Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Kojun_JhM4776ZSiOJDF4VO8gQI.roa
File: Kojun_JhM4776ZSiOJDF4VO8gQI.roa (raw, json)
Hash identifier: C2Hx9huUcs0/5OjVrisVFhA7dXfyV/RRPpwA64MGe0M=
Subject key identifier: 2A:88:EE:9F:F2:61:33:8E:FB:E9:94:A2:38:90:C5:E1:53:BC:81:02
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018D45859853B5C33088C8F614C16DE65AF4
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Kojun_JhM4776ZSiOJDF4VO8gQI.roa
Signing time: Fri 26 Jan 2024 11:26:39 +0000
ROA not before: Fri 26 Jan 2024 11:26:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 30 Jan 2024 22:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:85:98:53:b5:c3:30:88:c8:f6:14:c1:6d:e6:5a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jan 26 11:26:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a88ee9ff261338efbe994a23890c5e153bc8102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5c:be:00:27:98:ae:8f:b4:dd:1a:91:a4:1a:
bc:39:f3:63:4c:df:c5:40:d7:0d:3d:75:64:56:ae:
f9:ad:f7:1d:cb:4e:4b:d9:72:f5:3a:32:d5:ac:8a:
dd:ac:3e:0a:0f:31:97:34:be:7a:64:f2:2a:ea:ba:
a2:5a:20:43:f8:52:ee:bb:17:4d:fe:63:2b:3e:99:
16:1c:29:57:48:62:c4:9b:f5:72:47:49:0f:e4:fb:
4a:96:0b:ac:9d:c2:bb:6c:c9:41:67:05:b8:4c:b7:
05:e8:8a:2c:96:ec:f7:23:75:64:61:6f:23:1d:b2:
d1:12:5e:89:f3:83:0e:cc:57:cc:ac:76:5a:a8:8e:
39:e7:ff:ae:22:a2:12:05:23:86:a0:11:5a:60:09:
91:1d:b1:5f:78:e3:9f:19:f6:26:7a:1f:00:13:80:
ba:53:41:29:99:4f:3f:6c:cc:f6:5b:26:e7:85:10:
68:b3:87:09:98:4e:06:e1:f0:71:64:ad:a2:f1:12:
be:5c:3a:91:6c:34:f3:22:68:ed:e2:c2:51:1a:79:
72:a8:61:61:fa:d2:e7:09:f8:64:3d:96:16:61:88:
b6:0e:3a:df:73:eb:e8:6f:41:28:b4:ac:e0:16:7c:
06:34:7e:5f:54:60:41:1e:52:34:39:67:4e:47:98:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:88:EE:9F:F2:61:33:8E:FB:E9:94:A2:38:90:C5:E1:53:BC:81:02
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Kojun_JhM4776ZSiOJDF4VO8gQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.244.144.0/24
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
IPv6:
2a12:3200::-2a12:3200:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:27:d9:a2:57:77:7c:ba:1d:7a:d5:44:fb:be:b9:98:a8:22:
89:ec:54:25:06:3f:cd:f1:db:39:5e:f3:cb:81:f3:11:53:7c:
e2:52:4a:df:9a:fc:3b:52:3c:29:53:55:49:c2:6a:23:1d:8d:
f8:b7:c1:0e:b3:e6:3b:e8:90:3c:e2:0f:75:e7:02:22:be:4a:
e8:8e:e1:b1:02:a0:05:84:41:62:f4:14:e6:a1:59:fa:72:34:
99:1c:27:1b:ce:d4:7b:32:92:f6:19:09:b3:44:62:42:34:2d:
3e:14:d5:71:7a:b4:ce:56:73:dd:81:c0:b0:7a:9c:83:d3:5b:
df:c5:90:2b:be:b3:e9:c6:8d:d8:29:37:4b:72:81:d5:4c:9f:
9d:57:f7:4d:9e:27:0d:02:6c:dd:d0:05:2c:17:de:1b:1c:15:
bd:2d:4a:b9:d7:08:00:b1:0e:9d:ae:61:ca:3d:0c:2c:41:da:
db:a1:67:04:4e:f7:88:99:12:84:6f:d2:94:06:19:dd:3d:8d:
e2:97:3b:92:ee:1e:51:2d:80:af:ab:19:27:7b:99:aa:e1:f4:
fd:dc:73:d3:d5:7a:1f:41:bc:6c:ca:8a:4e:b6:5a:0c:bd:d5:
bb:3d:16:54:53:25:9a:34:b3:39:2b:46:98:76:53:f0:ee:42:
43:26:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:21 2025 by rpki-client