Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/JomipniJcqqoDa6juVwjXmJ6xok.roa
File: JomipniJcqqoDa6juVwjXmJ6xok.roa (raw, json)
Hash identifier: fzcNljX4tVXCviRJKmq2WqkUMqCmuOGR24nJAW3XSkA=
Subject key identifier: 26:89:A2:A6:78:89:72:AA:A8:0D:AE:A3:B9:5C:23:5E:62:7A:C6:89
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0185C9E719ADFAD1A2BA08B07A6AE6FA5CBA
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/JomipniJcqqoDa6juVwjXmJ6xok.roa
Signing time: Thu 19 Jan 2023 12:00:43 +0000
ROA not before: Thu 19 Jan 2023 12:00:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.80.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:e7:19:ad:fa:d1:a2:ba:08:b0:7a:6a:e6:fa:5c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 19 12:00:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2689a2a6788972aaa80daea3b95c235e627ac689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:bc:6f:f6:7d:17:d9:f5:26:39:c3:2f:1e:
50:ee:4b:cc:1e:ee:79:ba:ba:2c:c7:3d:7e:71:bc:
fb:2f:18:7f:09:8c:50:a8:69:ef:62:6c:c1:00:54:
ad:ab:f1:bc:60:91:af:2f:c6:04:c6:51:e5:fa:25:
b5:72:dd:0a:f8:e9:62:90:c6:e5:fc:00:0e:27:16:
af:fc:57:18:05:7b:8a:e0:bd:b1:6f:b8:7b:97:d9:
48:92:fa:ef:64:23:39:b3:54:55:35:cb:6a:d6:38:
45:86:7c:ce:b8:6d:bb:7e:9d:d9:f1:1d:05:56:d0:
54:0f:ad:32:e6:fb:bb:88:d9:f7:41:f8:af:c4:85:
6e:cb:52:4b:79:9b:1e:7c:ab:d5:75:9c:96:9b:80:
57:0e:8a:c6:05:94:61:ab:9e:56:7a:21:3d:43:35:
a3:35:4a:d6:5f:a3:19:4c:16:c5:30:18:10:db:eb:
35:35:d6:2d:58:0c:75:0b:5f:b3:50:92:aa:16:f8:
fd:53:cd:33:0e:38:13:03:b3:28:8a:ef:f7:84:f2:
14:9e:33:c4:08:66:2e:2d:09:af:6a:c1:39:f9:6f:
f8:4d:e1:e1:23:02:53:c7:27:d6:0a:f1:bb:13:26:
9b:f6:9b:e4:60:ce:c6:9b:6a:21:53:86:52:2c:39:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:A2:A6:78:89:72:AA:A8:0D:AE:A3:B9:5C:23:5E:62:7A:C6:89
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/JomipniJcqqoDa6juVwjXmJ6xok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7c:bc:9e:0c:8d:45:f9:12:e0:3e:63:a8:d8:4e:a9:af:82:
dc:78:c8:65:f2:98:f8:f7:15:22:b0:f3:8b:fb:61:65:c2:c4:
24:5c:e1:24:88:a5:b4:ed:76:80:d1:d0:84:85:71:94:05:a1:
d2:77:54:97:c5:8a:c9:e7:83:0e:ab:c0:18:23:ee:be:50:84:
ea:b1:89:ce:0f:db:91:9d:7e:88:4e:56:78:e6:e4:ae:83:48:
73:c5:79:a5:2a:e1:33:fd:98:7d:18:d7:4e:e2:95:98:ff:b9:
c9:56:a6:f4:83:52:d4:d4:74:40:9f:50:f3:42:6c:52:a5:fa:
63:87:e4:bc:09:17:58:ee:ca:98:98:0c:45:ad:9f:17:62:c4:
b0:72:29:b4:77:b9:31:cc:86:64:15:3d:4d:28:8f:b2:e3:20:
73:f0:8f:f2:3d:75:6e:35:fc:d4:92:55:99:1b:d3:7f:50:0f:
7a:81:8f:77:80:12:34:76:3d:c3:9f:d4:c2:5c:b7:bc:7d:97:
90:1e:4b:32:20:7b:b9:ee:c0:6d:9b:a9:1c:3a:32:7f:4d:a8:
33:f9:41:e5:67:1c:ea:e3:f2:8a:59:bf:9d:26:41:63:52:1f:
73:f3:2e:6d:a3:2c:b5:9d:fd:01:94:05:d9:86:25:8a:17:65:
36:46:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org