Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JQwchCciY1Q1q877PMS6UPnPOp8.roa
File: JQwchCciY1Q1q877PMS6UPnPOp8.roa (raw, json)
Hash identifier: VyG/UjCtTBijVxh7DsCkJdRinTV2icoxWxxmW0KULWs=
Subject key identifier: 25:0C:1C:84:27:22:63:54:35:AB:CE:FB:3C:C4:BA:50:F9:CF:3A:9F
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0191525D6B32ED8F2CDB9425207D6B280A81
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JQwchCciY1Q1q877PMS6UPnPOp8.roa
Signing time: Wed 14 Aug 2024 19:28:59 +0000
ROA not before: Wed 14 Aug 2024 19:28:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49569
IP address blocks: 45.138.146.0/24 maxlen: 24
194.32.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 25 Sep 2024 11:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:5d:6b:32:ed:8f:2c:db:94:25:20:7d:6b:28:0a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 14 19:28:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=250c1c842722635435abcefb3cc4ba50f9cf3a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:f6:1d:54:d9:57:00:7f:79:9a:d4:45:89:
50:f8:9f:c3:87:8a:71:6d:1f:e9:9d:00:82:a9:d2:
ea:50:26:de:86:31:dd:a0:87:4b:b5:31:ce:50:0e:
ae:10:35:d1:c0:51:63:fb:06:42:ca:e1:a3:9b:c7:
64:ad:3c:a1:dd:9d:e5:90:5a:c6:e0:b5:1d:20:b2:
b3:af:60:ab:98:3f:5b:07:6c:d0:2e:a8:ae:ec:80:
1a:20:6e:84:fc:b1:a9:a6:fb:c2:82:7f:66:25:bc:
81:f2:dc:d2:a5:c8:39:8f:a7:83:f9:fa:40:3d:0d:
5f:e3:60:61:14:1c:8b:fd:e7:04:66:17:eb:e4:79:
a7:8a:5e:1f:95:4f:6f:bd:38:82:1d:83:03:8d:0b:
e9:50:b1:50:14:8f:78:53:c0:1c:76:ac:d3:c3:00:
cf:02:64:83:60:39:71:3d:e6:fc:15:f2:f1:7f:cd:
26:37:8a:65:32:23:3a:aa:9a:6e:f0:6e:72:ff:94:
58:54:92:c9:28:66:a2:64:22:30:0b:52:24:15:d0:
63:bb:82:d7:b9:8f:25:62:5a:11:af:5b:fd:69:12:
b8:8e:b6:ac:41:c9:17:28:a6:85:a1:dc:9b:55:1d:
e6:4f:0b:1c:83:97:b4:6f:a8:98:24:75:37:cb:3a:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:1C:84:27:22:63:54:35:AB:CE:FB:3C:C4:BA:50:F9:CF:3A:9F
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JQwchCciY1Q1q877PMS6UPnPOp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.146.0/24
194.32.96.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:3e:88:2b:dd:2d:68:76:39:7e:aa:0b:9d:93:2e:d7:1c:e9:
e0:e7:51:94:61:48:f0:92:a2:74:b3:51:b9:70:e5:db:cd:36:
d5:10:9a:38:c2:28:96:5e:1d:46:da:c7:2d:2a:cf:46:80:a6:
9e:f4:83:79:f1:ee:aa:b4:e4:f6:18:80:4f:c1:e3:89:bf:52:
25:4a:75:7d:5c:68:41:1c:df:1f:59:1c:32:f5:5a:9e:b5:56:
12:33:d2:2c:67:09:6c:20:33:9e:9f:02:0e:61:65:c7:c3:17:
89:53:17:e0:f4:84:39:c0:62:26:9d:89:fa:94:76:c7:0a:4c:
24:6d:44:da:f7:40:f8:ed:a1:0c:81:f1:97:68:e1:f5:26:aa:
c7:00:d9:93:a7:f7:fc:5c:f1:d8:5a:77:c3:1b:56:3e:ff:ab:
d5:d7:e5:a3:d3:9a:ae:e0:a2:6f:ab:b1:45:44:09:a5:08:cb:
01:7d:11:c5:1a:22:97:b1:81:fb:f0:6d:38:e5:58:17:7b:cb:
f1:26:91:78:8e:b1:94:8a:91:79:4e:a9:5e:22:c2:5d:6a:f4:
20:46:05:8c:b1:6d:b8:88:d8:20:de:13:26:90:7e:de:65:40:
03:7d:2f:bb:23:87:1c:03:72:65:c5:0a:bf:83:fa:47:d6:ac:
eb:0a:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 16:29:52 2024 by rpki-client on console-ams.rpki-client.org