Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/Jezfnmpr8w0vLyM_06Sr5JoyaRU.roa
File: Jezfnmpr8w0vLyM_06Sr5JoyaRU.roa (raw, json)
Hash identifier: kG64wb1seTjP8Ia4DVXyuTcysWxljFxTWHWq1jKmvh0=
Subject key identifier: 25:EC:DF:9E:6A:6B:F3:0D:2F:2F:23:3F:D3:A4:AB:E4:9A:32:69:15
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 019421B1B96F87B2320F20B855B1C1268F9E
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/Jezfnmpr8w0vLyM_06Sr5JoyaRU.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215120
IP address blocks: 91.227.33.0/24 maxlen: 24
193.178.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 14:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b9:6f:87:b2:32:0f:20:b8:55:b1:c1:26:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ecdf9e6a6bf30d2f2f233fd3a4abe49a326915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:dc:10:6f:e4:e7:64:6d:8a:7d:a1:b1:e0:
e8:ce:0d:c1:09:8c:36:ac:11:95:b6:ba:d9:95:b0:
ca:94:a5:9b:25:7b:7a:45:12:77:7b:4e:a6:53:71:
21:21:00:7c:bc:2a:20:41:d8:3e:af:f4:ea:f7:00:
06:cf:1c:a8:c8:33:ef:99:0f:e8:60:d7:45:6c:fb:
83:a8:06:10:7d:c3:d8:3a:78:6b:12:ae:f4:5c:55:
b5:5e:4e:f9:24:be:01:1c:2f:dc:99:a3:77:64:61:
50:61:49:2f:53:79:e7:d2:85:ce:32:32:42:8a:82:
00:d4:1f:87:38:cc:87:c5:97:37:59:ae:99:57:60:
27:28:6f:d2:e3:a7:6b:75:31:3d:96:e5:22:0a:56:
3f:fa:ed:cd:f7:4e:7e:63:a5:74:f4:3e:77:ef:0d:
53:4d:49:e9:e9:b4:3d:d2:56:b8:65:7c:a5:de:0a:
b3:42:08:30:98:9a:5e:92:7a:92:b5:89:95:d1:86:
8d:e1:a3:38:f7:48:52:5e:e3:14:fa:db:91:0e:88:
ca:1d:80:37:46:f0:1d:2f:11:aa:42:e0:8d:b9:9d:
41:86:12:e8:23:0a:b7:96:97:2d:85:11:9d:1b:70:
1d:7c:65:20:7b:f5:07:80:30:33:26:bd:0b:65:3a:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:DF:9E:6A:6B:F3:0D:2F:2F:23:3F:D3:A4:AB:E4:9A:32:69:15
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/Jezfnmpr8w0vLyM_06Sr5JoyaRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.33.0/24
193.178.186.0/24
Signature Algorithm: sha256WithRSAEncryption
81:57:f3:69:63:64:5b:f1:78:9c:df:56:ab:ee:c5:ab:35:8b:
3c:54:9f:87:4b:56:49:40:cd:31:da:7d:ba:6e:3b:db:fd:3b:
c9:16:65:5e:f7:cd:a1:03:e5:79:a4:38:1b:1b:a2:03:58:f1:
a6:61:c2:d3:0e:24:b6:2a:eb:e5:0a:37:81:d1:65:ff:c1:4f:
e9:5d:ed:42:c7:0a:9e:b2:78:a7:a6:2f:45:dc:55:7a:5c:a3:
d0:a8:93:b3:b2:2a:96:c5:06:96:24:c3:12:14:40:27:21:95:
92:25:e4:83:ad:c9:04:bf:78:0e:a8:81:62:55:9a:cf:9c:69:
4b:ca:80:04:0f:ab:f7:be:8c:b8:a3:a3:28:5b:35:6e:a7:34:
bf:1e:03:0c:1b:0b:0c:8e:35:42:79:15:55:1c:92:3c:42:98:
ed:cb:c2:1b:59:ad:49:cd:cc:93:e7:6d:1e:0f:51:ff:4e:0a:
0c:e8:16:90:92:bd:e5:b3:f3:cf:bc:60:8a:81:a2:8c:e6:0d:
c3:ec:ee:81:5b:23:b7:0b:4a:6f:d4:0f:f0:08:ef:cb:c5:77:
aa:c0:10:c6:b1:7e:bf:ed:24:90:4d:9b:19:51:d1:ab:21:0d:
34:ab:c8:fb:fe:5d:23:ea:7b:d0:d6:a3:13:8f:e5:82:0b:61:
d7:01:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:19:06 2025 by rpki-client