Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/jfkz8Er9a4h4JcBbR6BJNG3PaY0.roa
File: jfkz8Er9a4h4JcBbR6BJNG3PaY0.roa (raw, json)
Hash identifier: eEhjmgy/3JkCPwj6KWrWBcrgcoqmeWNSWc+7YpcibWs=
Subject key identifier: 8D:F9:33:F0:4A:FD:6B:88:78:25:C0:5B:47:A0:49:34:6D:CF:69:8D
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01942D41DE5AC9062F2884ADDD67DFA5DAB3
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/jfkz8Er9a4h4JcBbR6BJNG3PaY0.roa
Signing time: Fri 03 Jan 2025 17:41:18 +0000
ROA not before: Fri 03 Jan 2025 17:41:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203396
IP address blocks: 145.12.0.0/16 maxlen: 24
145.12.0.0/24 maxlen: 24
145.12.10.0/24 maxlen: 24
145.12.20.0/24 maxlen: 24
145.12.26.0/24 maxlen: 24
145.12.27.0/24 maxlen: 24
145.12.31.0/24 maxlen: 24
145.12.34.0/24 maxlen: 24
145.12.36.0/24 maxlen: 24
145.12.37.0/24 maxlen: 24
145.12.40.0/24 maxlen: 24
145.12.46.0/24 maxlen: 24
145.12.47.0/24 maxlen: 24
145.12.68.0/24 maxlen: 24
145.12.69.0/24 maxlen: 24
145.12.100.0/24 maxlen: 24
145.12.101.0/24 maxlen: 24
145.12.102.0/24 maxlen: 24
145.12.103.0/24 maxlen: 24
145.12.104.0/24 maxlen: 24
145.12.105.0/24 maxlen: 24
145.12.137.0/24 maxlen: 24
145.12.210.0/24 maxlen: 24
145.12.216.0/24 maxlen: 24
145.12.217.0/24 maxlen: 24
145.12.218.0/24 maxlen: 24
145.12.219.0/24 maxlen: 24
145.12.220.0/24 maxlen: 24
145.12.221.0/24 maxlen: 24
145.12.227.0/24 maxlen: 24
145.12.242.0/24 maxlen: 24
145.12.243.0/24 maxlen: 24
145.69.0.0/16 maxlen: 16
145.69.0.0/19 maxlen: 19
145.69.0.0/24 maxlen: 24
145.69.25.0/24 maxlen: 24
145.69.40.0/21 maxlen: 21
145.69.47.0/24 maxlen: 24
145.69.56.0/21 maxlen: 21
145.69.96.0/19 maxlen: 19
145.69.100.0/24 maxlen: 24
145.69.101.0/24 maxlen: 24
145.69.102.0/24 maxlen: 24
145.69.103.0/24 maxlen: 24
145.69.104.0/24 maxlen: 24
145.69.105.0/24 maxlen: 24
145.69.106.0/24 maxlen: 24
145.69.107.0/24 maxlen: 24
145.69.108.0/24 maxlen: 24
145.69.109.0/24 maxlen: 24
145.69.110.0/24 maxlen: 24
145.69.128.0/17 maxlen: 17
145.69.210.0/24 maxlen: 24
145.69.216.0/24 maxlen: 24
145.69.217.0/24 maxlen: 24
145.69.218.0/24 maxlen: 24
145.69.219.0/24 maxlen: 24
145.69.220.0/24 maxlen: 24
145.69.221.0/24 maxlen: 24
145.69.227.0/24 maxlen: 24
145.69.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 08:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2d:41:de:5a:c9:06:2f:28:84:ad:dd:67:df:a5:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 3 17:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df933f04afd6b887825c05b47a049346dcf698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:3c:eb:09:29:a6:a4:a2:25:33:72:b8:2d:
ff:ab:17:9a:ec:6f:67:29:11:42:c7:af:71:b3:03:
39:79:cf:e8:ed:c0:81:b3:2b:27:2f:ba:57:aa:df:
db:45:18:17:a1:d8:e9:77:92:1f:93:e3:d2:2e:40:
15:f7:61:54:65:6f:78:b2:f3:55:c6:a1:77:8e:74:
cf:7b:86:6c:72:41:93:e9:a4:b9:ee:01:2c:92:7d:
de:02:9b:70:21:ea:63:79:4f:f7:85:fc:4b:76:ef:
70:56:3b:a6:0b:8a:37:94:b8:8d:6a:d2:98:1d:c6:
af:08:04:bd:24:ca:1a:52:2e:d1:58:9e:f5:68:53:
49:42:a5:f3:45:00:97:df:13:f3:a6:c6:8f:ae:67:
53:24:68:86:45:ce:5a:c7:ab:83:79:27:0a:50:ad:
67:e8:14:c0:8c:6b:d8:d2:14:81:67:3d:f6:af:f9:
51:2e:9b:6e:cd:d1:6f:a9:e2:a0:38:3b:66:41:a5:
94:ee:e8:11:a5:a9:09:52:18:f0:78:4e:25:10:fb:
ea:7a:71:10:25:8f:fd:76:a4:f3:90:38:57:e1:2d:
fa:0b:a3:0e:96:2f:2b:71:e9:71:11:02:8f:ad:8f:
91:de:a8:75:59:df:a5:3f:47:a1:cc:54:c1:4f:b4:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F9:33:F0:4A:FD:6B:88:78:25:C0:5B:47:A0:49:34:6D:CF:69:8D
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/jfkz8Er9a4h4JcBbR6BJNG3PaY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.12.0.0/16
145.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:9c:b0:13:52:c1:a3:9c:12:49:b4:ab:82:3f:77:ea:83:d0:
f2:77:f8:ed:17:98:e4:7e:e2:29:62:93:ce:31:80:ea:62:6d:
95:e0:06:60:d8:f7:05:60:94:e5:63:52:69:7b:70:79:83:bb:
49:5c:a5:fa:9a:d7:dd:e9:c9:06:ec:d1:2c:0b:63:6a:dd:a5:
22:05:01:5e:02:d7:3e:3e:a7:3c:c4:14:f7:29:08:a0:ee:52:
ab:b6:7c:52:97:5a:ef:68:63:bf:af:46:b5:6b:d3:e7:4a:d4:
d1:32:cd:89:5f:69:40:d3:24:0e:bd:e6:e1:ba:97:8f:2e:e0:
47:5f:d8:7d:ba:88:e3:c2:ec:30:a8:17:82:06:fb:55:65:e4:
d3:ab:2b:81:d3:df:71:32:ef:9e:bf:16:6b:d8:36:db:56:20:
99:94:73:ff:98:cc:71:99:9b:42:c7:ff:18:ae:9a:a0:e3:7c:
84:06:b9:76:31:13:97:fd:e7:3b:1b:d9:fd:62:c5:0b:74:ba:
17:0d:7b:a6:8a:5c:ce:7f:32:ab:83:92:3b:f5:f6:31:ba:5a:
d2:98:2c:66:b9:62:7c:e2:86:5a:cc:fd:43:b5:30:1e:74:72:
d7:0c:cc:0b:3f:7c:50:a6:17:03:ea:78:86:d5:98:38:00:42:
b7:8b:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:46 2025 by rpki-client