Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JB_Vk330gX3NCD-hBYcfxzEV-ws.roa
File: JB_Vk330gX3NCD-hBYcfxzEV-ws.roa (raw, json)
Hash identifier: IRTRYTznaBGnegBDqeu8Hg8lhStJHPDUmKq0Vznwo/o=
Subject key identifier: 24:1F:D5:93:7D:F4:81:7D:CD:08:3F:A1:05:87:1F:C7:31:15:FB:0B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019072C1736DED223ADEDD39F3BF5B310B32
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JB_Vk330gX3NCD-hBYcfxzEV-ws.roa
Signing time: Tue 02 Jul 2024 09:23:18 +0000
ROA not before: Tue 02 Jul 2024 09:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216383
IP address blocks: 45.136.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:c1:73:6d:ed:22:3a:de:dd:39:f3:bf:5b:31:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 2 09:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=241fd5937df4817dcd083fa105871fc73115fb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:a6:8e:f7:dd:d8:f4:07:a7:7e:5d:9c:11:
51:2c:dc:cd:b6:eb:9f:5b:50:cc:d1:c0:02:de:db:
ab:3e:3c:95:51:3f:dd:2a:7a:46:5a:4c:4a:e1:52:
57:36:af:b4:dc:cf:71:9e:3b:33:3e:0e:54:5e:ec:
f3:6e:44:f0:59:80:ec:31:67:ee:64:a7:47:cb:d9:
6e:42:bf:b6:e2:f2:14:5c:9a:42:27:f2:e8:83:f2:
c0:47:1b:d8:ec:c6:05:78:b9:dc:fc:e1:01:80:7d:
74:ed:50:ff:36:c0:51:5f:4d:56:8f:fb:51:c5:11:
9a:84:cb:15:aa:51:9e:5d:43:f6:93:c2:96:4b:ae:
3e:1a:fb:40:ef:9c:78:40:da:ce:6a:d7:9d:2c:00:
f2:72:32:04:54:c5:21:88:d1:3b:b3:d2:79:96:04:
62:da:ed:90:44:66:85:01:e9:27:4d:c8:e9:8f:0a:
ec:3e:7a:77:fc:a0:01:1d:5d:6a:58:f9:a4:e2:e9:
f6:5b:ef:ff:6a:ce:5e:30:c6:b4:9c:9d:ee:58:e1:
df:9f:4a:e5:00:6a:64:b7:a1:15:a3:ee:e2:cb:ed:
88:dd:ee:51:44:62:a4:80:f3:f2:26:cc:6b:35:32:
6f:06:40:47:3d:bd:9e:1b:e8:69:d6:94:85:b5:04:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1F:D5:93:7D:F4:81:7D:CD:08:3F:A1:05:87:1F:C7:31:15:FB:0B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JB_Vk330gX3NCD-hBYcfxzEV-ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7d:95:da:c6:02:9c:f5:fb:72:62:d7:70:b5:bf:0c:68:77:
30:df:71:f6:56:87:fd:4d:1b:b9:42:46:ee:1c:3b:10:47:4e:
a2:a3:5a:0e:de:84:e8:3f:43:7c:49:29:c8:80:c5:13:61:6f:
69:f6:b4:64:c5:60:1a:7a:e8:60:98:f7:30:b8:34:7d:38:90:
6d:52:20:9f:5d:25:81:59:ea:cb:fc:09:96:96:52:94:ff:25:
b1:aa:ca:4c:3b:7f:32:51:79:03:43:b8:ca:3f:bf:94:bc:1a:
d7:78:ba:f8:df:69:92:47:f0:39:30:b4:60:75:0f:8a:e2:4b:
b5:d8:48:1b:1f:17:73:88:de:a8:0a:4d:85:df:7e:ac:d4:df:
aa:3b:bf:83:4d:7c:55:c5:d8:cb:d0:fd:93:3d:a0:f2:1a:77:
30:fa:c5:40:fa:40:8c:6d:bc:4f:93:10:a9:6e:2c:ba:b9:f2:
31:f5:ef:28:55:eb:17:26:4c:c1:f1:ff:99:5f:e5:cf:8f:d8:
76:fa:78:42:c3:d3:24:85:18:88:ee:fb:1a:0a:ad:aa:44:61:
02:60:56:74:c0:f4:b4:dd:1a:13:f1:6b:03:c9:b6:40:88:7c:
73:71:78:34:c2:7b:96:f0:c3:a7:03:dc:e4:7d:54:bf:df:cb:
20:fb:ab:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:47 2025 by rpki-client