Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/Jy4Vks_dsoRvI_MiZkgzoxb41Uo.roa
File: Jy4Vks_dsoRvI_MiZkgzoxb41Uo.roa (raw, json)
Hash identifier: AiNpu+O3wea+LXmGMYgIRABxOnpi1grAA+Dt1VmHN5Y=
Subject key identifier: 27:2E:15:92:CF:DD:B2:84:6F:23:F3:22:66:48:33:A3:16:F8:D5:4A
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 018CC8702D3E20DB48BF618633FC40F41709
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/Jy4Vks_dsoRvI_MiZkgzoxb41Uo.roa
Signing time: Tue 02 Jan 2024 04:30:43 +0000
ROA not before: Tue 02 Jan 2024 04:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44125
IP address blocks: 45.152.24.0/22 maxlen: 22
45.152.24.0/24 maxlen: 24
45.152.26.0/24 maxlen: 24
45.152.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:2d:3e:20:db:48:bf:61:86:33:fc:40:f4:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jan 2 04:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=272e1592cfddb2846f23f322664833a316f8d54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:86:87:2d:43:a8:d6:48:08:6d:62:91:af:
b3:21:18:63:44:bf:c2:79:38:1c:69:49:c9:4e:1c:
70:3b:d1:42:c7:9e:e4:6c:99:a7:b8:d1:b9:10:b1:
51:52:01:f3:10:9d:4d:1e:6a:6f:55:43:07:ed:6e:
90:ae:26:ea:d4:06:f6:f3:62:5d:2b:c5:0e:cb:f0:
f9:0d:52:cf:dc:88:c7:1c:de:b8:e4:e9:77:f0:a8:
98:c8:57:2d:b7:ad:ee:e4:9c:75:d9:83:df:d8:b4:
53:7b:af:45:a8:f6:09:8c:5e:34:fe:07:fc:ae:d3:
16:95:4a:92:e0:3d:19:a9:fa:9a:84:77:15:20:a7:
5c:22:1d:c0:be:ca:1d:25:13:1a:22:fc:34:d8:2a:
16:09:13:c7:52:f3:c6:ff:71:62:7f:33:71:16:14:
c0:1f:3b:2a:51:cf:1c:e4:d2:c5:fb:f7:8b:75:13:
38:0c:c6:83:4f:da:93:1c:60:b9:b8:1d:9c:92:a2:
de:21:3f:07:18:c2:16:99:f4:71:22:7e:93:e2:1b:
4d:49:07:07:aa:d3:d4:6d:47:c3:a9:56:25:8a:b5:
e0:d2:e6:a0:b5:24:95:1e:a7:80:ae:06:b3:53:97:
9b:e1:29:36:d0:9a:2b:eb:98:68:cc:85:f2:d1:49:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:15:92:CF:DD:B2:84:6F:23:F3:22:66:48:33:A3:16:F8:D5:4A
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/Jy4Vks_dsoRvI_MiZkgzoxb41Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:67:40:4a:5c:54:3e:13:d0:39:e4:f7:a8:bb:dd:1c:fd:3b:
97:21:3b:ad:eb:35:ea:01:1a:fe:12:fd:4e:1a:6f:fb:3d:64:
64:4e:2c:3c:db:b8:19:32:47:ab:61:bd:f2:13:e3:5d:4c:aa:
4b:2c:80:42:95:af:85:4b:20:cd:8b:13:48:9c:43:0e:df:70:
12:3a:d2:93:b7:02:20:85:90:90:47:16:e2:c8:b8:0c:f8:89:
66:6e:40:34:c9:66:53:ef:dd:f1:17:0e:95:82:bc:84:7d:04:
e5:cb:17:10:f6:9c:0c:84:dc:b4:ad:79:3d:04:8e:25:0b:00:
42:ca:b9:53:fb:91:8c:ca:f9:e0:8e:34:76:da:f1:28:7d:c3:
ef:8a:10:db:e2:5d:64:8b:01:d7:31:73:aa:4b:08:b6:e0:0f:
7c:bd:ee:5c:48:c4:83:13:46:f0:9c:b0:7f:56:be:65:70:63:
ac:0f:d4:45:14:d3:85:0e:9a:79:3a:e4:de:47:37:79:6b:0a:
c9:e4:58:f1:c9:ce:31:a0:d9:a2:a9:03:d7:da:92:23:8b:11:
7d:3d:67:a5:ac:db:8c:7d:e1:e4:87:a5:28:36:dd:4d:ac:c4:
e1:19:89:a7:96:16:f5:37:f9:66:ba:d2:df:1a:40:4e:ae:3a:
7a:11:1e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:02 2025 by rpki-client