Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Je99tQs52jDPOUkQiY1JOsxfJa0.roa
File: Je99tQs52jDPOUkQiY1JOsxfJa0.roa (raw, json)
Hash identifier: duqE0d5N+JzCvnPqM34oxNwmOqVJVRSQvl/jW5EEi70=
Subject key identifier: 25:EF:7D:B5:0B:39:DA:30:CF:39:49:10:89:8D:49:3A:CC:5F:25:AD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FBDB7FE1FE76E9815CABFF8E6FED9277E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Je99tQs52jDPOUkQiY1JOsxfJa0.roa
Signing time: Tue 28 May 2024 05:41:42 +0000
ROA not before: Tue 28 May 2024 05:41:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43391
IP address blocks: 45.14.164.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bd:b7:fe:1f:e7:6e:98:15:ca:bf:f8:e6:fe:d9:27:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 28 05:41:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25ef7db50b39da30cf394910898d493acc5f25ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:36:bd:67:fe:71:95:57:79:94:ad:76:6e:
12:87:60:3c:b8:28:c2:e5:70:41:2e:38:15:4b:8a:
55:f5:20:4e:af:2e:9a:d6:97:91:9b:9b:e7:91:22:
13:9c:0c:48:eb:36:96:12:ba:f2:48:d5:58:97:b8:
fd:8c:d9:bb:3c:38:de:98:8c:f3:76:52:5d:e6:02:
7a:30:60:32:4a:2f:93:45:8f:9f:31:28:fe:cf:4f:
00:d0:16:81:a9:86:84:53:d0:16:cc:7c:50:48:8c:
fa:13:7a:28:80:26:66:94:1f:c3:e8:fa:a9:e0:dc:
0d:d3:d2:47:cc:6b:53:bb:55:1d:10:93:3c:ba:53:
ff:ae:89:d7:30:a6:bb:51:6f:81:9c:7a:97:08:ce:
b2:37:6c:60:e2:67:44:b5:7c:c3:99:4b:05:e7:fe:
5d:98:17:73:db:eb:11:60:ab:6b:80:c5:34:93:96:
92:68:25:40:1e:e0:4e:8e:af:1c:65:58:8a:80:95:
a5:08:33:01:e0:9f:41:e3:0a:9f:e3:df:18:c6:af:
db:4f:62:e9:51:4a:2e:cf:6d:ce:87:81:f7:c3:4c:
15:21:53:ff:bc:fa:a5:c4:38:dd:5e:66:4b:c5:19:
56:d5:4f:1f:28:eb:cf:1c:b3:02:32:e0:26:77:ff:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:7D:B5:0B:39:DA:30:CF:39:49:10:89:8D:49:3A:CC:5F:25:AD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Je99tQs52jDPOUkQiY1JOsxfJa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:50:28:d8:3a:dc:6a:8c:b7:ce:66:82:04:6a:07:ca:f1:d7:
98:6d:c2:6b:f5:19:d1:d1:5b:2c:78:d9:7f:0c:a0:96:d9:da:
4d:3f:33:42:6a:b7:57:ba:bc:f9:80:eb:f5:f3:ce:b2:ab:70:
4a:5a:af:71:df:60:e7:0f:4d:a9:e6:40:4f:12:c7:03:30:9d:
06:26:f3:1a:a7:79:cb:74:3e:be:e3:df:17:07:5d:e5:f7:11:
33:28:ec:73:94:54:4e:a8:d2:ab:1b:13:cf:e3:4a:33:ce:97:
d2:51:19:89:2a:da:c1:94:c7:d0:bb:03:63:96:b1:b2:66:87:
55:9b:68:a2:da:e9:b4:8d:25:66:3e:c1:12:93:15:f3:29:6d:
53:36:6c:6b:d2:e2:a9:e2:3c:4f:39:f4:36:c4:55:45:ca:73:
2a:e7:92:6d:f1:67:ce:97:fb:86:ab:05:c5:16:36:8f:92:8a:
d9:3e:78:f9:08:7d:e3:70:cd:0a:59:5b:7a:04:9b:ff:a6:c2:
d5:93:22:77:d4:8a:77:45:d0:9c:ad:38:23:d4:17:7e:01:28:
91:9f:23:07:e7:f9:dc:85:05:34:7a:95:1f:d3:98:17:c6:8d:
b3:1f:fb:62:66:4e:4a:32:bd:26:20:1d:52:e3:1e:f0:33:61:
01:b2:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:00:16 2024 by rpki-client on console-ams.rpki-client.org