Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/J5JlzDnVCrw5mCjDS52ngwLDP5Y.roa
File: J5JlzDnVCrw5mCjDS52ngwLDP5Y.roa (raw, json)
Hash identifier: A3jPFkVhq7Mh1s05X+rpltmAhv6jMxKvCTpR4A+S2tY=
Subject key identifier: 27:92:65:CC:39:D5:0A:BC:39:98:28:C3:4B:9D:A7:83:02:C3:3F:96
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01956F6E13D3A3894A34B552D7290936382D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/J5JlzDnVCrw5mCjDS52ngwLDP5Y.roa
Signing time: Fri 07 Mar 2025 07:07:19 +0000
ROA not before: Fri 07 Mar 2025 07:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149457
IP address blocks: 45.134.145.0/24 maxlen: 24
103.100.168.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
202.71.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 03:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6f:6e:13:d3:a3:89:4a:34:b5:52:d7:29:09:36:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 7 07:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279265cc39d50abc399828c34b9da78302c33f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:ed:dc:f7:c9:e6:69:63:41:f4:6f:ad:6c:
b8:b0:2d:28:de:ea:e1:99:46:3f:54:7d:66:1d:95:
9e:46:84:10:91:ab:b5:07:4a:23:a0:e0:12:a0:07:
79:cf:f1:b6:82:0c:e0:ab:5f:7c:86:5e:1b:bf:ac:
ff:25:12:47:b3:f1:74:de:4e:82:49:44:8b:1a:ce:
32:ac:f5:db:95:92:36:8b:66:ea:f0:8e:f8:c0:d8:
6a:c1:11:0e:c2:ef:80:98:ab:b0:95:ef:bb:5b:b3:
bb:03:d5:0e:92:6f:99:e2:45:b5:bb:55:05:13:f2:
b2:5d:49:a8:9e:84:cd:d9:b4:93:29:33:a1:b9:93:
16:e1:1a:56:bf:37:b9:47:03:f7:cc:5b:0c:78:94:
1f:6b:c9:b1:06:32:27:64:50:d1:ed:7e:61:06:b4:
8c:f2:24:5a:bd:cb:31:0f:df:26:f4:9a:2e:49:9e:
8d:39:1a:f8:77:b0:1d:56:b0:0c:15:9b:62:b3:63:
e0:01:93:cc:7a:bb:67:d5:d5:59:63:d5:43:ec:82:
4f:9b:5f:93:63:6b:58:04:ac:72:b8:dc:b8:c8:46:
ad:44:a2:e2:ac:a7:a9:cb:98:ac:ef:02:1f:ce:de:
c5:38:f9:a9:b5:e2:6f:7a:06:22:26:eb:15:66:ef:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:65:CC:39:D5:0A:BC:39:98:28:C3:4B:9D:A7:83:02:C3:3F:96
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/J5JlzDnVCrw5mCjDS52ngwLDP5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
103.100.168.0/24
185.233.18.0/24
193.107.218.0/24
194.120.144.0/24
202.71.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d2:5a:3d:11:91:58:ca:52:24:c9:7b:73:e0:1b:07:5c:d2:
5f:02:4b:27:f3:b2:21:bb:d8:4e:ed:58:30:00:94:44:d9:be:
0e:ba:c9:f8:51:3b:69:ef:e5:da:e9:61:6d:25:97:b2:23:71:
13:50:66:c3:ff:67:29:7e:f6:d7:50:2b:a1:3a:00:4b:3d:76:
68:f3:31:05:6b:27:4f:dd:1b:65:34:94:d7:fc:69:c0:2c:13:
8c:82:5d:1a:ad:bd:e3:95:67:8f:8f:43:48:ac:2a:a3:03:e3:
f2:53:3a:74:4b:e1:60:8f:32:4f:96:77:db:71:c8:50:21:a9:
79:83:42:9a:82:af:16:63:fa:85:c5:59:17:0a:60:93:e3:4f:
00:82:80:f4:6d:a8:ca:87:8a:75:92:bb:85:c9:18:67:ac:1b:
ad:6c:23:71:fc:dd:68:93:5d:72:46:29:5b:98:4f:9b:d1:2b:
18:8e:0d:57:46:f9:65:c9:74:1f:2c:c1:6d:f9:bf:0e:0d:fa:
90:86:2e:c0:e7:bf:c0:34:04:61:7e:96:d2:1c:2e:11:8b:8c:
88:ff:e4:bb:f7:1c:86:42:e8:15:ac:90:9d:cd:11:6b:a9:00:
3a:42:c4:d9:0c:27:8e:99:cd:00:66:fa:3f:ce:74:e1:d5:21:
b3:de:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:34:09 2025 by rpki-client