Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/JasljvlmzHs2RmLfqRNztb1GzAY.roa
File: JasljvlmzHs2RmLfqRNztb1GzAY.roa (raw, json)
Hash identifier: r5u0yhi/L3JN3zJk8kCkcgdDONFqrZ1Du/BJlRg/pho=
Subject key identifier: 25:AB:25:8E:F9:66:CC:7B:36:46:62:DF:A9:13:73:B5:BD:46:CC:06
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 0195ABAC97616ACBF4D85E0A2F0589BFBA91
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/JasljvlmzHs2RmLfqRNztb1GzAY.roa
Signing time: Tue 18 Mar 2025 23:52:49 +0000
ROA not before: Tue 18 Mar 2025 23:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41869
IP address blocks: 217.197.164.0/22 maxlen: 24
217.197.165.0/24 maxlen: 24
217.197.166.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 19:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ab:ac:97:61:6a:cb:f4:d8:5e:0a:2f:05:89:bf:ba:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Mar 18 23:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ab258ef966cc7b364662dfa91373b5bd46cc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:4a:e4:1d:8e:e2:c5:9d:4a:2a:54:3c:0a:
ab:ac:72:78:06:7f:b1:d7:84:c3:28:8b:94:9d:ed:
6e:1e:7a:98:69:83:00:5a:4f:6d:c7:06:4e:bc:15:
99:b8:53:8b:6a:1d:bf:1b:80:29:30:13:52:78:03:
1a:e2:25:cc:05:fb:8f:9c:5b:b1:e1:ad:24:18:a0:
b5:41:07:75:54:52:96:32:d3:6e:ce:aa:31:58:a3:
00:b6:94:fa:04:b2:b2:b0:00:2c:c8:5a:10:87:df:
5d:e1:a7:16:98:37:82:38:7e:21:31:45:d8:71:40:
10:aa:ab:5f:52:72:31:98:78:0c:47:c3:81:87:4b:
07:1e:a9:ef:a9:a5:29:83:b3:c2:73:6b:0b:be:14:
d1:98:96:7f:91:b5:11:b3:2d:52:23:05:3e:0b:d4:
ff:eb:55:c4:33:fa:33:f0:45:28:8a:1f:85:08:5f:
57:c1:35:9f:65:7d:6d:27:bf:e0:78:b5:f0:ec:ef:
27:48:91:d5:fc:1d:b7:09:b4:48:61:57:22:d8:14:
6e:27:8e:c7:92:6c:42:a2:a3:be:53:47:6b:7f:31:
b7:46:69:93:b5:e3:01:75:9e:8e:1e:27:15:6a:b9:
62:64:19:37:15:8f:2f:96:13:09:3d:69:5b:cc:d6:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:25:8E:F9:66:CC:7B:36:46:62:DF:A9:13:73:B5:BD:46:CC:06
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/JasljvlmzHs2RmLfqRNztb1GzAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:38:d3:3b:6e:33:8e:8b:6b:dc:98:fb:86:8a:26:0e:ff:a2:
02:92:87:62:77:5b:6b:24:92:ee:a1:ca:3b:3a:09:0a:0f:ee:
8b:8f:62:27:89:aa:91:94:4a:a4:f4:2a:1a:e1:3d:6a:c6:ee:
69:31:97:53:8c:86:bd:6c:1a:59:bb:9c:a4:ba:ff:b8:60:62:
c8:cc:91:69:10:e0:e7:76:e1:91:7a:d9:8d:07:d9:8d:65:55:
59:a5:05:44:99:20:4b:ee:7b:8a:35:98:a6:5d:60:fd:f6:b2:
19:90:e6:57:de:68:96:72:d6:43:c4:77:54:1e:d6:b4:d7:2c:
d1:de:8a:00:1f:23:22:ba:32:c7:bb:13:07:7a:ca:38:5f:12:
63:39:4c:de:98:3e:1a:9d:28:7d:e3:0c:1e:09:b7:e3:da:65:
4d:34:e1:e8:27:24:ac:33:e6:a7:27:46:7b:11:26:50:5f:70:
0d:da:0c:68:db:2a:bb:57:5a:42:12:0c:96:89:6c:8f:d9:b7:
87:f8:81:7d:b9:a1:85:e6:ee:7a:e3:17:7d:f6:04:bb:0c:b4:
45:c8:04:e6:6d:47:67:8b:bd:1d:f0:ed:1c:48:b8:90:a0:4d:
05:8d:db:43:3a:e9:84:58:ef:5c:a4:b1:a8:62:5e:ff:3f:fb:
14:3e:f6:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWrrJdhasv02F4KLwWJv7qRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0
NTYwYTcwHhcNMjUwMzE4MjM1MjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFiMjU4ZWY5NjZjYzdiMzY0NjYyZGZhOTEzNzNiNWJkNDZjYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXdK5B2O4sWdSipUPAqrrHJ4Bn+x
14TDKIuUne1uHnqYaYMAWk9txwZOvBWZuFOLah2/G4ApMBNSeAMa4iXMBfuPnFux
4a0kGKC1QQd1VFKWMtNuzqoxWKMAtpT6BLKysAAsyFoQh99d4acWmDeCOH4hMUXY
cUAQqqtfUnIxmHgMR8OBh0sHHqnvqaUpg7PCc2sLvhTRmJZ/kbURsy1SIwU+C9T/
61XEM/oz8EUoih+FCF9XwTWfZX1tJ7/geLXw7O8nSJHV/B23CbRIYVci2BRuJ47H
kmxCoqO+U0drfzG3RmmTteMBdZ6OHicVarliZBk3FY8vlhMJPWlbzNa0pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWrJY75Zsx7NkZi36kTc7W9RswGMB8GA1UdIwQY
MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt
ZDcwY2Q5N2Y0ODU3LzEvSmFzbGp2bG16SHMyUm1MZnFSTnp0YjFHekFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3
LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2cWkMA0G
CSqGSIb3DQEBCwUAA4IBAQCkONM7bjOOi2vcmPuGiiYO/6ICkodid1trJJLuoco7
OgkKD+6Lj2IniaqRlEqk9Coa4T1qxu5pMZdTjIa9bBpZu5ykuv+4YGLIzJFpEODn
duGRetmNB9mNZVVZpQVEmSBL7nuKNZimXWD99rIZkOZX3miWctZDxHdUHta01yzR
3ooAHyMiujLHuxMHeso4XxJjOUzemD4anSh94wweCbfj2mVNNOHoJySsM+anJ0Z7
ESZQX3AN2gxo2yq7V1pCEgyWiWyP2beH+IF9uaGF5u564xd99gS7DLRFyATmbUdn
i70d8O0cSLiQoE0FjdtDOumEWO9cpLGoYl7/P/sUPvbE
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:33:33 2025 by rpki-client