Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/JhAJAY0YMBqkcCSgA5VfhZsRCFE.roa
File: JhAJAY0YMBqkcCSgA5VfhZsRCFE.roa (raw, json)
Hash identifier: UQAouYifx5JZ1tAePEv8Znla2C2D85kJB/NzsdkkpyM=
Subject key identifier: 26:10:09:01:8D:18:30:1A:A4:70:24:A0:03:95:5F:85:9B:11:08:51
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0197A2356F8267A63DE29B8640B65C312298
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/JhAJAY0YMBqkcCSgA5VfhZsRCFE.roa
Signing time: Tue 24 Jun 2025 13:51:40 +0000
ROA not before: Tue 24 Jun 2025 13:51:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 213.182.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 19:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:35:6f:82:67:a6:3d:e2:9b:86:40:b6:5c:31:22:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jun 24 13:51:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=261009018d18301aa47024a003955f859b110851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:b6:54:34:38:3e:30:9a:d8:93:31:8d:00:
0a:f8:aa:8e:93:05:2b:9c:f0:df:87:9d:16:c0:f0:
55:e5:40:03:f4:ad:26:7c:80:c8:00:84:fa:76:ee:
fd:e1:12:19:cd:7a:9e:fd:95:53:75:a6:e8:44:df:
f1:d6:33:5c:e1:4e:00:14:78:21:bf:07:92:02:7e:
b6:c5:f3:d3:a0:68:35:9d:b0:ad:19:36:34:84:6a:
64:35:b3:99:f0:11:06:84:b5:ff:d7:39:26:55:c0:
e4:53:15:c2:26:a3:75:30:a5:b5:49:90:1e:7c:fd:
0e:4b:94:ad:8a:46:27:8f:98:0a:2d:a3:62:61:6b:
47:ad:56:ad:d6:96:78:61:42:fb:e2:df:3b:81:65:
2f:79:0e:3c:5e:69:64:88:52:9e:a0:ed:2a:1e:09:
d5:83:07:d3:53:74:68:2a:c5:c5:ef:0c:ac:22:43:
19:94:cd:3d:54:f4:73:b6:31:71:fd:37:00:fe:cb:
b3:2e:32:1b:8b:5e:4d:da:f7:79:3e:1e:3f:40:29:
20:2e:9a:cd:fe:77:26:c8:38:3a:90:68:82:6b:31:
20:e3:5e:5d:19:92:31:26:c0:20:26:f7:cd:36:9e:
0f:02:37:3a:da:b0:85:ed:a8:31:8b:dd:87:c8:a1:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:09:01:8D:18:30:1A:A4:70:24:A0:03:95:5F:85:9B:11:08:51
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/JhAJAY0YMBqkcCSgA5VfhZsRCFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:89:0d:03:69:d4:07:71:9b:e3:2f:2d:92:36:8d:1b:9a:b1:
e5:b8:0e:15:08:28:13:a9:2d:87:7f:ab:da:6c:79:3d:94:28:
a8:c8:9f:24:9e:1f:f3:ca:91:3f:83:95:77:58:86:8b:ef:4f:
a7:3b:0c:69:f7:20:03:de:e6:41:e7:33:3d:87:cb:51:e4:8c:
0e:82:fe:c3:d8:64:5f:62:84:d2:cc:a8:c5:d6:29:30:5b:90:
7c:22:9d:90:05:6f:3a:42:14:4e:8a:76:5f:50:4d:6e:f1:de:
aa:ff:eb:f8:07:ed:d4:a0:87:16:47:41:8b:0f:22:9b:33:8b:
10:c5:d8:3b:29:49:ee:a3:cd:96:b2:01:76:c8:3f:00:8b:b4:
bc:9d:30:b4:86:20:1f:49:95:e2:57:06:ac:99:4d:3f:59:d0:
8c:7c:b4:10:ff:49:ee:3c:d8:66:92:f1:8b:a6:c0:bb:10:5c:
84:1b:69:2b:a5:04:eb:58:0c:50:2f:d5:5b:4c:5c:6f:64:df:
96:f3:b3:ef:e1:ef:89:d4:a7:a7:e9:f1:87:f1:6d:b7:fa:d2:
46:b4:ef:bd:83:60:73:5e:84:ee:a6:64:ad:42:40:7c:c9:b5:
4d:d6:58:39:bc:b2:31:21:09:45:22:66:4d:e5:86:29:d0:2e:
12:37:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:07:48 2025 by rpki-client