Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JMPrkT1PnSun-RQ6ngse85RaNzo.roa
File: JMPrkT1PnSun-RQ6ngse85RaNzo.roa (raw, json)
Hash identifier: chRCnwVpVVHod/dwMgkNgQNpU9M1S/ZQMDd3H2LKSlg=
Subject key identifier: 24:C3:EB:91:3D:4F:9D:2B:A7:F9:14:3A:9E:0B:1E:F3:94:5A:37:3A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191987188DB26688253F4EBDFABFA5B000D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JMPrkT1PnSun-RQ6ngse85RaNzo.roa
Signing time: Wed 28 Aug 2024 10:04:22 +0000
ROA not before: Wed 28 Aug 2024 10:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 45.149.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 10:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:71:88:db:26:68:82:53:f4:eb:df:ab:fa:5b:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 28 10:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24c3eb913d4f9d2ba7f9143a9e0b1ef3945a373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:37:a1:17:34:86:c0:c0:81:f1:3e:8c:b2:
20:7b:c3:bf:4c:01:10:a6:0d:eb:0c:97:20:36:b3:
6c:f9:1e:7e:07:69:8b:12:fe:b7:a4:65:57:9f:b0:
45:80:36:94:c3:64:a1:64:23:28:a1:11:7d:0d:60:
7f:84:3c:36:a1:ac:6a:7f:95:bd:54:2f:a2:30:b0:
96:a5:22:24:c8:74:ac:1c:bb:0a:03:b2:2b:7b:5f:
8c:3a:09:26:2b:3d:30:7d:39:d6:bb:6d:c2:18:a6:
85:7b:08:b8:c9:ff:88:6f:3d:f2:e0:29:62:7f:30:
b2:4a:a1:36:1e:2a:21:55:4f:2e:8e:be:3d:8c:67:
cd:35:9a:ac:57:1f:f4:0a:4d:ff:89:c7:93:1c:dc:
84:3d:61:60:ec:85:d7:c8:5c:1e:fb:64:ae:33:65:
b3:5d:0b:7c:3b:7e:53:0c:0a:47:e2:2d:d2:16:15:
89:9c:a9:a0:51:79:88:88:22:f8:26:0c:42:3a:0c:
82:ce:1c:e3:4e:38:f5:0d:7e:51:d2:59:de:71:c4:
4c:eb:c9:79:62:f3:83:14:28:b7:c8:c0:12:c7:a8:
a4:3b:e0:70:80:b7:09:fd:ba:42:98:52:53:1c:61:
9b:3c:59:af:d1:44:9c:3d:43:32:56:25:42:38:43:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:EB:91:3D:4F:9D:2B:A7:F9:14:3A:9E:0B:1E:F3:94:5A:37:3A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JMPrkT1PnSun-RQ6ngse85RaNzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:34:38:c4:05:a0:ef:ca:db:b2:ca:fd:d0:29:fe:c8:4b:c5:
91:dd:de:30:14:94:d5:b9:5a:1a:f2:9f:ee:05:e7:04:be:4e:
6c:9a:f4:3f:9f:22:11:71:f6:e0:6a:1d:a4:1d:4d:79:09:a1:
5b:51:c3:65:e2:6b:18:0d:7f:01:d5:65:f4:b3:b8:e0:d2:ed:
76:36:70:d8:b6:55:d4:60:79:45:a5:6c:d3:35:9b:6a:f0:39:
bb:b1:a6:0b:60:f5:2b:86:6f:58:d5:c3:54:8c:9a:78:7d:58:
fb:2a:44:f5:0d:97:fc:03:12:d6:05:0b:9a:c6:d2:7d:eb:30:
ac:4a:50:ec:72:10:65:a8:45:33:d8:b0:98:ef:df:30:c9:cc:
cf:d6:b0:74:74:83:7d:fd:d0:28:83:9e:8f:b5:83:04:fd:93:
35:77:a3:e6:e5:23:f8:0c:98:2c:00:16:88:b5:e5:c5:98:a5:
5c:4a:27:68:fd:f4:cd:49:19:f9:c4:64:cc:30:70:ee:e9:16:
7d:82:79:14:69:5b:dd:fd:c6:7f:66:f2:0f:1e:45:78:e5:6f:
05:a3:ae:a1:ce:bf:fc:77:6e:43:d9:bd:8b:67:b6:16:46:78:
78:58:85:16:66:32:af:66:16:d5:5b:6d:21:50:75:fe:d2:ba:
24:ce:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 13:23:32 2024 by rpki-client on console-fra.rpki-client.org