Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/JcNaxXJ88NLZRc2tumCjZe5HUMU.roa
File: JcNaxXJ88NLZRc2tumCjZe5HUMU.roa (raw, json)
Hash identifier: 3clZQsqRXhsu9Z1AtR0DMuQFOuyKMIHTSvdyu33Itxc=
Subject key identifier: 25:C3:5A:C5:72:7C:F0:D2:D9:45:CD:AD:BA:60:A3:65:EE:47:50:C5
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01921EB93B3BC5C35BB3A4BA71B9394C219E
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/JcNaxXJ88NLZRc2tumCjZe5HUMU.roa
Signing time: Mon 23 Sep 2024 11:51:48 +0000
ROA not before: Mon 23 Sep 2024 11:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16262
IP address blocks: 45.10.174.0/24 maxlen: 24
45.81.33.0/24 maxlen: 24
45.150.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 18:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:b9:3b:3b:c5:c3:5b:b3:a4:ba:71:b9:39:4c:21:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Sep 23 11:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c35ac5727cf0d2d945cdadba60a365ee4750c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:62:d6:12:9d:aa:79:e2:f4:6f:e6:f9:5d:
91:87:f3:75:04:a2:c3:02:f0:5e:18:ab:e3:94:e8:
ae:e7:1c:79:64:fb:cd:8d:ce:90:9e:cc:91:19:44:
c0:e3:4e:9f:8c:2f:d2:76:d7:79:da:e5:0f:c4:17:
bc:c1:dc:89:45:75:b1:c9:65:94:ec:9e:83:08:f8:
3a:ab:fb:d4:f0:1a:bb:48:91:71:de:cf:37:97:10:
78:0b:e8:d2:e5:89:af:04:68:d3:16:9a:e9:d7:bd:
c4:5a:50:91:7f:07:df:79:26:ef:ef:a7:65:50:83:
46:47:e5:b4:41:31:5c:69:bc:e0:cf:a0:ef:f7:5b:
d5:06:d1:35:04:af:0a:75:53:80:be:6b:af:13:4b:
f0:7e:df:22:6f:d9:68:6f:dc:ae:54:27:3c:d3:e4:
30:e6:4d:65:27:c2:e3:78:00:3c:7d:01:e3:05:33:
76:ee:4c:ca:c8:6a:89:80:b2:5d:01:f1:d3:2d:30:
71:3d:fd:d9:32:be:1e:3d:7f:74:7c:ee:35:5c:6a:
e2:63:70:32:2b:f9:59:02:56:d0:b1:46:cc:d1:1b:
e5:a6:0f:88:5d:d7:b2:d3:07:60:70:60:2d:98:22:
29:ef:3b:b4:b2:49:72:78:57:dc:2c:83:c8:bf:7a:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:5A:C5:72:7C:F0:D2:D9:45:CD:AD:BA:60:A3:65:EE:47:50:C5
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/JcNaxXJ88NLZRc2tumCjZe5HUMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.174.0/24
45.81.33.0/24
45.150.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ba:62:bf:24:2f:b1:86:76:35:9e:55:25:cf:da:7f:64:7e:
13:eb:67:38:34:4c:92:03:24:f1:d7:eb:f6:eb:a3:9c:3a:0c:
59:43:71:b1:8f:86:26:e9:ea:02:1a:4b:03:61:58:da:f6:4e:
e5:45:ff:5c:bf:18:c4:41:d6:42:25:1c:3b:cf:35:2b:c7:4d:
7b:9b:01:d1:6c:2a:bf:9f:42:f3:5a:c8:5e:71:b5:fe:ee:2c:
26:11:b4:00:f9:40:7a:cf:ea:e2:5e:22:c9:e3:61:50:b2:d4:
0e:5c:6d:eb:15:9c:9e:e1:4d:cf:99:76:9a:da:36:94:38:d4:
86:0f:fe:89:c7:1c:3f:f4:25:8c:7d:48:75:17:9c:7b:6a:64:
17:62:cc:1a:04:32:d4:95:ad:8b:be:38:f9:20:79:02:c9:32:
ce:06:1b:16:75:6c:18:3e:7b:b7:c2:ac:b4:52:c7:9e:ab:ef:
56:5c:b4:be:c1:21:4f:81:65:45:4d:a3:cc:df:c0:8b:87:3f:
0c:3e:92:38:f0:5b:7c:31:57:56:d4:ac:10:b9:c7:36:1a:da:
14:b8:69:21:ae:7b:51:f1:6f:0a:a9:46:f4:24:24:49:80:d0:
e0:b9:e8:c6:f6:df:88:1e:41:d1:15:71:02:02:a5:c8:dc:3d:
e3:a2:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 20:57:39 2024 by rpki-client on console-fra.rpki-client.org