Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/JGla_vxGJ8M87sfJKbvr7LCe9fA.roa
File: JGla_vxGJ8M87sfJKbvr7LCe9fA.roa (raw, json)
Hash identifier: rUVVL8kxPEY1ZSrJsBNNht3N6GT+ERZAEFRhHEBj+tg=
Subject key identifier: 24:69:5A:FE:FC:46:27:C3:3C:EE:C7:C9:29:BB:EB:EC:B0:9E:F5:F0
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 018B47BA80B5AEED617E49CA91F5252E0EA8
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/JGla_vxGJ8M87sfJKbvr7LCe9fA.roa
Signing time: Thu 19 Oct 2023 11:38:06 +0000
ROA not before: Thu 19 Oct 2023 11:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.94.139.0/24 maxlen: 24
45.94.136.0/24 maxlen: 24
45.81.160.0/24 maxlen: 24
2.56.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:ba:80:b5:ae:ed:61:7e:49:ca:91:f5:25:2e:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Oct 19 11:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24695afefc4627c33ceec7c929bbebecb09ef5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:fd:06:75:9e:a6:86:11:cd:25:0f:53:83:
a8:8c:c6:05:24:69:1e:52:e7:1c:6c:ed:f0:28:a5:
3c:d0:b2:4d:7b:3a:fa:bf:78:ad:46:61:4c:38:db:
35:31:df:91:61:09:ed:0a:f6:db:8c:d8:1f:95:44:
4f:04:b4:18:56:bc:ea:81:64:db:a7:2c:25:1c:b1:
44:9d:b0:e4:2d:fd:97:1a:75:e5:02:73:a2:15:e8:
93:cf:be:33:5d:a7:e2:1f:2b:b7:41:3d:76:c3:62:
80:3c:d0:01:01:89:ed:e1:d2:34:ff:cc:3b:d1:fa:
f0:0c:f6:cc:66:0c:e0:69:75:a5:b1:91:67:e3:1f:
b4:64:f7:b4:e6:04:47:c6:62:7a:05:bd:dc:b3:59:
62:4a:77:94:18:36:8e:44:d3:5f:15:85:6d:ed:ee:
57:f3:99:65:48:01:b0:f5:6a:23:ab:40:36:42:30:
e3:cf:23:a3:dd:44:26:ad:cd:75:4b:39:a6:59:65:
7d:cc:fd:c0:bf:b1:65:20:ea:13:1f:85:9f:42:2e:
bf:c9:b7:99:d5:af:a8:3b:9b:6e:7b:0b:fc:34:40:
3b:71:7d:f0:38:d6:9f:6b:8d:56:4f:e8:09:db:78:
15:d1:e7:9a:43:fa:3e:26:20:a3:37:cf:83:fa:15:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:5A:FE:FC:46:27:C3:3C:EE:C7:C9:29:BB:EB:EC:B0:9E:F5:F0
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/JGla_vxGJ8M87sfJKbvr7LCe9fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.32.0/22
45.81.160.0/24
45.94.136.0/24
45.94.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b6:c0:db:7d:83:4b:d0:79:d2:43:28:69:88:32:10:a8:ff:
9d:2f:d2:aa:94:4c:d0:b1:bb:50:88:f6:0e:70:36:30:ce:4f:
b4:9d:1e:d3:35:1e:93:30:85:e1:77:c2:e2:3f:ee:97:bc:d5:
cd:88:fc:02:62:ba:e3:e7:6c:81:45:72:b6:1e:5d:be:57:d9:
25:fb:9c:dc:2d:0f:2b:99:bf:c7:8f:92:cf:4b:15:47:7e:19:
79:08:74:7f:96:57:ef:b6:ab:05:af:26:e8:d9:e4:ba:d8:88:
8d:c0:1f:4e:1b:21:83:39:0b:52:de:ac:d5:15:8d:b4:60:1b:
b2:6b:45:e8:19:49:36:b4:c0:0a:03:62:d0:b2:3d:05:f1:b0:
81:47:56:cc:79:9f:e1:0d:65:7c:c5:6e:28:ab:6c:fc:09:f8:
8f:52:57:36:98:d6:ac:4e:30:ae:14:4a:be:24:0b:3b:5e:c5:
1c:53:b6:3b:9f:a0:16:18:ae:e8:23:47:8a:bb:b9:92:9c:34:
cf:a8:6f:cf:e4:8f:85:c5:8f:48:5a:1f:81:68:ac:3f:bd:96:
80:07:e5:43:c1:dc:fa:15:b4:58:8c:2a:cd:69:75:c4:aa:89:
bf:41:49:5e:df:56:c5:e0:e7:89:aa:a4:20:2b:d3:10:d1:a5:
5a:d4:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:34 2024 by rpki-client on console-fra.rpki-client.org