Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/rJIG-GvOu2FYFHLNQ8PZ0JYjYWc.roa
File: rJIG-GvOu2FYFHLNQ8PZ0JYjYWc.roa (raw, json)
Hash identifier: MycmQZecwoRA3eUGjaUol2cPrdEp2h6BuXKVrfxTAB4=
Subject key identifier: AC:92:06:F8:6B:CE:BB:61:58:14:72:CD:43:C3:D9:D0:96:23:61:67
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 01951DA932D3293966F96FEB626A3A6F2401
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/rJIG-GvOu2FYFHLNQ8PZ0JYjYWc.roa
Signing time: Wed 19 Feb 2025 10:03:02 +0000
ROA not before: Wed 19 Feb 2025 10:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 92.246.82.0/24 maxlen: 24
92.246.83.0/24 maxlen: 24
103.226.192.0/24 maxlen: 24
103.229.170.0/24 maxlen: 24
103.229.171.0/24 maxlen: 24
185.145.68.0/24 maxlen: 24
185.145.69.0/24 maxlen: 24
185.167.181.0/24 maxlen: 24
185.201.4.0/24 maxlen: 24
185.204.203.0/24 maxlen: 24
185.223.177.0/24 maxlen: 24
185.223.179.0/24 maxlen: 24
185.237.212.0/24 maxlen: 24
185.237.213.0/24 maxlen: 24
185.237.214.0/24 maxlen: 24
2a07:4640::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 26 Feb 2025 15:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:a9:32:d3:29:39:66:f9:6f:eb:62:6a:3a:6f:24:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Feb 19 10:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac9206f86bcebb61581472cd43c3d9d096236167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:88:da:28:01:1a:c6:49:17:03:68:6f:ad:
03:6d:ac:22:a5:01:c3:02:69:cf:21:00:55:c4:9b:
c6:d0:1d:e2:6f:e4:54:a2:37:36:71:cb:d2:5f:1a:
bc:b5:4d:ba:a5:91:89:98:7c:77:08:74:fd:10:bd:
d5:c3:2d:33:26:80:1a:af:ea:47:d0:c9:bb:4b:bd:
23:88:93:cb:f4:f7:13:a9:21:45:72:13:c4:06:5e:
46:8f:6e:d2:5f:10:40:cf:ba:cb:c5:2a:b0:8f:61:
71:4e:ad:96:2e:fa:35:52:fd:f1:65:7b:e0:c6:04:
9f:9b:9c:4a:31:db:fa:2d:88:b7:8b:30:f0:59:0c:
db:c6:28:ce:56:82:ad:c1:50:07:36:e8:cd:eb:c4:
c1:75:64:54:b3:7c:7d:c4:29:37:c7:a9:06:0f:4f:
69:45:e5:89:4f:4e:02:00:c1:c9:ee:51:89:a0:03:
8e:61:2e:80:23:b9:2d:47:23:f7:59:2c:aa:2a:c3:
0b:63:5d:99:05:4e:cd:a9:85:97:c1:e0:97:24:c5:
2f:75:70:a3:53:af:62:30:f9:71:e2:79:60:0c:c1:
4d:ce:05:40:dc:0c:1e:53:02:bd:75:85:e3:79:6e:
87:f0:68:8f:3a:f0:f9:d2:a2:94:10:79:31:3d:bd:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:92:06:F8:6B:CE:BB:61:58:14:72:CD:43:C3:D9:D0:96:23:61:67
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/rJIG-GvOu2FYFHLNQ8PZ0JYjYWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.82.0/23
103.226.192.0/24
103.229.170.0/23
185.145.68.0/23
185.167.181.0/24
185.201.4.0/24
185.204.203.0/24
185.223.177.0/24
