Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/j19sw2_Mbi-6pfRMXN48BxipkuA.roa
File: j19sw2_Mbi-6pfRMXN48BxipkuA.roa (raw, json)
Hash identifier: wbKe1L54tsgMqciiUNkKC51FK8tWRRpiln8MoHMQUYs=
Subject key identifier: 8F:5F:6C:C3:6F:CC:6E:2F:BA:A5:F4:4C:5C:DE:3C:07:18:A9:92:E0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01974231EE8FF16FAD28360CB9316EE9D31A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/j19sw2_Mbi-6pfRMXN48BxipkuA.roa
Signing time: Thu 05 Jun 2025 22:24:18 +0000
ROA not before: Thu 05 Jun 2025 22:24:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.227.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
89.106.15.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 15:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:31:ee:8f:f1:6f:ad:28:36:0c:b9:31:6e:e9:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 5 22:24:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f5f6cc36fcc6e2fbaa5f44c5cde3c0718a992e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3c:29:01:89:eb:0c:0b:e2:47:76:d0:61:c3:
4d:2d:d7:7d:78:09:19:e9:03:35:fc:96:01:b6:78:
66:d2:37:9a:01:63:ad:29:59:8f:aa:21:23:10:32:
a7:95:ad:b7:27:95:3d:48:33:88:5d:f9:8e:e3:5a:
83:60:4b:66:17:b5:01:ab:b8:88:ce:9c:6f:d8:6c:
9a:b7:92:16:6a:eb:bf:10:6c:69:36:13:22:2e:ef:
67:63:ab:d7:fd:9c:dc:36:6a:ae:ae:88:27:65:0f:
a8:ab:0c:82:c5:c0:2b:e1:b6:d1:21:49:5a:62:fa:
b9:8d:98:1e:c3:b0:45:05:6e:51:26:8a:87:1f:ee:
c0:59:db:89:43:67:19:1d:bf:f4:ff:04:b6:1d:53:
ed:14:28:13:72:dc:b5:24:d2:a8:02:10:7d:ac:43:
66:d4:c9:cc:51:9b:46:53:1e:8c:83:e6:ea:b0:eb:
a6:93:fd:5b:d5:d0:ac:b2:19:e3:66:7d:77:4c:1b:
04:2b:79:a0:63:d6:a1:75:e6:38:4d:5b:c5:02:da:
2c:0c:89:d5:37:b2:cd:95:7e:e3:03:54:76:38:6e:
e2:90:ef:b0:3c:73:7a:66:e0:ec:a8:5f:5e:3a:4c:
0a:cc:a5:e1:f4:ff:24:36:14:c4:17:68:d9:8a:1f:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5F:6C:C3:6F:CC:6E:2F:BA:A5:F4:4C:5C:DE:3C:07:18:A9:92:E0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/j19sw2_Mbi-6pfRMXN48BxipkuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
89.106.15.0/24
94.229.212.0/24
94.229.220.0/24
94.229.222.0/23
103.47.59.0/24
194.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bc:95:9f:a5:f4:dc:18:eb:f1:61:f9:c6:28:2e:ad:64:ea:
6f:71:42:20:83:04:ee:ae:dc:64:7d:3a:1f:d1:e1:15:1f:02:
82:14:5a:9a:51:c5:6e:d2:d4:01:65:ec:85:6f:21:1e:5d:38:
8a:27:68:28:0f:4e:53:de:92:14:52:1d:d4:4a:9a:86:d2:d2:
e3:28:70:70:b0:19:ae:34:8a:7d:85:7e:16:30:15:58:95:f9:
2f:0e:3e:91:c5:9f:0d:15:14:d6:c4:40:06:39:1d:43:38:73:
14:9b:65:d0:b1:b8:3d:d9:ff:32:1f:03:2c:7e:72:63:b7:8e:
e5:59:a6:37:86:a6:9a:37:ac:20:cd:d9:42:a9:22:09:2d:5a:
c6:27:70:e2:ad:e6:e5:64:33:d8:8a:29:7a:1f:08:9d:2b:05:
96:e6:2c:df:32:06:d2:13:ac:29:96:07:3f:42:13:f2:29:e6:
55:f9:e6:bb:7b:93:e6:ec:7f:c0:15:f7:db:b2:1e:99:9e:ad:
e9:f6:9a:2d:db:e6:43:2b:29:8e:ab:42:74:4c:34:ef:82:66:
97:e1:30:99:64:80:4f:31:42:f3:8c:f6:37:0d:8b:88:fc:09:
eb:1d:8f:0a:ca:03:84:fe:35:96:6b:c4:76:40:b0:1a:9a:c5:
7c:8f:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:21 2025 by rpki-client