Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/JkNbxC4IcHpNG3eiIUQPcvEFQmg.roa
File: JkNbxC4IcHpNG3eiIUQPcvEFQmg.roa (raw, json)
Hash identifier: rCYFxZv8TlvdZtlAZwAJdoSJp/V9sJW69qmnittMxj0=
Subject key identifier: 26:43:5B:C4:2E:08:70:7A:4D:1B:77:A2:21:44:0F:72:F1:05:42:68
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 01942746F7C8218062EFD0860369D60F7BFC
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/JkNbxC4IcHpNG3eiIUQPcvEFQmg.roa
Signing time: Thu 02 Jan 2025 13:49:09 +0000
ROA not before: Thu 02 Jan 2025 13:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14907
IP address blocks: 91.198.174.0/24 maxlen: 24
185.15.56.0/22 maxlen: 22
185.15.56.0/24 maxlen: 24
185.15.57.0/24 maxlen: 24
185.15.58.0/24 maxlen: 24
185.15.59.0/24 maxlen: 24
185.71.138.0/24 maxlen: 24
2001:67c:930::/48 maxlen: 48
2a02:ec80::/29 maxlen: 29
2a02:ec80:300::/48 maxlen: 48
2a02:ec80:600::/48 maxlen: 48
2a02:ec80:700::/48 maxlen: 48
2a02:ec80:a100::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Jan 2025 18:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:f7:c8:21:80:62:ef:d0:86:03:69:d6:0f:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jan 2 13:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26435bc42e08707a4d1b77a221440f72f1054268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:fa:de:cf:47:0b:7e:ce:ce:23:b5:32:43:
16:95:26:c9:b2:39:f5:cc:10:18:f4:3d:45:49:01:
8a:a4:01:3d:e0:cd:db:f9:ee:47:d9:61:13:e8:53:
3d:fe:28:48:3f:77:e6:5b:fa:45:89:01:df:ef:7a:
bd:ff:8f:0d:d2:34:9e:0f:97:05:de:13:47:1b:55:
47:5a:c4:61:5e:1c:9a:f0:1a:dd:a2:16:e1:3a:34:
f0:c7:37:63:08:75:21:53:76:3a:b4:bc:01:0e:4a:
57:42:d2:42:68:4d:76:12:1a:6a:fa:43:35:22:ed:
fd:95:8c:7d:da:6b:a1:14:58:b2:81:2f:a1:1f:97:
3f:12:4a:74:75:70:9d:d7:00:7e:c1:ae:e9:06:67:
c8:95:32:b2:06:33:c1:c9:f1:a3:aa:55:02:9a:52:
c1:01:f0:cc:0a:02:ae:0d:f5:68:d1:bc:98:e6:93:
c1:87:da:2e:48:9f:84:45:95:52:17:6c:9a:3c:39:
7d:a3:ef:9c:0e:9d:2e:bc:55:85:56:33:4c:1e:55:
44:b9:b3:be:5b:52:02:b9:a9:9c:28:1d:61:3f:8f:
ae:2c:97:93:d5:48:bd:27:08:61:b6:00:3d:89:81:
3d:e3:8d:c6:a2:16:b2:28:5f:7e:4a:99:3e:42:de:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:5B:C4:2E:08:70:7A:4D:1B:77:A2:21:44:0F:72:F1:05:42:68
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/JkNbxC4IcHpNG3eiIUQPcvEFQmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.174.0/24
185.15.56.0/22
185.71.138.0/24
IPv6:
2001:67c:930::/48
2a02:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
99:6d:76:ee:ae:43:84:df:a4:25:a7:7f:2f:c1:07:7c:4d:8d:
bc:a6:61:8f:59:16:37:45:54:c6:bd:a2:d5:a0:b3:a3:09:b0:
7d:01:9c:5c:a5:22:dc:70:4f:4a:7a:cd:a2:26:f7:5f:6f:f4:
c3:b4:98:f2:e2:73:bb:6d:e2:4e:2a:9d:6b:04:10:f1:8b:8c:
4d:29:0a:b4:1f:2b:b7:74:6a:01:c4:38:22:13:b9:de:74:10:
02:57:c7:fd:51:77:43:79:16:29:e5:eb:d9:2b:99:c6:07:2d:
aa:2e:b0:9c:19:9f:e4:78:83:cd:47:c7:65:cd:f2:13:88:04:
57:dd:d5:e9:8b:0c:27:92:d4:42:2b:2c:7d:00:56:d0:04:88:
52:75:49:38:3b:8a:4c:4b:e7:61:ac:44:ff:cc:9c:c4:e1:eb:
b3:ff:d5:d1:7f:1f:8d:6e:f8:fe:74:b3:a9:f3:c7:ec:2a:c9:
30:fa:e2:a8:d2:37:8f:bb:31:96:df:5b:cf:d4:81:83:b7:99:
83:ed:65:92:31:ef:07:69:ea:03:b3:dc:c4:f4:8b:94:24:72:
af:89:a8:4f:0f:e6:1c:c0:b0:1b:45:3e:6a:2b:ba:f2:77:c7:
28:1e:92:24:b5:99:55:e9:46:1a:7c:44:e9:22:4a:16:af:19:
b4:10:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:28:44 2025 by rpki-client