185.223.179.0/24
185.237.212.0-185.237.214.255
IPv6:
2a07:4640::/29
Signature Algorithm: sha256WithRSAEncryption
86:a0:6c:a4:c3:3f:e9:86:c4:5e:5f:b4:a7:da:ae:ad:3d:dc:
f1:d6:d1:d5:e1:ff:3a:9b:8e:24:09:cf:aa:7a:78:ba:61:d2:
05:74:1b:d2:0c:52:1e:7d:30:10:8d:b5:de:e4:b6:4c:94:37:
13:d3:fc:e4:49:c1:4d:d0:5b:20:12:5d:48:12:6a:05:55:f6:
14:3c:b6:a1:8e:c1:e0:bf:67:63:7c:8e:92:04:74:47:80:bf:
71:dc:72:6a:2d:a5:7c:c7:fa:24:61:e8:01:c7:61:c7:f7:a8:
ae:d4:08:7f:d4:2e:51:e9:01:c9:c0:29:bd:cb:0e:81:50:eb:
e0:af:ee:af:2a:d7:f4:76:3e:6c:d4:14:20:52:34:bf:9d:44:
b2:1a:ee:7c:e4:b3:c8:a3:da:0b:14:4b:68:f3:1b:c8:72:36:
02:7f:e0:66:55:3d:eb:a0:04:1f:55:29:99:0e:71:67:1e:eb:
08:3b:71:97:0e:71:4f:fd:a7:b8:fa:c5:1e:d4:8a:79:4f:d0:
18:93:ff:13:8b:ca:21:ae:be:30:d0:cd:92:60:11:38:f7:f9:
3d:e3:7d:85:99:9f:21:f1:45:ac:90:86:76:25:c9:8d:b1:a4:
99:70:20:9a:f2:fa:e7:04:43:ed:b8:a0:f1:40:1d:e3:5b:bb:
33:ec:73:a0
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAZUdqTLTKTlm+W/rYmo6byQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjU3ZGQ1MmM3NWZjZTM5ZmZlMjkxNTQ2OWQ5ZTY1NmRi
Y2I4NzMwHhcNMjUwMjE5MTAwMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzkyMDZmODZiY2ViYjYxNTgxNDcyY2Q0M2MzZDlkMDk2MjM2MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbqI2igBGsZJFwNob60DbawipQHD
AmnPIQBVxJvG0B3ib+RUojc2ccvSXxq8tU26pZGJmHx3CHT9EL3Vwy0zJoAar+pH
0Mm7S70jiJPL9PcTqSFFchPEBl5Gj27SXxBAz7rLxSqwj2FxTq2WLvo1Uv3xZXvg
xgSfm5xKMdv6LYi3izDwWQzbxijOVoKtwVAHNujN68TBdWRUs3x9xCk3x6kGD09p
ReWJT04CAMHJ7lGJoAOOYS6AI7ktRyP3WSyqKsMLY12ZBU7NqYWXweCXJMUvdXCj
U69iMPlx4nlgDMFNzgVA3AweUwK9dYXjeW6H8GiPOvD50qKUEHkxPb1lBQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFKySBvhrzrthWBRyzUPD2dCWI2FnMB8GA1UdIwQY
MBaAFHr1fdUsdfzjn/4pFUadnmVtvLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYt
YzI1MzQwOTZjNjBkLzEvckpJRy1Hdk91MkZZRkhMTlE4UFowSllqWVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYtYzI1MzQwOTZjNjBk
LzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQBXPZSAwQA
Z+LAAwQBZ+WqAwQBuZFEAwQAuae1AwQAuckEAwQAuczLAwQAud+xAwQAud+zMAwD
BAK57dQDBAC57dYwDQQCAAIwBwMFAyoHRkAwDQYJKoZIhvcNAQELBQADggEBAIag
bKTDP+mGxF5ftKfarq093PHW0dXh/zqbjiQJz6p6eLph0gV0G9IMUh59MBCNtd7k
tkyUNxPT/ORJwU3QWyASXUgSagVV9hQ8tqGOweC/Z2N8jpIEdEeAv3HccmotpXzH
+iRh6AHHYcf3qK7UCH/ULlHpAcnAKb3LDoFQ6+Cv7q8q1/R2PmzUFCBSNL+dRLIa
7nzks8ij2gsUS2jzG8hyNgJ/4GZVPeugBB9VKZkOcWce6wg7cZcOcU/9p7j6xR7U
inlP0BiT/xOLyiGuvjDQzZJgETj3+T3jfYWZnyHxRayQhnYlyY2xpJlwIJry+ucE
Q+24oPFAHeNbuzPsc6A=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:31 2025 by rpki-client