Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JfOrivP9USKGWApkRe2pvZIYlFU.roa
File: JfOrivP9USKGWApkRe2pvZIYlFU.roa (raw, json)
Hash identifier: +g6I4v5GDIRCbyAUQnrBkVUImPosnuar1gHbcfiNjVU=
Subject key identifier: 25:F3:AB:8A:F3:FD:51:22:86:58:0A:64:45:ED:A9:BD:92:18:94:55
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0196DD42D5D9B6DFF1C185F1302DAF3B9F58
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JfOrivP9USKGWApkRe2pvZIYlFU.roa
Signing time: Sat 17 May 2025 08:01:06 +0000
ROA not before: Sat 17 May 2025 08:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56619
IP address blocks: 79.98.248.0/24 maxlen: 24
79.98.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:42:d5:d9:b6:df:f1:c1:85:f1:30:2d:af:3b:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: May 17 08:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f3ab8af3fd512286580a6445eda9bd92189455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:86:71:47:e2:7a:a1:a3:df:6e:f5:af:00:
36:21:db:ce:f7:ec:5d:c5:d1:a2:e3:35:17:ba:33:
19:f8:1b:70:24:1b:57:7e:12:fe:a4:64:d9:92:bf:
3d:ab:2a:66:19:47:51:44:e7:d0:91:03:3f:a8:a9:
fd:35:a8:6c:92:60:99:24:78:ff:df:cc:27:5a:60:
8a:be:62:ef:85:1c:2d:a2:85:58:7b:f8:2e:d8:da:
47:2a:39:0c:a1:3f:11:5f:5f:f4:0b:4c:36:f6:95:
01:bf:8b:c8:99:b6:3d:7c:b8:ab:c0:c2:70:fd:95:
25:cc:3e:4a:bf:8e:9e:15:4e:ef:a0:4e:f1:4b:8c:
cc:69:f6:d6:59:24:7a:08:fd:b9:57:e8:97:18:c2:
42:74:54:68:90:69:78:1c:51:e4:12:51:bd:06:f7:
9e:02:ef:e1:68:4b:8d:d5:94:b6:e8:08:cc:a2:64:
2a:04:6e:08:db:25:a1:0c:da:a9:39:8e:4c:a4:5a:
10:db:d2:89:32:93:57:c0:5a:7a:b9:3d:12:0a:8f:
71:e8:19:3b:ac:03:10:ff:54:f5:51:b5:aa:78:f0:
11:c3:6d:9c:de:6d:20:5a:96:0b:fe:d7:c7:1c:29:
cf:88:c8:e6:e6:ac:cc:b4:20:11:55:de:b2:b3:4b:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:AB:8A:F3:FD:51:22:86:58:0A:64:45:ED:A9:BD:92:18:94:55
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/JfOrivP9USKGWApkRe2pvZIYlFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.248.0/23
Signature Algorithm: sha256WithRSAEncryption
55:c0:05:e5:e9:00:3f:99:8b:e5:38:30:47:3b:c9:aa:4e:24:
f3:97:2e:ba:18:77:19:cf:bd:ca:e7:26:c5:2d:f8:96:bb:e5:
25:d9:8e:35:bc:66:ec:46:5a:4b:d6:5d:e3:82:95:33:87:04:
ce:7e:f6:31:8a:33:30:b8:51:63:9e:28:ab:38:8f:09:fe:5c:
65:5d:13:75:43:41:12:43:ed:7f:32:93:3d:8b:97:1a:fc:02:
8e:f1:d9:b3:56:b9:5a:b7:7c:e4:31:b5:ec:ca:ce:50:fd:6b:
b3:7a:d6:59:b7:a6:9c:28:5d:4e:ce:56:56:93:c2:13:9e:06:
5a:8d:b1:33:29:d7:17:7a:9b:24:20:3f:a3:44:4f:06:a4:68:
54:cd:e2:5d:90:b9:9f:e0:ce:0b:ca:ad:3e:c6:6d:72:83:4a:
df:9e:32:d6:c0:0d:14:9d:ad:e0:d9:d5:0e:ac:f1:22:7a:2a:
af:68:b9:b2:9b:26:d6:e4:02:1c:e1:68:fc:cc:b6:d8:20:be:
82:0d:bc:93:e1:fa:62:0f:5b:52:aa:a5:01:2c:e1:27:18:aa:
fc:c0:ee:5a:8e:c6:40:51:14:e7:7f:a4:76:9f:7a:33:15:74:
b4:e2:f3:a8:e8:98:12:5c:93:c7:ed:15:52:a2:2f:57:bc:8c:
0c:7a:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:43:53 2025 by rpki-client