Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/JdrIolS1gsKyyuzaBr0sfgj4Ujc.roa
File: JdrIolS1gsKyyuzaBr0sfgj4Ujc.roa (raw, json)
Hash identifier: UOuYtCFZrG6FsJOMkRXW2rNhk39LWzFOjzUw0DMxcns=
Subject key identifier: 25:DA:C8:A2:54:B5:82:C2:B2:CA:EC:DA:06:BD:2C:7E:08:F8:52:37
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 01971B7EA8A9B52A1A48664DA97E35226DB2
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/JdrIolS1gsKyyuzaBr0sfgj4Ujc.roa
Signing time: Thu 29 May 2025 10:02:54 +0000
ROA not before: Thu 29 May 2025 10:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49765
IP address blocks: 5.226.56.0/21 maxlen: 21
5.226.56.0/24 maxlen: 24
5.226.57.0/24 maxlen: 24
5.226.58.0/23 maxlen: 23
5.226.60.0/24 maxlen: 24
5.226.61.0/24 maxlen: 24
5.226.62.0/24 maxlen: 24
5.226.63.0/24 maxlen: 24
109.72.16.0/20 maxlen: 20
109.72.16.0/24 maxlen: 24
109.72.17.0/24 maxlen: 24
109.72.18.0/24 maxlen: 24
109.72.19.0/24 maxlen: 24
109.72.21.0/24 maxlen: 24
109.72.22.0/24 maxlen: 24
109.72.23.0/24 maxlen: 24
109.72.24.0/24 maxlen: 24
109.72.25.0/24 maxlen: 24
109.72.26.0/24 maxlen: 24
109.72.27.0/24 maxlen: 24
109.72.28.0/24 maxlen: 24
109.72.30.0/24 maxlen: 24
109.72.31.0/24 maxlen: 24
137.221.6.0/24 maxlen: 24
185.48.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 15:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:7e:a8:a9:b5:2a:1a:48:66:4d:a9:7e:35:22:6d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: May 29 10:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25dac8a254b582c2b2caecda06bd2c7e08f85237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:fd:d4:fd:7d:5b:31:d7:b4:d3:f9:12:0c:
7e:da:42:c8:86:b9:5f:32:d5:3e:26:b3:05:5c:95:
71:ed:73:e7:57:9f:ca:91:04:5d:62:8a:4f:08:8a:
55:25:da:72:1d:f0:55:23:bf:e0:3a:9d:38:58:5b:
e2:ec:73:7c:21:b4:97:d6:69:46:7f:4e:48:7f:c7:
27:27:8c:55:70:93:e9:e4:ff:fb:4c:ed:dd:f1:3b:
54:09:f7:ff:cd:8b:e7:29:45:c4:4d:7d:1b:65:e0:
ec:03:99:9f:1d:97:6a:da:75:d0:ca:9c:8c:83:94:
bb:51:6c:1f:19:4c:78:ba:34:bc:2a:7d:cd:99:64:
19:69:82:36:85:22:92:7e:11:59:52:ef:8a:94:4a:
00:85:a0:ef:34:65:26:df:e1:94:a1:65:0f:00:84:
88:52:9a:31:33:21:fe:f8:bf:15:8e:c6:cc:1e:07:
2d:0b:55:24:dd:e6:95:a5:24:bf:f0:34:84:c4:87:
74:94:33:7f:46:1b:97:79:57:2e:42:1c:68:44:54:
fd:63:0a:48:88:cd:74:fd:27:ab:eb:85:fc:02:8c:
4c:40:53:b4:09:9b:dd:1e:08:9c:cb:c1:74:16:55:
2a:53:e8:af:c1:f0:09:70:0a:2f:9f:f5:d1:69:77:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DA:C8:A2:54:B5:82:C2:B2:CA:EC:DA:06:BD:2C:7E:08:F8:52:37
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/JdrIolS1gsKyyuzaBr0sfgj4Ujc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.56.0/21
109.72.16.0/20
137.221.6.0/24
185.48.108.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b9:8d:c9:70:57:4c:50:ea:c2:cd:fa:90:ca:1b:d3:4f:76:
c2:db:4e:7a:d2:1c:b1:e2:8a:8e:b0:5e:5f:ac:99:14:02:46:
1b:70:d9:a9:42:2b:a2:ec:b3:92:0f:5b:65:fc:c5:2d:78:44:
61:3d:b0:d9:1c:9a:3c:31:7a:63:8d:48:be:8d:d2:39:fc:60:
45:d5:06:fa:d3:1c:53:3f:15:9f:0e:5f:4b:3c:a9:4a:0d:f8:
a0:13:26:f7:1b:0f:4a:9d:02:e1:dc:74:8e:76:f3:5a:89:35:
22:6d:42:75:ca:69:c2:1a:e0:86:97:f5:8b:9c:10:9d:86:49:
ce:93:e3:2f:01:7a:62:df:f8:eb:bb:0b:cc:cc:17:91:61:69:
cb:ba:35:9f:c9:e9:75:59:7b:63:21:2c:70:d7:ab:e5:df:de:
4b:81:2d:16:61:07:ff:e5:fd:7e:e8:af:21:dc:5d:97:b9:9f:
66:fb:25:8d:6a:f0:5a:e0:29:ea:2e:11:2d:e9:02:d3:68:66:
16:02:16:95:53:fb:3c:c0:77:db:a2:23:eb:05:76:50:7a:96:
5d:05:ce:fc:e3:08:22:5e:61:65:2a:59:c7:70:83:2d:0f:62:
e5:a0:ef:9e:b2:de:e4:cf:c7:c0:c1:60:59:a0:4a:91:2d:84:
65:86:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:51 2025 by rpki-client