Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/JckcLCx0aJXAmBQ-4hcAoQddhXE.roa
File: JckcLCx0aJXAmBQ-4hcAoQddhXE.roa (raw, json)
Hash identifier: P126zNUmgv6ERs4ykZP9bIRNElxIAW0D9/WfTGTTXz8=
Subject key identifier: 25:C9:1C:2C:2C:74:68:95:C0:98:14:3E:E2:17:00:A1:07:5D:85:71
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 0194182498042B9C2F1031CDAD7D302D3649
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/JckcLCx0aJXAmBQ-4hcAoQddhXE.roa
Signing time: Mon 30 Dec 2024 15:17:18 +0000
ROA not before: Mon 30 Dec 2024 15:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60550
IP address blocks: 194.124.204.0/22 maxlen: 24
195.180.152.0/22 maxlen: 24
2a13:b240::/29 maxlen: 36
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:24:98:04:2b:9c:2f:10:31:cd:ad:7d:30:2d:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Dec 30 15:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c91c2c2c746895c098143ee21700a1075d8571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:4b:27:1f:7c:23:36:44:d6:5f:02:e1:51:
9e:ec:c7:fe:c8:80:45:9d:48:24:d1:d8:b2:8d:4b:
34:ee:60:8b:4f:00:35:c0:5a:64:e2:d6:37:3d:0d:
da:02:ee:75:b3:6a:44:43:c4:fa:c1:b6:5b:b9:4c:
af:aa:ed:bb:82:c0:44:64:f5:ed:ed:43:69:73:f4:
af:e3:e0:bc:09:b2:8e:6a:84:12:f3:8d:7d:15:12:
0e:9b:08:2f:3a:50:f8:e1:86:9e:1c:15:a9:96:54:
d7:60:f5:f4:2e:73:43:cc:92:e0:1c:1f:e6:e8:c5:
9c:4c:d9:cc:81:65:69:31:b3:5e:4c:81:58:82:09:
00:5a:12:da:f0:d4:53:d9:e0:35:29:62:3b:79:0d:
ce:b6:1e:54:c5:b7:8f:16:d5:48:1c:2b:ee:06:2e:
19:0c:ca:f1:22:5f:2f:ce:31:7a:09:29:ef:b6:59:
02:99:9b:ca:11:af:2b:f2:c2:0c:dc:2a:e1:c9:16:
35:2c:f3:14:ae:84:24:a3:eb:25:f2:43:98:ab:94:
4b:b2:65:89:99:be:4d:84:e7:bc:4c:63:2b:23:82:
10:cc:19:95:4e:4e:8a:80:e4:1a:14:86:38:65:2c:
7f:fc:a3:d8:38:67:4e:8f:64:b8:4b:f0:e9:d9:7f:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:1C:2C:2C:74:68:95:C0:98:14:3E:E2:17:00:A1:07:5D:85:71
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/JckcLCx0aJXAmBQ-4hcAoQddhXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.204.0/22
195.180.152.0/22
IPv6:
2a13:b240::/29
Signature Algorithm: sha256WithRSAEncryption
59:e2:6e:bd:5b:c5:3b:c5:5a:2b:27:70:fc:d3:a1:4e:ad:41:
cd:e3:26:c1:96:2e:cd:9e:52:b0:20:c6:e8:c8:0a:f9:3e:70:
69:1c:e1:73:36:bc:c8:b5:27:76:fc:5e:3a:fe:83:a8:54:39:
f0:6e:e0:35:6e:85:a4:5b:5b:87:d3:0d:89:19:af:d9:c5:e3:
65:46:dd:9c:5a:ef:87:79:a7:36:fa:d9:6f:c7:75:09:eb:c0:
99:52:01:86:eb:c8:c2:d8:ea:ab:51:48:18:26:94:29:ca:20:
71:79:10:c4:16:e2:82:81:88:f6:8a:39:83:e4:26:67:67:23:
4e:2f:20:7d:84:05:5a:30:cd:0a:9d:3f:91:a7:2e:1b:a7:6b:
a8:98:cf:6e:cb:1b:64:9d:79:cd:f1:5d:ef:e7:e5:f4:85:6c:
a2:94:24:9f:26:c2:e0:a3:83:3b:62:4a:dd:30:ad:25:8e:d0:
17:be:09:ba:57:2a:9f:59:d6:e3:37:cb:ff:ea:8b:82:0b:a3:
a6:cc:aa:30:c2:c2:da:1a:99:70:ca:18:52:2b:6f:79:b1:20:
93:ec:51:e0:ca:1e:82:9e:dd:2d:e2:f8:93:27:5e:19:69:14:
c6:05:81:cf:93:7d:49:eb:2a:56:ed:b1:94:84:1a:7e:cb:c8:
f8:c1:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:11:33 2025 by rpki-client