Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/JUW_g6YDwSFo0PmkcVmX45m74_g.roa
File: JUW_g6YDwSFo0PmkcVmX45m74_g.roa (raw, json)
Hash identifier: kEnyDwjrgJOoU5ChVw9PibEVFJhpeUTnGGsNsNBNbtg=
Subject key identifier: 25:45:BF:83:A6:03:C1:21:68:D0:F9:A4:71:59:97:E3:99:BB:E3:F8
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 018CFDA64240782D8BE9EFA8E5A2BC9877F7
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/JUW_g6YDwSFo0PmkcVmX45m74_g.roa
Signing time: Fri 12 Jan 2024 12:29:40 +0000
ROA not before: Fri 12 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42330
IP address blocks: 78.41.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 08:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fd:a6:42:40:78:2d:8b:e9:ef:a8:e5:a2:bc:98:77:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jan 12 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2545bf83a603c12168d0f9a4715997e399bbe3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:db:a1:42:79:ee:0f:01:8f:72:86:08:33:
dd:0b:6c:8f:d0:f4:80:26:31:da:c1:aa:d3:89:bf:
fe:6f:97:c8:77:bd:ae:59:ce:fc:25:35:ee:d2:34:
b5:09:87:47:fa:3d:1e:f2:6f:65:ea:10:d3:75:29:
73:af:4a:55:51:e6:33:82:99:68:5b:c2:b2:e0:d5:
46:03:44:f9:b1:49:00:37:20:9c:a8:6e:af:d6:18:
bf:e5:f0:09:48:9a:ab:9c:1c:20:dd:2f:43:08:0b:
b4:0b:b4:a6:dd:8d:7c:c2:60:a9:b0:c5:12:27:7c:
87:91:41:84:29:8f:33:5d:e6:55:b4:d2:0e:fe:da:
39:65:a8:a9:83:dc:3e:1b:7a:7b:6e:7f:c4:bc:1f:
c8:38:ad:d1:84:87:2f:5c:03:0d:40:88:80:c4:11:
e4:09:0d:16:cf:eb:82:7d:18:89:6e:69:ef:2b:49:
e5:47:11:6f:24:3c:c5:1f:e1:89:2b:94:15:bb:61:
14:de:cd:ea:b2:8d:9e:d1:08:c6:99:c9:b5:9e:41:
65:22:ad:1f:b6:03:cf:f1:a5:62:bd:a7:25:b3:5f:
a6:58:78:b3:29:ee:58:ca:0b:3e:83:95:e0:bb:5f:
ec:66:19:bb:76:6c:f7:3a:90:ba:20:c6:cf:a2:4e:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:BF:83:A6:03:C1:21:68:D0:F9:A4:71:59:97:E3:99:BB:E3:F8
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/JUW_g6YDwSFo0PmkcVmX45m74_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.136.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9f:01:47:71:4a:8b:54:26:cf:43:03:0c:e4:fb:07:c3:08:
d9:22:b2:5a:68:67:83:54:60:35:73:8e:6c:7b:fb:4e:de:4b:
ac:ec:58:d3:41:93:ae:1b:96:cc:95:57:10:d6:fb:0f:df:60:
2e:29:a6:50:6a:7f:c1:30:29:7b:85:e3:5c:d2:cb:43:a5:61:
f0:83:e6:26:75:86:23:fd:d6:5d:91:69:57:c5:7b:bb:7d:07:
8f:1c:1e:e4:de:2c:3a:9b:02:4f:ba:0c:f6:fd:a3:f8:01:3b:
96:2c:20:6d:fa:ef:55:e0:2f:44:8b:e3:e5:75:ba:18:3f:13:
53:2b:6c:7e:20:29:f6:a5:ff:3e:6f:8c:10:60:92:86:02:d5:
78:d0:ba:84:03:a4:5c:57:59:98:fb:e7:10:71:39:f1:8b:be:
78:20:6f:72:e1:8f:4a:04:41:4b:04:dc:be:67:fd:89:3b:af:
76:19:c7:c4:79:4e:23:bf:62:e9:e4:14:c4:4d:1b:20:39:9d:
d6:c2:d0:0b:8a:59:cc:f8:ae:b0:a8:c2:c5:7f:46:a7:e3:ce:
4a:7d:e7:be:e6:32:66:46:ee:06:42:97:f1:ee:c0:2e:d0:fc:
7f:40:9e:70:b3:78:c8:a8:ed:38:2d:18:37:67:1c:80:63:bd:
e2:ec:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:49 2025 by rpki-client