Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jqe4qgoKSWXwpRTL8ZvoVNpQ0Ck.roa
File: jqe4qgoKSWXwpRTL8ZvoVNpQ0Ck.roa (raw, json)
Hash identifier: qUIWHIOi0cHxxhqI0LPKxS/1PeSpZUhSTwUfld7YaC4=
Subject key identifier: 8E:A7:B8:AA:0A:0A:49:65:F0:A5:14:CB:F1:9B:E8:54:DA:50:D0:29
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190BC730A838C8C2BB62F0FA8851C87C602
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jqe4qgoKSWXwpRTL8ZvoVNpQ0Ck.roa
Signing time: Tue 16 Jul 2024 16:49:34 +0000
ROA not before: Tue 16 Jul 2024 16:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395954
IP address blocks: 45.147.100.0/24 maxlen: 24
45.147.101.0/24 maxlen: 24
45.147.102.0/24 maxlen: 24
45.147.103.0/24 maxlen: 24
2a0f:e1c5::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jul 2024 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bc:73:0a:83:8c:8c:2b:b6:2f:0f:a8:85:1c:87:c6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 16 16:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ea7b8aa0a0a4965f0a514cbf19be854da50d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:da:c1:8f:b2:71:b1:57:7f:9c:53:84:7d:
eb:c7:fd:31:b6:17:ac:a0:56:16:65:3f:7c:3e:ff:
9d:fd:6b:5b:2a:95:d7:00:dd:3a:09:91:49:ed:7f:
08:40:ce:ce:3c:5e:ea:96:46:5b:51:62:0e:f3:77:
64:a6:ee:0e:48:ae:e3:89:2b:8b:09:db:8e:f2:16:
e1:57:6d:ab:68:4a:32:05:20:e8:55:10:7d:c7:f8:
9e:88:2e:c2:27:a8:9b:df:95:4a:75:da:01:e3:f9:
90:a8:8b:c0:fb:6d:ef:3e:1f:76:46:99:6e:05:4a:
8d:66:4c:8c:25:a7:0c:d9:96:ee:4b:39:07:af:50:
fb:66:c9:12:6e:eb:97:0b:dc:57:d7:52:4f:a8:59:
a9:60:80:cd:41:4c:bb:e9:90:32:e5:64:0a:70:ff:
69:52:be:65:33:ee:0f:fa:e3:f1:0a:4d:4f:6f:ee:
e2:00:21:98:9b:f2:1f:d2:68:1e:88:b0:20:73:98:
3d:19:9b:54:56:d2:96:b6:0a:8d:c2:d5:4b:b8:d9:
61:c5:a6:4c:1a:ab:86:26:a7:84:f1:29:0e:fc:fb:
12:50:d8:fc:2d:e8:50:ce:a7:6b:df:fb:ee:6a:20:
b0:d3:04:c9:6a:95:7e:06:f9:4c:a9:56:50:1a:d6:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:B8:AA:0A:0A:49:65:F0:A5:14:CB:F1:9B:E8:54:DA:50:D0:29
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jqe4qgoKSWXwpRTL8ZvoVNpQ0Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.100.0/22
IPv6:
2a0f:e1c5::/32
Signature Algorithm: sha256WithRSAEncryption
71:a8:54:5a:ad:8e:6d:34:8e:ae:e7:c0:c1:85:32:37:a1:32:
e4:2b:d9:99:44:fc:37:9f:8c:88:14:6e:84:19:b4:04:cd:77:
85:a5:11:77:db:aa:e9:3c:01:14:b1:db:62:fa:54:84:59:a0:
f3:b4:4e:d6:07:e0:66:48:5f:42:c8:42:5d:14:15:9d:c7:f1:
8a:f6:d7:fe:fe:1e:05:88:0d:7e:11:e0:5a:51:74:f1:a3:76:
d4:17:fa:3e:2d:f9:75:42:07:79:35:0b:82:66:95:b0:79:da:
e6:45:a6:9d:bd:af:6b:d9:bb:f6:7b:1c:71:25:e6:bd:d3:ca:
b8:dd:e5:02:db:f7:ab:4f:3c:65:26:d4:1b:84:c7:6e:de:d0:
0f:b4:8e:fb:6c:a6:ce:fe:9c:36:b3:52:47:a5:da:c7:6f:4a:
b6:3a:45:1a:e9:cf:2a:b0:26:b3:18:4e:5a:a2:66:20:1d:cf:
6f:6c:24:73:d7:fd:91:e8:d7:63:53:b2:59:cc:61:04:bf:46:
61:b6:0b:7a:58:ab:96:1c:cc:54:9b:c7:f3:5c:be:59:17:fb:
ac:45:60:92:60:13:80:4c:9c:00:a3:75:e6:00:07:38:57:3b:
07:76:f6:f0:45:97:2d:02:ce:46:85:57:d1:ce:0b:4c:ef:7a:
ca:15:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:21 2025 by rpki-client