Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J0a3FU4cAaSsWkrRDiapvMbtSY4.roa
File: J0a3FU4cAaSsWkrRDiapvMbtSY4.roa (raw, json)
Hash identifier: KRQoryBT4aFBVThvL7wJ6HDlY9bIgRm9eoB+BC/qyKk=
Subject key identifier: 27:46:B7:15:4E:1C:01:A4:AC:5A:4A:D1:0E:26:A9:BC:C6:ED:49:8E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0197B025475DD2CD35FAA7E48DF777F55E05
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J0a3FU4cAaSsWkrRDiapvMbtSY4.roa
Signing time: Fri 27 Jun 2025 06:48:42 +0000
ROA not before: Fri 27 Jun 2025 06:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 194.231.156.0/22 maxlen: 24
194.231.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 06:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:25:47:5d:d2:cd:35:fa:a7:e4:8d:f7:77:f5:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 27 06:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2746b7154e1c01a4ac5a4ad10e26a9bcc6ed498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2c:b2:7a:ce:34:fc:f6:36:22:37:25:b8:27:
cb:06:c1:96:6c:c0:88:a9:ee:38:81:51:9a:9c:fc:
ba:b1:eb:d6:d8:b8:12:e9:ed:55:ab:be:46:e5:c3:
af:9c:a7:10:ca:d2:84:6f:b1:9e:33:fd:fc:ab:89:
39:ec:37:c6:d1:85:31:96:13:0c:25:81:f5:12:01:
17:81:b5:0b:bc:6e:81:ee:05:81:f8:18:dc:0f:d2:
f4:6e:5f:b9:b2:58:f1:ff:bc:10:49:c4:ae:14:70:
f8:df:6f:3b:ff:3b:0d:19:0b:eb:d1:9d:bb:90:c3:
13:dc:94:92:a7:34:b9:5e:d4:bb:76:aa:05:7c:8f:
a8:9e:e8:00:c2:17:a5:8a:c5:44:8e:8a:f8:8b:e9:
75:a6:2e:42:c9:f1:05:f3:12:94:0e:90:2c:04:a4:
c0:14:b0:bd:59:bc:aa:8d:c7:1e:4b:52:94:87:ad:
b6:bd:78:93:ab:c3:b7:e8:7b:e4:ea:b6:8f:14:03:
94:b0:d6:5c:40:6a:33:c3:b2:9c:8b:d1:ac:54:2f:
73:17:1d:27:39:a0:6e:e9:42:44:66:21:45:9c:9c:
84:cd:02:72:15:88:de:c8:81:de:93:70:b1:d4:0b:
67:d0:bb:ee:8f:9c:41:0a:8a:c4:28:51:45:a2:8b:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:B7:15:4E:1C:01:A4:AC:5A:4A:D1:0E:26:A9:BC:C6:ED:49:8E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J0a3FU4cAaSsWkrRDiapvMbtSY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.156.0/22
194.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
73:bc:f5:de:02:94:ef:7e:f2:01:56:37:3f:c1:96:d7:06:86:
52:f4:5e:00:d7:a2:9b:54:16:a3:a5:d2:af:1c:e9:e8:4d:ec:
b4:f5:c3:e9:04:b7:36:a0:71:2d:d1:7f:63:d5:a6:2f:2d:d1:
60:05:01:c0:65:f6:17:61:a5:f4:3c:7a:d8:6c:dd:6e:60:8c:
27:ff:50:05:cb:69:5d:04:95:5a:f0:ed:63:27:df:04:4d:e9:
28:41:e7:01:5e:d2:93:06:ae:a4:81:e2:d5:3f:45:fe:d5:76:
86:9a:43:57:53:0e:48:38:d2:c3:aa:ee:c9:90:ec:6f:78:0d:
e8:a8:87:a9:03:73:2c:c1:77:4a:71:3e:39:32:25:4a:2d:6d:
34:4d:3f:02:84:31:c6:dc:0b:e8:ac:8a:b9:0f:d2:9d:ad:79:
ad:4d:4d:26:40:b5:47:a4:34:90:eb:38:63:72:35:f3:4b:77:
c0:08:a8:87:40:59:19:2c:dc:26:a2:f7:e5:19:89:33:79:3e:
4d:32:b8:24:60:48:04:d4:c2:e2:c7:c6:54:70:3f:ce:a3:dc:
8a:de:6d:5d:1c:e0:ed:3c:f8:c0:d1:16:01:a6:7a:18:d1:ce:
84:a8:38:41:c6:3f:66:11:75:ef:ee:d1:29:39:28:52:bf:6e:
a9:bb:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:55:01 2025 by rpki-client