Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/JGz50J756JkxIpNOKOxd4g9PTLc.roa
File: JGz50J756JkxIpNOKOxd4g9PTLc.roa (raw, json)
Hash identifier: 8SsGQGzTADjq/Yk15kM9Qo5DCyLpI5rF7I8z+PDklO8=
Subject key identifier: 24:6C:F9:D0:9E:F9:E8:99:31:22:93:4E:28:EC:5D:E2:0F:4F:4C:B7
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BED4ED940955AECDA709FF770280D
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/JGz50J756JkxIpNOKOxd4g9PTLc.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34950
IP address blocks: 193.44.76.0/22 maxlen: 24
193.44.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ed:4e:d9:40:95:5a:ec:da:70:9f:f7:70:28:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=246cf9d09ef9e8993122934e28ec5de20f4f4cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:81:b4:ba:be:30:35:99:71:9d:92:1a:94:
6c:c4:1d:73:99:be:54:a0:23:6e:f6:a1:f5:46:83:
95:ba:29:28:c0:53:ca:e9:d5:98:8f:39:b9:97:52:
e5:c1:03:15:42:2c:81:a8:d9:25:71:ac:c6:e5:95:
d8:6a:38:9c:d2:c3:3c:25:a1:5c:b3:04:eb:13:59:
a9:a2:75:bb:b8:f5:4a:8b:08:f1:dc:1e:48:c3:28:
cc:ce:f2:c2:5d:c0:9d:1d:73:91:ec:56:ec:3a:0e:
ca:c6:5e:f9:a3:0e:cc:b2:6f:b4:86:4f:f2:e7:dc:
0b:8a:83:c8:34:7f:e5:d7:44:3e:b7:a0:ba:9e:fd:
4e:87:81:8a:82:1c:cf:50:f9:22:6c:c2:05:89:9e:
af:44:de:3b:cf:59:66:28:7e:f6:17:62:c3:41:f2:
5b:bc:38:f3:39:df:72:3b:a8:81:3a:e8:c1:33:f8:
a2:83:93:cb:1c:22:ed:f4:ae:e4:46:a4:dc:6a:c3:
9b:66:b8:89:7e:75:10:65:ce:a8:67:cd:0c:6f:b3:
3e:73:5b:10:78:da:66:01:8d:47:50:13:1a:bc:4c:
b5:0d:ca:7a:dd:94:a1:19:62:6c:b5:b0:09:e9:b1:
59:68:b9:c3:f4:6a:fc:1f:f4:1b:64:4b:03:db:96:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:F9:D0:9E:F9:E8:99:31:22:93:4E:28:EC:5D:E2:0F:4F:4C:B7
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/JGz50J756JkxIpNOKOxd4g9PTLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
e6:00:db:c4:62:e2:8b:f5:53:d6:24:be:8a:f5:34:91:9e:e9:
fc:43:60:50:21:27:4b:c9:0a:5d:8e:58:6f:9d:0b:d9:03:05:
3b:0c:d4:a7:13:82:77:26:ff:df:75:cd:fa:3f:3c:1c:87:ee:
f7:9f:f1:78:32:d7:5a:f5:61:17:68:1c:6a:f0:a1:e1:9a:0a:
85:0f:b3:a2:53:d4:4b:ee:e1:8d:30:b1:7c:36:51:5e:67:f5:
04:f7:09:7d:ca:56:6c:c7:5d:46:eb:67:27:1a:a8:87:e4:52:
99:70:c3:bd:53:b4:74:a7:42:58:e8:18:ea:e7:f6:6e:c0:cc:
26:9a:95:51:e0:c9:a7:fe:e2:59:83:e7:69:99:7d:37:b2:ea:
f5:04:66:f4:3a:3c:64:fd:51:36:ce:0a:99:72:c9:f4:58:7f:
bd:a4:8d:d6:ef:6f:41:e4:a4:7e:c0:af:7a:a1:af:48:40:69:
c2:ce:1b:1d:73:a7:58:1e:5a:22:ff:74:18:5f:d8:91:ac:a9:
48:42:93:92:c4:23:aa:12:15:65:78:ee:c4:7a:a3:80:af:4b:
51:88:be:c3:a4:44:fd:9b:74:76:19:da:6a:ff:e7:0a:43:f5:
0e:41:a8:c8:3a:ae:f0:b1:c5:fc:0b:17:38:86:3b:a7:c1:f3:
3e:95:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:45 2025 by rpki-client