Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/Jvt1_jzokpIkMf1KYKEFYxuASPE.roa
File: Jvt1_jzokpIkMf1KYKEFYxuASPE.roa (raw, json)
Hash identifier: CJJ/lw7iiY0u2/WTG4WGHt2wPLV2Wa1r0AlqsWjHRpY=
Subject key identifier: 26:FB:75:FE:3C:E8:92:92:24:31:FD:4A:60:A1:05:63:1B:80:48:F1
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018FE3C5E2717D2D46299FF6B1F6FA412479
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/Jvt1_jzokpIkMf1KYKEFYxuASPE.roa
Signing time: Tue 04 Jun 2024 15:02:27 +0000
ROA not before: Tue 04 Jun 2024 15:02:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.140.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 Aug 2024 01:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:c5:e2:71:7d:2d:46:29:9f:f6:b1:f6:fa:41:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jun 4 15:02:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26fb75fe3ce892922431fd4a60a105631b8048f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:1e:78:a0:53:4c:34:e4:54:29:d7:d1:93:
74:04:38:a4:39:99:8c:50:72:90:9e:fa:ed:e9:23:
7d:f6:92:6d:9e:1d:cc:c4:d9:99:45:bf:81:60:53:
c0:c8:7e:c7:eb:9a:e6:ef:5a:71:91:3c:5a:ae:14:
8a:a5:c0:9c:cd:84:89:0a:64:1f:23:85:5f:35:d3:
de:dd:8d:fb:e5:84:06:81:01:0f:da:89:0b:cc:d3:
cc:f6:b4:c2:40:78:b6:95:e7:0f:8c:4f:83:a6:98:
49:9b:95:f4:d0:b4:c8:c2:6e:d1:b0:ee:89:30:fa:
65:0d:f8:84:af:10:d0:5a:31:38:0e:c6:51:01:0d:
d5:f9:42:a7:a0:35:bd:2c:d0:13:5c:56:8e:cc:1a:
06:8b:5f:04:c0:71:49:03:b7:e3:b7:1f:2b:8a:2f:
61:4f:41:88:f1:14:89:a9:09:6b:df:ac:dc:14:76:
56:d0:1b:61:ae:eb:a2:6a:3b:1c:04:a8:a7:fc:ac:
90:9e:a4:eb:0f:48:04:5e:70:bc:57:9c:98:05:88:
fa:95:5e:a9:46:d6:89:69:56:63:47:2d:67:0f:83:
f9:17:29:cb:05:6d:f9:c0:d3:c8:25:75:31:90:4e:
35:c4:78:a2:7b:b5:57:b4:ac:7e:ea:1e:20:fe:0b:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:75:FE:3C:E8:92:92:24:31:FD:4A:60:A1:05:63:1B:80:48:F1
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/Jvt1_jzokpIkMf1KYKEFYxuASPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:2d:05:5a:c9:3e:c6:08:77:f3:06:94:93:0f:2d:bc:5c:af:
95:9a:94:8d:9e:37:61:6f:ca:2c:6d:56:d8:88:00:60:25:b5:
de:65:e0:e4:46:8e:44:23:c7:5c:e6:aa:e6:bc:48:a2:d8:b7:
84:fd:54:b2:1a:59:a3:40:78:00:18:72:5b:ab:a3:a1:ab:4a:
eb:14:92:32:2f:d0:ce:38:37:82:d8:fc:eb:ae:8d:15:8b:24:
6c:95:fa:8b:f5:13:be:09:71:96:bc:17:66:8a:b1:20:d8:53:
1a:31:7e:5b:1c:ff:c8:4c:02:34:3e:45:6f:41:d0:29:7e:db:
60:5c:3a:61:6a:ff:48:26:55:08:89:e4:78:37:d5:43:e7:4f:
d1:97:26:fc:47:38:4a:1b:8d:e3:2f:36:b8:2a:51:20:5b:96:
9f:46:e4:e3:33:ab:bb:c4:09:fc:b2:0a:ea:5e:2b:8e:18:9b:
2f:86:fb:d9:a4:a8:67:08:79:16:1b:46:68:9c:ad:b1:15:5a:
67:33:36:fe:12:1d:52:8a:fd:14:33:bd:8c:f1:24:e7:b8:ef:
bb:21:da:07:88:e3:0b:7c:7d:52:be:c5:e6:27:4c:98:9d:32:
dd:00:9d:29:41:16:58:65:e7:a5:28:45:13:af:b5:ad:2f:e0:
5f:06:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:47 2024 by rpki-client on console-fra.rpki-client.org