Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/jcyrUDMeJXfObEKkJyx7WISKueo.roa
File: jcyrUDMeJXfObEKkJyx7WISKueo.roa (raw, json)
Hash identifier: zPEPGwtSGrubLAWMc29O6gXuw0E6NkgFA4uGfGttPS8=
Subject key identifier: 8D:CC:AB:50:33:1E:25:77:CE:6C:42:A4:27:2C:7B:58:84:8A:B9:EA
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 018CC5DC34D520AB98792D2860B405227ADC
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/jcyrUDMeJXfObEKkJyx7WISKueo.roa
Signing time: Mon 01 Jan 2024 16:29:52 +0000
ROA not before: Mon 01 Jan 2024 16:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48181
IP address blocks: 2.56.52.0/22 maxlen: 24
151.237.48.0/21 maxlen: 21
45.154.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:34:d5:20:ab:98:79:2d:28:60:b4:05:22:7a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Jan 1 16:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dccab50331e2577ce6c42a4272c7b58848ab9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:16:50:8c:39:16:c6:36:33:b1:1e:0a:28:
94:12:46:c1:5d:91:c9:7d:fc:df:0f:2f:dd:84:07:
57:48:31:3f:a0:3d:5c:92:17:23:8d:12:db:45:62:
db:47:ab:a7:8a:af:06:f2:0c:0c:59:98:57:54:5a:
8d:33:99:28:f5:a9:b4:e3:30:8a:26:c0:ac:f6:5a:
0e:6a:67:1e:a7:5c:82:6d:b3:67:04:00:7c:a9:da:
e7:3e:1e:ce:cb:0c:ef:e5:b6:ab:91:8e:b3:96:b0:
94:a9:86:4a:58:56:84:92:44:2b:69:c0:0a:5c:4a:
d9:4d:f0:46:0b:18:82:00:e5:05:9a:2f:7f:12:3c:
40:0a:09:10:2a:e8:df:70:e2:b2:fb:49:cd:68:31:
ca:a1:72:84:93:af:04:96:a9:e3:37:8f:c8:6a:d2:
ac:1c:71:5f:39:df:da:2a:d4:14:f8:16:d7:36:72:
3b:3d:2e:12:1d:cb:54:79:97:dd:84:0c:14:55:7a:
f8:56:4b:c6:4a:f3:71:27:5a:6f:ef:75:2e:d1:bf:
a3:c0:39:44:0a:db:be:f5:b1:35:1d:6f:bc:cb:ce:
de:1c:dc:76:8c:db:2e:21:07:cb:55:00:35:85:f7:
a4:a7:90:5c:a8:a6:8d:f2:60:1f:c3:86:d9:58:51:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:AB:50:33:1E:25:77:CE:6C:42:A4:27:2C:7B:58:84:8A:B9:EA
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/jcyrUDMeJXfObEKkJyx7WISKueo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.52.0/22
45.154.76.0/22
151.237.48.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:2b:09:59:b5:53:50:ac:7f:a6:28:d5:72:81:fb:08:5e:30:
41:e4:61:9f:be:57:77:e4:3c:c6:9c:c0:40:7c:c3:fd:9c:ee:
49:37:ad:37:70:a0:ba:1e:90:92:e0:68:60:54:61:fb:e4:3a:
59:40:6a:a7:33:e1:e5:35:7f:5d:d5:6d:16:b7:a8:0b:82:76:
62:4f:bb:ed:a8:26:4f:f1:1e:48:23:b8:09:94:fa:c1:17:b1:
88:96:bf:c5:d5:24:6c:4d:42:ee:1f:db:49:15:8e:72:bf:70:
af:37:e0:a1:4c:a2:d2:a6:06:02:0f:f6:af:ea:d5:23:3d:4d:
f1:1b:da:ad:18:08:61:a4:7c:0e:5d:7e:4e:c6:c5:00:59:d6:
68:95:0d:8f:84:3f:dd:43:fb:d1:ff:84:77:ab:8c:6d:91:7f:
9b:3e:7d:1d:20:52:cc:71:b1:25:7f:09:04:62:9d:23:7a:b2:
38:dc:c4:93:c8:d5:63:f9:49:9f:b1:86:ed:1a:73:ff:b8:76:
c4:21:2e:1f:5f:d0:92:d5:e2:87:b6:c0:27:2a:1f:d2:31:b1:
cb:bf:06:2e:c9:ac:e5:d6:f3:85:c1:75:1d:72:a6:3c:a9:9c:
1b:07:79:94:9d:80:62:f6:36:58:96:71:03:39:66:1f:93:62:
1c:d1:a9:da
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzF3DTVIKuYeS0oYLQFInrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWYyNTgyODM1MTdkZjE5ODU5Mzg4ZTEzYmFkMWFlMDI2
OGE1ZmIwHhcNMjQwMTAxMTYyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGNjYWI1MDMzMWUyNTc3Y2U2YzQyYTQyNzJjN2I1ODg0OGFiOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTcWUIw5FsY2M7EeCiiUEkbBXZHJ
ffzfDy/dhAdXSDE/oD1ckhcjjRLbRWLbR6uniq8G8gwMWZhXVFqNM5ko9am04zCK
JsCs9loOamcep1yCbbNnBAB8qdrnPh7Oywzv5barkY6zlrCUqYZKWFaEkkQracAK
XErZTfBGCxiCAOUFmi9/EjxACgkQKujfcOKy+0nNaDHKoXKEk68ElqnjN4/IatKs
HHFfOd/aKtQU+BbXNnI7PS4SHctUeZfdhAwUVXr4VkvGSvNxJ1pv73Uu0b+jwDlE
Ctu+9bE1HW+8y87eHNx2jNsuIQfLVQA1hfekp5BcqKaN8mAfw4bZWFGv9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI3Mq1AzHiV3zmxCpCcse1iEirnqMB8GA1UdIwQY
MBaAFIufJYKDUX3xmFk4jhO60a4CaKX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGIt
OGY1ZTk5N2FiMWI1LzEvamN5clVETWVKWGZPYkVLa0p5eDdXSVNLdWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGItOGY1ZTk5N2FiMWI1
LzEvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjg0AwQC
LZpMAwQDl+0wMA0GCSqGSIb3DQEBCwUAA4IBAQAvKwlZtVNQrH+mKNVygfsIXjBB
5GGfvld35DzGnMBAfMP9nO5JN603cKC6HpCS4GhgVGH75DpZQGqnM+HlNX9d1W0W
t6gLgnZiT7vtqCZP8R5II7gJlPrBF7GIlr/F1SRsTULuH9tJFY5yv3CvN+ChTKLS
pgYCD/av6tUjPU3xG9qtGAhhpHwOXX5OxsUAWdZolQ2PhD/dQ/vR/4R3q4xtkX+b
Pn0dIFLMcbElfwkEYp0jerI43MSTyNVj+UmfsYbtGnP/uHbEIS4fX9CS1eKHtsAn
Kh/SMbHLvwYuyazl1vOFwXUdcqY8qZwbB3mUnYBi9jZYlnEDOWYfk2Ic0ana
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:48 2025 by rpki-client