Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/jtp_14-hTEEvcclxvNmrzRDsly0.roa
File: jtp_14-hTEEvcclxvNmrzRDsly0.roa (raw, json)
Hash identifier: 0T+6JQTt0EUBc496/A++oak8rNqBMCrACcHMFjdeFEs=
Subject key identifier: 8E:DA:7F:D7:8F:A1:4C:41:2F:71:C9:71:BC:D9:AB:CD:10:EC:97:2D
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 01856C01503844BD149763D025176A6AF5DF
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/jtp_14-hTEEvcclxvNmrzRDsly0.roa
Signing time: Sun 01 Jan 2023 06:25:03 +0000
ROA not before: Sun 01 Jan 2023 06:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 45.92.13.0/24 maxlen: 24
45.92.12.0/24 maxlen: 24
45.92.15.0/24 maxlen: 24
45.92.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:50:38:44:bd:14:97:63:d0:25:17:6a:6a:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 1 06:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eda7fd78fa14c412f71c971bcd9abcd10ec972d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:7f:ac:ca:0c:18:73:68:09:ef:9a:f7:97:
a4:3b:7c:2f:2d:c6:2d:8d:0a:8b:23:79:60:2a:96:
15:9f:8b:5a:a5:e2:b5:0f:ac:10:04:0b:1d:6f:81:
ab:16:c8:40:72:c9:90:7e:85:76:f3:bf:3d:83:b9:
c4:9b:93:9b:53:bd:35:3d:83:91:73:48:3b:c9:ec:
d6:2c:65:5b:59:51:e6:67:49:73:b3:f8:f6:5a:94:
31:26:3f:53:66:c3:04:9a:d4:62:39:f3:0f:2a:e6:
b3:43:57:c4:75:9c:cb:e0:2e:a9:72:ad:51:b5:04:
6a:9c:59:bb:f7:57:17:01:17:dc:90:e3:97:00:98:
ab:7e:12:67:ee:b8:c7:59:4b:95:4f:5e:a8:6f:b4:
0c:72:04:bd:13:3f:e2:34:51:7a:d7:a4:69:49:f4:
2f:73:bc:a5:fe:cb:f4:58:2f:1f:73:e4:9f:77:e4:
ab:06:8e:ed:91:bf:69:48:2a:5e:38:5c:30:b4:31:
a9:67:7d:8d:66:8b:61:3f:ff:d6:3b:6f:a5:f7:b9:
da:2a:f1:8d:75:d3:7a:8d:b1:b6:06:6c:1e:58:aa:
9e:ff:94:71:36:94:b9:cb:3e:b7:33:49:da:34:16:
4e:6b:e8:6f:29:72:13:32:18:a1:1d:6a:35:9d:20:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:7F:D7:8F:A1:4C:41:2F:71:C9:71:BC:D9:AB:CD:10:EC:97:2D
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/jtp_14-hTEEvcclxvNmrzRDsly0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/22
Signature Algorithm: sha256WithRSAEncryption
20:6f:1d:25:fa:99:7f:df:48:fb:b7:6a:62:54:23:f2:88:17:
70:ec:a7:73:66:bc:9a:20:0a:81:8f:7a:05:1a:8a:8f:35:e9:
b2:42:ae:13:9d:42:c9:d2:0b:62:bb:04:28:85:f0:3c:ac:03:
f7:6b:11:6a:59:7f:ea:00:5b:8a:ed:37:b4:b4:1f:63:16:d8:
97:d3:60:98:89:92:59:97:4f:be:9a:8f:f6:f8:a1:3e:e9:49:
f6:0a:58:13:2b:fd:fc:6d:02:be:4a:19:a5:5d:1c:ab:d4:18:
78:d4:36:90:f8:8c:0e:e8:78:ec:e5:94:2a:81:ac:4b:1d:86:
a9:9e:c2:7d:a1:7f:ab:dd:44:f8:2e:20:b2:95:7d:c9:d6:d1:
d7:91:66:13:84:24:1c:86:42:72:48:e7:a6:02:6e:21:59:ab:
54:b4:c9:07:64:7c:bc:bb:d4:00:5a:41:ad:3f:ce:6a:49:57:
f5:84:b2:7f:f4:c2:a7:63:b4:e0:44:0c:76:3a:8d:82:6e:bf:
30:cb:c6:40:55:c7:55:25:27:1f:63:15:9d:6b:a5:82:55:7c:
47:90:62:bf:aa:d9:36:d8:d2:d4:b2:f9:93:8c:4e:40:d3:d3:
9a:4d:e9:6e:b7:6e:7b:82:37:69:a2:66:c8:d4:56:a1:07:72:
71:bc:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:07 2024 by rpki-client on console-fra.rpki-client.org