:4b:64:
37:bb:19:76:08:9f:15:a2:ff:a3:d2:37:dd:2c:a5:
51:8c:ba:9d:e3:5f:93:70:99:6b:bb:47:5d:ac:97:
c6:40:43:f1:32:1c:9b:19:9d:db:f5:1f:f2:b7:d4:
7f:16:f7:4f:be:c1:b3:87:57:14:8e:27:3e:40:19:
30:16:36:6e:c1:b5:65:cb:6a:0f:58:00:ae:23:e5:
89:78:98:72:0e:14:5c:8a:2f:62:e6:b3:d5:e7:5f:
db:e7:e4:f4:54:bb:83:17:53:89:4b:04:8e:b5:b5:
9f:e4:b1:a1:c9:93:20:72:ad:e8:28:d5:e0:ba:53:
7c:90:eb:a0:59:03:b3:fd:36:bb:a9:4b:3d:c9:a6:
44:4c:dc:24:76:67:1b:76:e9:04:27:19:9d:60:11:
25:5b:c1:eb:12:5c:1a:b8:81:12:ee:a8:76:78:c9:
1f:81:be:25:60:36:eb:33:d4:92:75:d6:f3:fe:06:
a3:37:cf:c2:87:89:c2:29:d7:c2:6e:6f:4d:1b:10:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C3:42:A2:D6:14:D5:EC:1A:C9:1A:2C:F8:15:86:1B:9B:9F:91:72
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JsNCotYU1ewayRos-BWGG5ufkXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.70.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c1:0d:e6:fb:3b:67:14:a6:e9:77:7c:ed:44:d5:43:fd:80:
70:b7:32:90:72:b5:d0:00:4c:27:c9:ab:96:9c:72:36:4f:c9:
01:d6:f6:e2:b5:6d:49:ec:98:6e:c1:6a:13:8e:c8:61:2a:02:
5b:80:4f:b3:80:ab:4e:65:23:85:f4:fe:dc:ad:41:a6:e2:b0:
0f:e4:c5:48:04:c5:55:27:68:55:3a:f1:ad:a6:31:d3:97:da:
1f:01:75:54:03:ae:1a:80:cc:67:29:bb:5a:80:56:0f:b0:9a:
4d:d9:c1:b1:4f:45:eb:3c:5a:1d:32:3d:fe:cb:a7:af:28:d8:
9f:85:09:db:eb:75:30:23:e8:2e:c0:ce:a3:15:79:68:12:15:
db:59:d8:60:0b:7a:be:79:7d:eb:aa:b8:f9:52:88:20:12:cf:
f9:26:d0:25:68:3d:5c:21:4b:a1:c7:bb:37:3d:f7:4f:28:eb:
7c:05:d3:a5:70:6a:8d:ce:0a:fb:8a:72:58:3b:e9:6c:f7:87:
5a:00:6d:34:2e:81:4c:05:c0:7b:76:5f:89:f4:80:1f:3d:c3:
dd:5f:4d:fc:e7:d2:d8:e6:aa:58:d9:c5:c9:aa:c0:cd:f5:9c:
24:27:42:2a:6f:37:6a:fb:a4:f6:b0:a6:3c:fa:72:8f:11:3f:
b6:1d:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:27 2025 by rpki-client