Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/Jn3VAt_6Fu2e_gjN58jNF4D-UZg.roa
File: Jn3VAt_6Fu2e_gjN58jNF4D-UZg.roa (raw, json)
Hash identifier: 4gqJ8HluZ5R4mA/1oRYC952BFQRlerks67pl5MoXOKM=
Subject key identifier: 26:7D:D5:02:DF:FA:16:ED:9E:FE:08:CD:E7:C8:CD:17:80:FE:51:98
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 018AF0133A7BD21C90A87CAEE84D2AABDDC2
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/Jn3VAt_6Fu2e_gjN58jNF4D-UZg.roa
Signing time: Mon 02 Oct 2023 11:08:26 +0000
ROA not before: Mon 02 Oct 2023 11:08:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 45.144.17.0/24 maxlen: 24
45.144.16.0/23 maxlen: 23
45.144.16.0/24 maxlen: 24
45.144.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:13:3a:7b:d2:1c:90:a8:7c:ae:e8:4d:2a:ab:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Oct 2 11:08:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=267dd502dffa16ed9efe08cde7c8cd1780fe5198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:6a:8e:3c:65:f1:bd:23:7f:6e:e7:fa:52:
bd:44:66:a9:e3:a0:c7:1c:23:e9:98:0d:e6:3b:15:
f9:54:1b:5d:b7:50:52:d7:78:db:d2:b0:58:22:48:
18:75:64:20:3f:57:99:bd:f7:fb:53:ac:bf:7c:98:
f7:00:ae:89:89:a0:d4:a9:be:8f:9b:bb:73:9a:24:
a3:da:ab:d7:c3:64:38:40:43:38:7f:03:e7:6e:b5:
72:7b:b3:90:98:6d:da:ec:46:b0:9d:87:51:3e:22:
90:39:f1:b2:ce:39:0d:93:15:bc:c9:03:82:98:c4:
e9:33:e0:b4:db:7e:12:0e:2a:c1:cf:bb:1f:13:15:
4b:8b:dc:24:46:7f:75:ae:32:7c:56:48:9f:1d:bf:
bb:b0:0d:85:67:d8:f9:4f:36:ff:aa:05:ba:27:1c:
f3:a7:88:ff:8d:54:0e:fc:bd:53:a0:a2:c9:4b:b2:
76:e0:e5:0a:53:b0:3d:10:22:8c:c9:1a:58:16:20:
db:ea:cc:d3:1a:47:8c:71:a2:fb:62:58:07:a5:91:
e7:00:cf:ac:be:4f:0e:fb:42:7f:ff:3f:07:c0:64:
2f:46:04:ac:86:d2:de:6f:9d:9a:69:83:cc:dc:1d:
2e:ce:2c:eb:fd:03:4a:02:c9:7c:7b:70:10:50:16:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7D:D5:02:DF:FA:16:ED:9E:FE:08:CD:E7:C8:CD:17:80:FE:51:98
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/Jn3VAt_6Fu2e_gjN58jNF4D-UZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.16.0/23
45.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d1:91:cc:21:d9:e8:ac:78:bf:77:71:80:56:7b:5f:1d:5d:
85:de:42:c3:49:b1:2a:44:ea:ba:a2:26:12:0a:9a:d9:53:15:
e2:d0:99:f3:6b:b1:7b:78:41:25:ee:3a:91:d7:60:18:80:06:
05:84:d6:b6:c3:26:34:36:a1:56:a3:0e:e2:bd:e8:6d:73:d8:
f6:e2:8a:af:f6:b1:e1:5b:4b:5b:d9:1b:f7:c8:2b:30:5f:60:
e7:d2:f1:5d:16:8a:4a:bd:87:fd:54:af:d1:c2:1d:3b:e1:59:
d3:fc:e3:ed:1d:1c:ba:08:74:bf:ea:9d:08:71:cb:7d:17:d6:
7e:99:b7:18:ac:f3:1a:9d:c6:26:2e:8f:73:15:b3:29:33:8c:
08:e3:25:1a:e2:2e:3c:f5:7f:06:44:4c:80:6f:91:76:ad:3e:
f6:50:1a:0f:3f:14:03:1e:22:40:b5:67:58:fb:df:51:e1:3a:
20:23:94:97:03:69:7a:16:80:4d:74:4d:6c:80:d8:15:80:c4:
e0:28:87:86:52:55:85:8d:a7:a8:de:65:e8:67:37:7f:44:97:
05:66:72:9c:6c:45:9f:73:69:67:02:55:8d:5d:4a:27:e1:16:
ec:ee:ba:89:b7:41:ad:23:43:aa:ac:da:7d:00:89:36:9f:68:
2e:86:98:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYrwEzp70hyQqHyu6E0qq93CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx
Yjk5YzMwHhcNMjMxMDAyMTEwODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdkZDUwMmRmZmExNmVkOWVmZTA4Y2RlN2M4Y2QxNzgwZmU1MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlhqjjxl8b0jf27n+lK9RGap46DH
HCPpmA3mOxX5VBtdt1BS13jb0rBYIkgYdWQgP1eZvff7U6y/fJj3AK6JiaDUqb6P
m7tzmiSj2qvXw2Q4QEM4fwPnbrVye7OQmG3a7EawnYdRPiKQOfGyzjkNkxW8yQOC
mMTpM+C0234SDirBz7sfExVLi9wkRn91rjJ8VkifHb+7sA2FZ9j5Tzb/qgW6Jxzz
p4j/jVQO/L1ToKLJS7J24OUKU7A9ECKMyRpYFiDb6szTGkeMcaL7YlgHpZHnAM+s
vk8O+0J//z8HwGQvRgSshtLeb52aaYPM3B0uzizr/QNKAsl8e3AQUBbtqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCZ91QLf+hbtnv4IzefIzReA/lGYMB8GA1UdIwQY
MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvSm4zVkF0XzZGdTJlX2dqTjU4ak5GNEQtVVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZAQAwQA
LZATMA0GCSqGSIb3DQEBCwUAA4IBAQAC0ZHMIdnorHi/d3GAVntfHV2F3kLDSbEq
ROq6oiYSCprZUxXi0Jnza7F7eEEl7jqR12AYgAYFhNa2wyY0NqFWow7ivehtc9j2
4oqv9rHhW0tb2Rv3yCswX2Dn0vFdFopKvYf9VK/Rwh074VnT/OPtHRy6CHS/6p0I
cct9F9Z+mbcYrPMancYmLo9zFbMpM4wI4yUa4i489X8GREyAb5F2rT72UBoPPxQD
HiJAtWdY+99R4TogI5SXA2l6FoBNdE1sgNgVgMTgKIeGUlWFjaeo3mXoZzd/RJcF
ZnKcbEWfc2lnAlWNXUon4Rbs7rqJt0GtI0OqrNp9AIk2n2guhphH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-fra.rpki-client.org