Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JOkbmJIPHXlkpCncZbEPxaCwYCA.roa
File: JOkbmJIPHXlkpCncZbEPxaCwYCA.roa (raw, json)
Hash identifier: nJyRUWbhXIKZvdwY4MKi+nmmb7jol2yedELposXb03k=
Subject key identifier: 24:E9:1B:98:92:0F:1D:79:64:A4:29:DC:65:B1:0F:C5:A0:B0:60:20
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0191B263AFF9E23A7BEE8FEC2288D7CD3DA4
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JOkbmJIPHXlkpCncZbEPxaCwYCA.roa
Signing time: Mon 02 Sep 2024 10:59:23 +0000
ROA not before: Mon 02 Sep 2024 10:59:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2a04:a5c0::/32 maxlen: 32
2a04:a5c1::/32 maxlen: 32
2a04:a5c2::/32 maxlen: 32
2a04:a5c3::/32 maxlen: 32
2a04:a5c4::/32 maxlen: 32
2a04:a5c5::/32 maxlen: 32
2a04:a5c6::/32 maxlen: 32
2a04:a5c7::/32 maxlen: 32
2a0e:d00::/32 maxlen: 32
2a0e:d01::/32 maxlen: 32
2a0e:d02::/32 maxlen: 32
2a0e:d03::/32 maxlen: 32
2a0e:d04::/32 maxlen: 32
2a0e:d05::/32 maxlen: 32
2a0e:d06::/32 maxlen: 32
2a0e:d07::/32 maxlen: 32
2a0e:b140::/32 maxlen: 32
2a0e:b141::/32 maxlen: 32
2a0e:b142::/32 maxlen: 32
2a0e:b143::/32 maxlen: 32
2a0e:b144::/32 maxlen: 32
2a0e:b145::/32 maxlen: 32
2a0e:b146::/32 maxlen: 32
2a0e:b147::/32 maxlen: 32
2a0f:db80::/32 maxlen: 32
2a0f:db81::/32 maxlen: 32
2a0f:db82::/32 maxlen: 32
2a0f:db83::/32 maxlen: 32
2a0f:db84::/32 maxlen: 32
2a0f:db85::/32 maxlen: 32
2a0f:db86::/32 maxlen: 32
2a0f:db87::/32 maxlen: 32
2a10:4700::/31 maxlen: 31
2a10:4702::/31 maxlen: 31
2a10:4704::/31 maxlen: 31
2a10:4706::/31 maxlen: 31
2a12:4300::/31 maxlen: 31
2a12:4302::/31 maxlen: 31
2a12:4304::/31 maxlen: 31
2a12:4306::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 18 Sep 2024 15:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:63:af:f9:e2:3a:7b:ee:8f:ec:22:88:d7:cd:3d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 2 10:59:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e91b98920f1d7964a429dc65b10fc5a0b06020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:95:27:62:40:c5:09:67:10:e8:64:ba:4d:
c1:19:19:f2:36:d1:ff:71:c1:e2:6f:c6:b8:2c:e5:
6e:13:22:dc:ea:56:93:bb:69:21:b8:31:eb:f5:1f:
77:91:2e:e9:65:84:a9:04:dd:78:5c:fd:7b:3a:2f:
e1:b8:e2:8a:72:e2:e7:a5:a5:d1:65:f9:d0:67:01:
67:09:3a:2e:4e:e0:43:f9:ac:ca:50:39:da:0d:2a:
79:36:40:59:f3:80:0f:93:89:56:67:3f:f5:30:2e:
98:ec:70:10:4b:71:0c:55:ad:c2:a8:d1:67:e4:a3:
ad:72:7b:b3:9c:b9:92:fb:e6:3a:df:0f:6b:02:98:
8e:ef:9e:8c:ce:0b:e1:52:8f:ce:04:77:87:03:81:
f5:56:4c:ac:46:15:04:4a:96:5a:90:9f:36:bb:bf:
a3:93:e3:bb:a7:64:aa:24:34:12:e6:6e:a1:4c:04:
92:75:2d:fc:f4:e7:ee:c2:2b:80:6d:01:9e:65:53:
5d:37:75:4b:08:ec:1f:3e:1a:92:43:0a:29:e6:9a:
b3:96:5c:bf:d7:d9:dc:f1:73:1d:61:55:a6:f8:89:
51:80:c1:9a:d5:ee:bd:88:6f:e4:79:00:03:5e:24:
ac:77:3d:eb:a4:98:bf:52:8b:4c:1e:90:5a:06:c9:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:1B:98:92:0F:1D:79:64:A4:29:DC:65:B1:0F:C5:A0:B0:60:20
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JOkbmJIPHXlkpCncZbEPxaCwYCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
2a0e:d00::/29
2a0e:b140::/29
2a0f:db80::/29
2a10:4700::/29
2a12:4300::/29
Signature Algorithm: sha256WithRSAEncryption
d5:14:85:bd:16:36:72:8e:c2:af:f0:0c:b6:e7:f1:09:54:ed:
6f:18:90:ab:7f:57:f6:e6:e6:2e:7c:07:bc:e9:c7:c3:9f:98:
19:65:c0:fb:3f:cb:cd:b8:6a:2b:aa:4d:01:6e:93:e6:74:79:
6a:0d:f7:dc:00:38:6d:9f:4b:3b:d0:57:cd:fb:db:53:db:34:
ad:2d:71:3e:2b:30:c2:81:81:ae:b6:5d:4d:0f:66:71:92:9c:
b4:0c:b8:ea:2e:7b:78:af:94:69:76:c7:61:49:63:6a:67:84:
97:0f:1e:c9:2d:b2:87:1d:3f:d5:c5:4d:66:8f:40:d8:76:ae:
d8:f4:3c:0f:18:8e:08:e3:ee:79:df:46:05:9e:e4:62:7f:44:
9d:86:b0:b7:ab:cb:95:df:98:32:b8:d7:e7:ff:75:82:d7:90:
37:f0:3e:d2:2f:10:6c:b0:47:3c:cd:b9:af:83:8a:30:3e:2b:
0d:f0:a9:ef:1f:3d:04:b5:2c:35:bb:1b:a7:93:a7:f7:5f:be:
50:99:e8:09:8d:b2:30:c0:b7:1b:2d:dd:74:51:7a:d6:df:aa:
fd:50:24:5c:f8:5e:90:3d:06:84:1d:a1:49:75:fa:49:9c:28:
26:6a:68:51:91:dd:4e:b8:54:0d:a3:d0:5a:a3:fe:2a:59:ec:
72:36:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:05 2025 by rpki-client