Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JDtEnWWFO-oSRv_RMFdokkC1Zoo.roa
File: JDtEnWWFO-oSRv_RMFdokkC1Zoo.roa (raw, json)
Hash identifier: yUGI57S6JXkzm0ebX0qJTfoNRzVHVCau9IxU0KunU1w=
Subject key identifier: 24:3B:44:9D:65:85:3B:EA:12:46:FF:D1:30:57:68:92:40:B5:66:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187031E9AF541885C30DB36BC7F5AB5F460
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JDtEnWWFO-oSRv_RMFdokkC1Zoo.roa
Signing time: Tue 21 Mar 2023 07:42:30 +0000
ROA not before: Tue 21 Mar 2023 07:42:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200079
IP address blocks: 45.128.233.0/24 maxlen: 24
45.129.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 08:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:1e:9a:f5:41:88:5c:30:db:36:bc:7f:5a:b5:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 07:42:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243b449d65853bea1246ffd13057689240b5668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:cb:1f:85:ae:fd:08:ad:18:99:70:3d:93:
30:94:67:c6:a5:13:33:c6:55:bf:3d:0b:10:de:09:
8f:ec:96:29:af:44:f9:29:3d:f8:ae:86:d9:00:49:
1a:4f:b3:35:c4:fe:24:ed:ed:d6:7f:7f:b3:a2:32:
1c:0c:87:2e:4f:cc:03:8e:5c:dc:ee:49:79:a1:dc:
b9:58:e0:18:86:f3:fb:ef:54:48:2e:6c:d3:c8:af:
5c:ad:c2:f8:20:71:95:0a:99:c4:7a:ab:68:37:07:
68:54:25:f7:36:a3:7c:be:dd:ba:53:49:d2:4b:12:
87:8e:f1:d9:7d:a6:d6:a0:a5:13:14:10:ec:62:3d:
8d:32:76:3e:55:58:c6:c7:26:6f:9e:b2:0c:32:e0:
79:8e:0d:63:03:58:e9:cb:74:a1:21:f2:19:d0:1b:
2b:ce:2c:d8:6c:fe:5a:2c:85:29:2f:95:19:c3:ab:
7e:dd:e8:3e:2a:ab:45:d6:86:28:d7:6f:65:c9:9c:
2b:bf:c2:cc:18:68:4a:e8:76:7f:5f:27:95:5e:e7:
41:93:50:99:f6:de:81:08:b4:d2:53:9f:d9:7e:0f:
7a:3a:56:4f:a1:d1:81:34:44:60:81:6d:38:25:50:
9b:c3:d4:2b:86:86:a4:0a:ff:18:1e:cd:4d:f0:25:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3B:44:9D:65:85:3B:EA:12:46:FF:D1:30:57:68:92:40:B5:66:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JDtEnWWFO-oSRv_RMFdokkC1Zoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
45.129.87.0/24
Signature Algorithm: sha256WithRSAEncryption
62:44:0f:ca:6b:6a:d8:f3:cb:d5:95:e0:6a:12:77:fb:9f:31:
a7:cc:50:85:87:52:34:32:0b:7b:37:08:ff:98:9e:61:47:ad:
55:fa:4a:af:51:76:5d:44:89:3a:5d:fd:c1:a7:b1:ef:2b:35:
2e:49:62:4d:51:aa:1b:2e:65:69:ee:36:1e:b5:2c:9e:d1:bc:
bc:41:36:99:43:b7:33:49:16:26:35:f7:b0:c9:cb:0c:75:2d:
8a:be:32:98:6d:c8:8c:77:fc:92:12:f2:b0:3f:23:20:d0:c3:
80:ed:e6:d2:9b:65:e8:97:49:11:ef:16:b9:24:b0:44:b0:3b:
cb:aa:23:cf:7f:66:fe:5d:34:de:f0:4b:74:9e:80:9c:ed:d2:
29:4c:9a:bb:a9:93:05:af:9a:ef:97:56:8f:0d:66:43:be:36:
57:b7:02:9b:2f:0b:b0:8c:ce:e4:6a:06:a3:2a:fb:0b:1c:29:
6d:b1:ef:a5:35:7f:f0:42:65:59:00:04:ab:ba:92:ff:c3:61:
e9:57:6c:31:04:2e:e0:b6:fe:3e:62:cb:bf:95:8a:3f:25:c7:
c5:ca:14:27:7f:25:a7:2f:2f:32:54:2a:0d:68:ba:e4:c1:4d:
a9:dd:1d:ec:17:f2:74:19:5e:3a:18:72:ce:79:c8:d0:ef:a2:
9f:93:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:04 2024 by rpki-client on console-fra.rpki-client.org