Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/JurB0SRbg7RGwQUzbWWtm_LjuBc.roa
File: JurB0SRbg7RGwQUzbWWtm_LjuBc.roa (raw, json)
Hash identifier: P9mFeX8GgT4CmL0TYXvhm/IxApQONgMIBGLBDZifwHU=
Subject key identifier: 26:EA:C1:D1:24:5B:83:B4:46:C1:05:33:6D:65:AD:9B:F2:E3:B8:17
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 018FEE71D1F00FC5E4A4AD279EB5032FA7EC
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/JurB0SRbg7RGwQUzbWWtm_LjuBc.roa
Signing time: Thu 06 Jun 2024 16:46:27 +0000
ROA not before: Thu 06 Jun 2024 16:46:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 2a13:7b40:40::/48 maxlen: 48
2a13:7b40:51::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Oct 2024 07:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:71:d1:f0:0f:c5:e4:a4:ad:27:9e:b5:03:2f:a7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Jun 6 16:46:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26eac1d1245b83b446c105336d65ad9bf2e3b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:76:a5:2b:e5:d2:b7:5a:c8:78:9c:cc:8d:
cf:05:8c:80:ed:f5:87:91:86:62:57:19:d4:be:0b:
0c:ad:58:af:84:8b:81:a9:5b:e2:52:50:ce:71:c5:
c8:18:6f:d0:b2:9b:c0:c8:ec:22:86:ed:75:e5:dd:
b1:4e:3f:de:29:85:ef:f5:ab:dc:6f:a9:0d:28:f3:
ad:1a:b6:30:09:d0:33:11:d4:bb:f7:3f:de:ba:85:
61:eb:53:54:27:f6:79:2e:0d:d4:4d:d1:06:28:5b:
82:ca:fe:41:81:ea:4c:ae:23:5b:f8:a6:aa:27:60:
f5:0b:85:dd:9d:5d:47:1b:14:d0:db:37:f5:a8:6a:
86:9d:96:2c:5e:10:b0:95:bc:57:4a:15:a5:06:b7:
cd:13:32:e2:05:06:21:75:77:5c:a0:34:c5:93:02:
f4:f5:c5:f4:4d:b7:02:c9:37:6c:c9:61:ec:8f:1c:
f6:b8:d1:b2:79:5e:d2:6a:6a:20:ad:1b:d3:bf:85:
78:14:5d:70:9b:47:de:78:07:23:59:0f:82:7b:de:
ed:23:22:f7:e7:20:21:0b:9c:c1:ba:e5:e5:36:82:
80:6a:a0:30:e4:b1:29:d4:0e:02:18:ee:f2:ba:85:
3c:cd:19:a0:c1:f8:03:71:18:37:ed:d3:21:22:41:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:C1:D1:24:5B:83:B4:46:C1:05:33:6D:65:AD:9B:F2:E3:B8:17
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/JurB0SRbg7RGwQUzbWWtm_LjuBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7b40:40::/48
2a13:7b40:51::/48
Signature Algorithm: sha256WithRSAEncryption
17:9b:e7:2f:74:b8:62:7e:60:fe:5c:aa:7e:d7:50:e7:75:2e:
28:61:69:47:b9:5d:e9:6b:f7:60:80:68:d8:16:8b:d1:ab:0e:
5d:20:4a:ff:81:9e:75:e6:b6:9e:c3:75:f4:b6:fe:48:3d:fc:
1d:05:e1:0f:5b:1b:bd:67:4a:f0:9b:2f:66:8c:40:db:7d:51:
64:c4:9e:46:9f:40:72:73:0d:a1:5c:10:d4:ad:d9:36:b8:40:
91:24:53:f9:fd:27:75:4c:18:11:37:f0:5e:1d:e6:ff:4b:af:
6f:2a:2c:f6:28:8d:15:c0:87:7e:5f:93:98:87:73:69:ff:4a:
c1:b5:3b:9c:24:26:56:97:b0:23:5b:02:db:23:ae:0a:91:f2:
e2:0c:42:3e:df:74:cc:c9:9a:a1:e3:6c:46:8c:f1:5f:8b:b0:
25:86:59:59:eb:06:de:9c:4c:9d:8a:d4:ef:1a:14:b9:e5:df:
5e:cf:f6:8f:0f:03:8d:a3:96:c8:23:18:db:d0:86:05:57:fd:
b9:b9:a6:d4:64:ff:53:fc:b3:2f:6d:6c:ea:53:3e:63:7b:a3:
17:82:e4:5d:f0:8b:98:e3:0b:b9:54:05:f4:59:06:c6:b5:3f:
43:e2:70:25:2c:aa:2d:2c:d5:a2:7e:36:7d:75:2d:55:89:90:
dc:44:ee:d4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY/ucdHwD8XkpK0nnrUDL6fsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiNDIxNzVkNjIxNGEzMWE1NDA3ZGI4YjZjOTVmMWVj
NjBkNGUwHhcNMjQwNjA2MTY0NjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmVhYzFkMTI0NWI4M2I0NDZjMTA1MzM2ZDY1YWQ5YmYyZTNiODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj52pSvl0rdayHiczI3PBYyA7fWH
kYZiVxnUvgsMrVivhIuBqVviUlDOccXIGG/QspvAyOwihu115d2xTj/eKYXv9avc
b6kNKPOtGrYwCdAzEdS79z/euoVh61NUJ/Z5Lg3UTdEGKFuCyv5BgepMriNb+Kaq
J2D1C4XdnV1HGxTQ2zf1qGqGnZYsXhCwlbxXShWlBrfNEzLiBQYhdXdcoDTFkwL0
9cX0TbcCyTdsyWHsjxz2uNGyeV7SamogrRvTv4V4FF1wm0feeAcjWQ+Ce97tIyL3
5yAhC5zBuuXlNoKAaqAw5LEp1A4CGO7yuoU8zRmgwfgDcRg37dMhIkGAfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCbqwdEkW4O0RsEFM21lrZvy47gXMB8GA1UdIwQY
MBaAFFaItCF11iFKMaVAfbi2yV8exg1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQt
OWY5NDJiYzEyYTdlLzEvSnVyQjBTUmJnN1JHd1FVemJXV3RtX0xqdUJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQtOWY5NDJiYzEyYTdl
LzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhN7QABA
AwcAKhN7QABRMA0GCSqGSIb3DQEBCwUAA4IBAQAXm+cvdLhifmD+XKp+11DndS4o
YWlHuV3pa/dggGjYFovRqw5dIEr/gZ515raew3X0tv5IPfwdBeEPWxu9Z0rwmy9m
jEDbfVFkxJ5Gn0Bycw2hXBDUrdk2uECRJFP5/Sd1TBgRN/BeHeb/S69vKiz2KI0V
wId+X5OYh3Np/0rBtTucJCZWl7AjWwLbI64KkfLiDEI+33TMyZqh42xGjPFfi7Al
hllZ6wbenEyditTvGhS55d9ez/aPDwONo5bIIxjb0IYFV/25uabUZP9T/LMvbWzq
Uz5je6MXguRd8IuY4wu5VAX0WQbGtT9D4nAlLKotLNWifjZ9dS1ViZDcRO7U
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:10:30 2025 by rpki-client