Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/JIlD99jsxKLejkSmkMqrGfmqgms.roa
File: JIlD99jsxKLejkSmkMqrGfmqgms.roa (raw, json)
Hash identifier: 8afKxD7VeaO8txLzTJ3NhJgSh7k5LcXwSWRToyMlXXU=
Subject key identifier: 24:89:43:F7:D8:EC:C4:A2:DE:8E:44:A6:90:CA:AB:19:F9:AA:82:6B
Certificate issuer: /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial: 019519C7D9DA4D0AA7A568190542F859BE57
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/JIlD99jsxKLejkSmkMqrGfmqgms.roa
Signing time: Tue 18 Feb 2025 15:58:02 +0000
ROA not before: Tue 18 Feb 2025 15:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212891
IP address blocks: 2001:3c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 21 Feb 2025 14:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:c7:d9:da:4d:0a:a7:a5:68:19:05:42:f8:59:be:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Validity
Not Before: Feb 18 15:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=248943f7d8ecc4a2de8e44a690caab19f9aa826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:f4:1f:bd:85:af:00:f5:14:77:67:7a:e3:
ac:48:5c:73:aa:a2:a9:b9:ad:92:82:46:1c:bd:4c:
60:cc:6c:a7:1a:c6:c1:09:8b:28:bc:17:84:7a:e2:
b2:1d:a5:87:e9:f8:d6:6d:87:fd:2e:3c:a7:bd:ec:
be:2d:f9:4c:46:f6:7f:d0:25:fa:ce:75:7e:03:4a:
d7:1e:3f:be:f1:2a:94:4f:9d:36:13:2f:32:44:7a:
8b:b3:16:d4:f3:13:47:7d:d3:99:18:73:43:a2:e7:
42:3a:10:b1:75:f4:bd:a4:31:f4:e9:5c:07:bc:f6:
bf:0d:b8:1b:96:35:1a:22:b6:d4:fd:2a:5f:41:ea:
7e:fe:a9:6f:e4:63:e3:8d:e7:80:58:9f:7c:9c:40:
38:dd:ba:79:c2:64:8a:6a:12:08:18:68:08:41:03:
bb:5d:04:2f:ae:4a:0b:55:fd:3c:a9:81:c7:a0:9d:
c6:37:2e:ba:e7:10:ee:b3:87:cd:81:40:76:0b:ec:
7c:0f:a4:78:da:3e:93:98:d9:c0:60:50:a4:d6:53:
0d:50:eb:a9:3b:76:87:8b:d5:5c:a8:ee:23:b2:90:
2f:49:85:d4:e1:a0:61:2a:55:39:80:67:3e:65:03:
a0:83:ee:b0:2b:04:2c:83:10:eb:ea:f5:da:3d:68:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:89:43:F7:D8:EC:C4:A2:DE:8E:44:A6:90:CA:AB:19:F9:AA:82:6B
X509v3 Authority Key Identifier:
keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/JIlD99jsxKLejkSmkMqrGfmqgms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3c40::/29
Signature Algorithm: sha256WithRSAEncryption
2d:10:e5:da:f7:56:ec:64:82:5e:cf:dd:c0:85:48:37:62:ce:
38:ac:5d:6d:c7:45:62:f7:24:85:8a:43:54:76:4d:d3:ca:25:
4d:9a:9d:ca:83:ad:2b:21:64:e6:34:73:9f:4a:00:30:b8:ca:
7d:c7:7b:a1:bd:5d:cd:72:40:4f:a6:86:2c:31:16:ee:09:2c:
93:17:79:2a:bd:ff:2d:6c:c3:16:d2:c2:7b:21:bc:1e:b3:c0:
24:d7:82:f2:23:c6:0b:b0:37:79:41:c9:c1:63:1a:70:1e:ed:
7c:dc:b3:c5:4d:ec:39:51:bb:ec:49:33:21:8e:97:f2:1a:5e:
67:e0:09:32:a6:73:f2:99:6f:f3:f3:e6:61:f3:5c:cb:2f:72:
47:84:89:a6:79:52:0c:6f:55:1b:fd:b1:11:e7:95:cf:95:1c:
a8:e4:ab:bd:66:51:e5:a5:3a:94:66:6e:30:a1:2d:bc:ab:cd:
bf:49:06:fa:13:c4:d1:ea:df:6e:93:7b:17:b5:89:25:ea:2b:
b5:81:2f:04:83:42:de:06:ad:59:f2:a2:82:1c:8b:51:f3:e9:
b9:7e:0c:6c:85:68:1a:97:9c:3d:0d:9a:9c:a3:01:da:5c:48:
e7:49:3a:52:f0:03:8c:63:f6:74:5c:6f:2b:3e:95:6c:ae:85:
fb:87:f2:d9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZUZx9naTQqnpWgZBUL4Wb5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGQ5NDgyZWM2OGQzNTc3ZDkzMDQ4Yzk4ZmEwNTUxNzM4
MGEyYTgwHhcNMjUwMjE4MTU1ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDg5NDNmN2Q4ZWNjNGEyZGU4ZTQ0YTY5MGNhYWIxOWY5YWE4MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/T0H72FrwD1FHdneuOsSFxzqqKp
ua2SgkYcvUxgzGynGsbBCYsovBeEeuKyHaWH6fjWbYf9Ljynvey+LflMRvZ/0CX6
znV+A0rXHj++8SqUT502Ey8yRHqLsxbU8xNHfdOZGHNDoudCOhCxdfS9pDH06VwH
vPa/DbgbljUaIrbU/SpfQep+/qlv5GPjjeeAWJ98nEA43bp5wmSKahIIGGgIQQO7
XQQvrkoLVf08qYHHoJ3GNy665xDus4fNgUB2C+x8D6R42j6TmNnAYFCk1lMNUOup
O3aHi9VcqO4jspAvSYXU4aBhKlU5gGc+ZQOgg+6wKwQsgxDr6vXaPWj5aQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCSJQ/fY7MSi3o5EppDKqxn5qoJrMB8GA1UdIwQY
MBaAFOhNlILsaNNXfZMEjJj6BVFzgKKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUt
MDgzNWU2YjFlMzlhLzEvSklsRDk5anN4S0xlamtTbWtNcXJHZm1xZ21zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUtMDgzNWU2YjFlMzlh
LzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE8QDAN
BgkqhkiG9w0BAQsFAAOCAQEALRDl2vdW7GSCXs/dwIVIN2LOOKxdbcdFYvckhYpD
VHZN08olTZqdyoOtKyFk5jRzn0oAMLjKfcd7ob1dzXJAT6aGLDEW7gkskxd5Kr3/
LWzDFtLCeyG8HrPAJNeC8iPGC7A3eUHJwWMacB7tfNyzxU3sOVG77EkzIY6X8hpe
Z+AJMqZz8plv8/PmYfNcyy9yR4SJpnlSDG9VG/2xEeeVz5UcqOSrvWZR5aU6lGZu
MKEtvKvNv0kG+hPE0erfbpN7F7WJJeortYEvBINC3gatWfKighyLUfPpuX4MbIVo
GpecPQ2anKMB2lxI50k6UvADjGP2dFxvKz6VbK6F+4fy2Q==
-----END CERTIFICATE-----
Generated at Mon May 5 15:25:51 2025 by rpki-client