Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/JpWlJvCCVS36z-LHc9PW41oxa_I.roa
File: JpWlJvCCVS36z-LHc9PW41oxa_I.roa (raw, json)
Hash identifier: 0Qe5t6dZ0SimNDSIAmGunI3knFBiWFsu7sRPa92+BBg=
Subject key identifier: 26:95:A5:26:F0:82:55:2D:FA:CF:E2:C7:73:D3:D6:E3:5A:31:6B:F2
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019542E0A759542AAAC2DE373DF998C92F49
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/JpWlJvCCVS36z-LHc9PW41oxa_I.roa
Signing time: Wed 26 Feb 2025 15:29:33 +0000
ROA not before: Wed 26 Feb 2025 15:29:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211261
IP address blocks: 103.229.168.0/24 maxlen: 24
185.145.71.0/24 maxlen: 24
185.204.200.0/24 maxlen: 24
185.204.201.0/24 maxlen: 24
185.223.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 07:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:e0:a7:59:54:2a:aa:c2:de:37:3d:f9:98:c9:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Feb 26 15:29:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2695a526f082552dfacfe2c773d3d6e35a316bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:ca:2b:45:43:80:f4:f3:fd:3d:08:11:94:
4f:40:f8:a1:7a:44:fd:44:83:5f:88:b8:7d:3c:81:
91:01:1f:e0:79:3e:51:ee:90:38:ce:d5:91:ba:9c:
34:19:dc:99:2e:d2:14:7a:c5:8e:50:d0:91:50:24:
c5:5a:c3:25:1c:4a:9b:06:33:9f:66:0c:a8:e5:4e:
f4:3f:53:ab:10:8b:9d:bc:81:8d:34:6c:da:fb:45:
24:62:f7:47:88:b3:b4:5d:c3:b3:52:b1:31:90:38:
64:36:b2:e6:b4:ab:79:58:90:e7:53:90:77:b7:22:
43:e2:81:d3:9c:93:15:ec:03:6a:d5:98:08:d6:8a:
3a:ac:4e:69:90:3e:a7:a4:f5:c8:ca:aa:2a:eb:a7:
00:02:d9:37:31:a8:f6:9e:87:13:74:ba:6e:dc:d8:
dd:37:29:f0:68:ba:3b:47:19:05:a4:71:17:8e:cf:
55:e3:44:9d:e3:78:ea:dd:c0:33:3d:f8:33:93:ae:
93:e1:cc:e7:c0:0b:97:ed:39:b3:87:26:6d:2d:9d:
04:8f:d0:5f:a4:37:0d:aa:c2:4a:05:4a:26:9a:c1:
b4:fc:ae:9b:64:c3:27:82:39:4d:a2:ea:7c:fd:1a:
64:4a:10:d0:b9:02:53:36:53:3d:47:60:c5:03:d7:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:A5:26:F0:82:55:2D:FA:CF:E2:C7:73:D3:D6:E3:5A:31:6B:F2
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/JpWlJvCCVS36z-LHc9PW41oxa_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.168.0/24
185.145.71.0/24
185.204.200.0/23
185.223.176.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c4:99:3b:2b:9f:c1:78:08:63:38:c3:ad:14:4c:9e:03:12:
2d:38:6d:30:b7:be:4b:b9:1b:11:9e:ec:27:0d:82:e7:1f:28:
7f:ce:79:84:70:d8:a6:6b:8a:48:f9:8b:d6:27:a5:6b:49:e8:
0d:e8:9b:0d:da:d1:d9:e1:51:af:29:09:cf:f4:eb:f8:1d:6c:
84:bf:00:9c:c1:b0:1d:e2:01:be:29:4a:2c:3e:89:38:2b:38:
33:b0:a9:ee:07:71:f0:33:94:bc:f5:5a:53:fb:02:49:a4:7e:
de:cc:e9:4e:78:fa:af:2d:a8:94:5c:17:79:3e:ba:56:3b:fb:
d3:00:20:e8:57:b7:01:c8:fd:5c:cc:d0:81:38:e0:bf:98:37:
cf:92:51:69:8e:77:3e:29:ba:db:02:22:b5:d5:d8:06:c6:50:
2f:ef:a6:e7:1a:c2:a0:fa:3b:3d:a5:dd:2d:62:51:28:3a:f0:
76:20:7e:5b:62:65:59:1e:2c:09:8d:1f:ff:f0:b7:af:3e:f0:
55:4d:5c:1f:96:55:4d:fd:04:00:6f:18:a6:eb:d2:85:ca:b2:
42:db:9c:d4:ad:1a:d6:eb:c6:cb:8d:ad:75:28:07:5c:d1:d3:
c7:cf:c4:54:cd:96:17:d9:59:b5:bd:6c:62:d2:63:60:00:21:
dc:33:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:45 2025 by rpki-client