Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JUK90ECEIMWQoj7v8vTzFd4pQmM.roa
File: JUK90ECEIMWQoj7v8vTzFd4pQmM.roa (raw, json)
Hash identifier: bxWodx/M6+zHTFvzRGyLVAIeYXKf3GiLyuPvf7/3GgQ=
Subject key identifier: 25:42:BD:D0:40:84:20:C5:90:A2:3E:EF:F2:F4:F3:15:DE:29:42:63
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C2C7C63EF0394079F9A622A8DC4AD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JUK90ECEIMWQoj7v8vTzFd4pQmM.roa
Signing time: Mon 02 Jan 2023 05:55:01 +0000
ROA not before: Mon 02 Jan 2023 05:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201752
IP address blocks: 45.8.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:2c:7c:63:ef:03:94:07:9f:9a:62:2a:8d:c4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2542bdd0408420c590a23eeff2f4f315de294263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:18:a0:5f:36:e6:06:25:a9:6b:02:8d:4f:
10:a7:7c:96:38:ee:69:50:a8:c0:ac:09:b3:eb:26:
68:aa:ca:db:ef:50:fa:ba:7e:5c:09:ba:c1:25:6f:
f2:09:6b:c6:82:27:79:ed:b2:38:65:af:90:7b:fd:
6d:7f:10:e7:d6:e1:7e:1a:68:a7:c0:6e:dc:8f:04:
6b:ef:bd:97:cf:85:06:90:27:0f:fe:4d:a7:b9:d7:
f4:15:83:e5:ab:b3:88:23:3c:2f:f2:c1:48:e7:64:
b9:27:43:d9:13:06:50:1d:64:bc:f1:df:22:cd:0a:
99:53:a5:fa:17:dc:64:77:7b:6e:98:48:b2:4d:1b:
f7:04:4b:af:03:2b:35:91:9f:b1:76:44:3b:4f:f5:
f7:db:a0:44:3e:a3:66:a9:f9:01:03:57:dd:f5:dc:
37:eb:66:76:8b:7f:86:02:89:33:11:7f:b0:34:b5:
0b:0b:17:a1:56:9f:6b:45:2e:e3:87:7c:39:9c:49:
bb:32:85:6d:46:4f:77:68:61:8b:70:c6:4a:cc:b5:
e4:87:78:1d:9b:ba:49:c6:6f:bc:d9:12:c3:92:d2:
ec:2e:09:45:7b:0c:72:88:6b:b5:69:8d:98:2e:64:
7e:c1:bf:31:a2:36:58:4f:1b:a2:67:0d:ba:ba:2c:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:BD:D0:40:84:20:C5:90:A2:3E:EF:F2:F4:F3:15:DE:29:42:63
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JUK90ECEIMWQoj7v8vTzFd4pQmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:45:94:27:4d:4a:93:17:f9:07:68:18:31:ac:dc:6b:21:87:
36:36:1c:61:f8:38:a3:0b:af:7b:87:a3:3c:54:0b:b3:dd:9b:
fe:d5:b5:62:6e:fa:8c:a5:7a:96:c2:cf:57:99:ad:30:a6:f8:
84:92:85:d6:f0:79:7c:2f:c0:24:92:19:f0:0e:5d:3b:4f:bb:
99:43:a6:84:29:79:7a:74:e7:a2:b6:c0:96:e4:7c:09:fe:f8:
c4:de:75:f7:e9:b7:b5:9b:d1:6a:be:c0:99:55:29:22:66:54:
9a:8b:18:f6:8f:f2:cb:f0:d5:ea:f9:10:fd:7b:e8:fa:51:6d:
89:13:e2:44:2e:86:e8:de:a7:b2:d2:93:75:17:f0:18:55:08:
89:e6:27:5e:5f:9f:9f:8b:d2:af:bf:3c:86:47:fb:36:1c:32:
c4:07:3b:fd:29:de:ed:9c:ed:83:86:64:ea:73:88:a2:42:6c:
3e:a4:76:aa:f8:31:f5:65:a2:59:60:84:ce:64:56:84:61:6f:
d9:c6:90:0d:f4:eb:c1:db:03:6a:6e:79:6d:89:3e:a3:aa:2b:
79:c9:13:a4:50:41:6b:d3:7c:72:3e:a4:c3:a9:7f:eb:b0:15:
b5:d7:af:46:aa:82:a4:cf:2d:b8:f1:c0:70:02:ca:d4:9f:0a:
8f:d4:f1:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDCx8Y+8DlAefmmIqjcStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMTAyMDU1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTQyYmRkMDQwODQyMGM1OTBhMjNlZWZmMmY0ZjMxNWRlMjk0MjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJkYoF825gYlqWsCjU8Qp3yWOO5p
UKjArAmz6yZoqsrb71D6un5cCbrBJW/yCWvGgid57bI4Za+Qe/1tfxDn1uF+Gmin
wG7cjwRr772Xz4UGkCcP/k2nudf0FYPlq7OIIzwv8sFI52S5J0PZEwZQHWS88d8i
zQqZU6X6F9xkd3tumEiyTRv3BEuvAys1kZ+xdkQ7T/X326BEPqNmqfkBA1fd9dw3
62Z2i3+GAokzEX+wNLULCxehVp9rRS7jh3w5nEm7MoVtRk93aGGLcMZKzLXkh3gd
m7pJxm+82RLDktLsLglFewxyiGu1aY2YLmR+wb8xojZYTxuiZw26uiyjfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVCvdBAhCDFkKI+7/L08xXeKUJjMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvSlVLOTBFQ0VJTVdRb2o3djh2VHpGZDRwUW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjSMA0G
CSqGSIb3DQEBCwUAA4IBAQB8RZQnTUqTF/kHaBgxrNxrIYc2Nhxh+DijC697h6M8
VAuz3Zv+1bVibvqMpXqWws9Xma0wpviEkoXW8Hl8L8AkkhnwDl07T7uZQ6aEKXl6
dOeitsCW5HwJ/vjE3nX36be1m9FqvsCZVSkiZlSaixj2j/LL8NXq+RD9e+j6UW2J
E+JELobo3qey0pN1F/AYVQiJ5ideX5+fi9KvvzyGR/s2HDLEBzv9Kd7tnO2DhmTq
c4iiQmw+pHaq+DH1ZaJZYITOZFaEYW/ZxpAN9OvB2wNqbnltiT6jqit5yROkUEFr
03xyPqTDqX/rsBW1169GqoKkzy248cBwAsrUnwqP1PEp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org