Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/JK3WOdv3S-v1TAjS8pLogEdG3Hk.roa
File: JK3WOdv3S-v1TAjS8pLogEdG3Hk.roa (raw, json)
Hash identifier: VK0jjgW37dk0ivTJg3VW0IH9VjRp5i0QP7VlqATsMqg=
Subject key identifier: 24:AD:D6:39:DB:F7:4B:EB:F5:4C:08:D2:F2:92:E8:80:47:46:DC:79
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 018B71063C0772D840FB45D511CCACB1E78D
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/JK3WOdv3S-v1TAjS8pLogEdG3Hk.roa
Signing time: Fri 27 Oct 2023 12:05:15 +0000
ROA not before: Fri 27 Oct 2023 12:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 45.146.210.0/24 maxlen: 24
45.146.211.0/24 maxlen: 24
45.146.208.0/22 maxlen: 22
45.146.208.0/24 maxlen: 24
45.146.209.0/24 maxlen: 24
178.22.57.0/24 maxlen: 24
178.22.56.0/21 maxlen: 21
178.22.58.0/24 maxlen: 24
178.22.56.0/24 maxlen: 24
178.22.62.0/24 maxlen: 24
178.22.63.0/24 maxlen: 24
178.22.60.0/24 maxlen: 24
178.22.61.0/24 maxlen: 24
178.22.59.0/24 maxlen: 24
45.153.17.0/24 maxlen: 24
45.153.16.0/24 maxlen: 24
45.153.16.0/23 maxlen: 23
185.31.246.0/24 maxlen: 24
185.31.244.0/22 maxlen: 22
185.31.244.0/24 maxlen: 24
185.31.245.0/24 maxlen: 24
185.31.247.0/24 maxlen: 24
2a00:1e28::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 07 Dec 2023 16:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:06:3c:07:72:d8:40:fb:45:d5:11:cc:ac:b1:e7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Oct 27 12:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24add639dbf74bebf54c08d2f292e8804746dc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:50:b8:4f:d5:b4:83:79:98:1b:52:3d:d6:
63:b4:23:81:f0:03:cb:f1:b9:ea:05:94:a0:f1:c5:
81:b6:95:9d:a0:a6:bb:ce:7a:81:23:1e:18:31:fb:
75:2f:8f:f8:e4:21:44:16:96:28:88:4e:9e:64:55:
fa:2a:f1:8a:f5:fb:81:1d:4b:23:46:fc:e7:cd:85:
98:ba:b3:f9:2b:f4:9b:a9:56:5a:f0:34:2a:46:1d:
b2:0e:54:9b:5f:a4:a0:fa:f7:a7:5b:17:49:ca:ec:
c2:34:ba:cb:35:f7:b9:a4:0e:f1:28:f2:98:95:21:
e3:87:40:b5:30:28:8c:23:0c:c6:ff:cf:fe:49:cf:
2b:50:33:83:3c:4e:47:29:c0:b1:35:15:2b:ac:eb:
01:f5:ba:8e:c1:29:b5:a3:c8:ef:3f:f7:ba:0e:c1:
be:9e:ee:99:bc:85:5e:55:5b:be:22:cb:fb:43:73:
59:68:0a:61:df:df:f0:ad:44:c3:31:1b:d8:b8:b6:
af:1b:28:b7:bc:66:de:06:97:6c:fe:21:8a:10:f7:
c9:88:2b:2a:6b:8f:c1:5a:2c:22:07:79:82:af:93:
98:bf:84:4b:c7:4d:73:18:f1:8e:e9:6a:d9:67:2f:
01:04:85:20:9c:cb:2f:dd:1f:4b:12:34:4f:66:68:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AD:D6:39:DB:F7:4B:EB:F5:4C:08:D2:F2:92:E8:80:47:46:DC:79
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/JK3WOdv3S-v1TAjS8pLogEdG3Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.208.0/22
45.153.16.0/23
178.22.56.0/21
185.31.244.0/22
IPv6:
2a00:1e28::/32
Signature Algorithm: sha256WithRSAEncryption
40:f7:0b:be:15:07:38:e0:87:04:f7:a3:9d:41:ae:f0:8f:0f:
4f:33:41:1c:4e:73:34:e7:9a:ee:48:d4:d5:df:1b:35:59:8b:
a7:56:99:00:f8:35:8a:c2:30:91:13:31:13:2e:8b:6d:d3:24:
df:33:c5:1d:c0:1a:46:c7:ea:9c:16:64:25:66:fd:9a:a3:6f:
91:dd:8c:04:12:4e:c8:d5:dc:6b:d5:40:cf:ca:68:62:cd:c5:
20:74:3b:78:c9:85:8d:b9:7e:14:a3:24:f7:7f:1a:49:43:cd:
18:87:8d:14:d0:4f:e2:a3:d8:6c:89:e4:c0:d1:cc:c9:f3:02:
f8:78:ed:5c:db:c6:d1:70:43:4d:09:e9:de:ac:66:31:70:93:
ba:4d:b5:83:e6:6d:88:81:2a:39:e0:5d:ad:28:d1:24:29:4e:
6b:67:a0:e2:1b:2f:2b:c8:11:e1:ad:6e:1e:19:8d:88:16:45:
81:27:5f:37:9f:55:d0:4e:1e:fe:9e:38:3a:ca:a9:80:e2:74:
55:70:de:ec:a7:d0:6f:5c:33:22:2e:ac:78:e8:cd:da:40:c6:
f1:b7:e8:5a:93:70:d5:90:13:dd:25:e3:63:99:d5:aa:af:ba:
3b:78:9e:69:bb:62:f9:f7:e1:10:85:0d:23:43:01:58:2b:36:
5c:92:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:12 2024 by rpki-client on console-ams.rpki-client.org