Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/SJTz_7QS5F2OeEvPYFC-K_3TSuU.roa
File: SJTz_7QS5F2OeEvPYFC-K_3TSuU.roa (raw, json)
Hash identifier: pnCvfPy+/HhsfAn+n6r1wIcCsh/2VIw9SiksjGN2n1M=
Subject key identifier: 48:94:F3:FF:B4:12:E4:5D:8E:78:4B:CF:60:50:BE:2B:FD:D3:4A:E5
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019421B1DB84C4D73711A3FFB75A4B34AE8C
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/SJTz_7QS5F2OeEvPYFC-K_3TSuU.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3249
IP address blocks: 45.139.107.0/24 maxlen: 24
2a13:cec0::/48 maxlen: 48
2a13:cec1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 19 Jan 2025 07:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:db:84:c4:d7:37:11:a3:ff:b7:5a:4b:34:ae:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4894f3ffb412e45d8e784bcf6050be2bfdd34ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:e0:c3:07:0d:af:35:45:99:93:c8:e0:85:
42:af:b0:e6:84:bc:96:2b:9d:4b:ac:99:34:08:a9:
3a:16:92:28:33:62:98:38:18:37:ea:91:fd:c7:97:
c0:05:7d:9b:4e:62:ea:e1:19:72:63:25:b7:55:97:
a9:6d:6c:51:c9:37:9e:95:c0:42:80:75:13:52:19:
88:85:0a:ac:ed:9d:a9:cd:34:a6:90:bf:14:68:38:
44:50:af:84:d7:9a:40:e9:80:e5:1f:76:d8:08:25:
b4:09:30:6d:4b:ae:26:f6:65:97:69:8c:41:c3:c6:
74:ee:61:cc:04:56:86:2e:ae:fa:d8:d9:e4:bb:79:
e5:02:97:6b:08:0f:76:51:7c:7f:de:fb:75:15:14:
8e:c4:b0:f7:67:b2:b7:71:7f:36:4e:e9:95:74:d8:
e4:64:73:5c:44:ab:d4:06:8d:71:df:c2:d7:8f:eb:
f9:9a:c2:47:60:01:e6:5c:ce:ae:80:76:fb:07:91:
bd:6e:05:04:7e:f3:45:5d:a9:25:ec:79:ea:c6:2f:
4a:49:e2:54:94:06:4b:61:56:93:14:dd:24:e7:e1:
79:e8:0d:d5:f5:fa:f5:e6:64:84:09:82:69:82:2e:
70:c0:34:fb:f6:ff:d7:90:11:cc:aa:6b:2a:e1:11:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:F3:FF:B4:12:E4:5D:8E:78:4B:CF:60:50:BE:2B:FD:D3:4A:E5
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/SJTz_7QS5F2OeEvPYFC-K_3TSuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.107.0/24
IPv6:
2a13:cec0::/48
2a13:cec1::/48
Signature Algorithm: sha256WithRSAEncryption
93:2d:78:c9:e0:9d:96:3d:59:25:0d:e7:47:19:52:83:89:7a:
e8:46:86:bb:95:b9:43:8a:ff:4a:0f:c9:50:3a:57:ff:92:f1:
7d:aa:55:de:30:59:4d:1a:40:9d:f4:c8:2d:73:81:9e:01:f3:
71:32:89:e6:c2:eb:f2:f7:ac:d3:06:00:4d:70:be:66:da:17:
89:d4:0a:f2:4f:9f:c0:49:c6:23:8a:17:60:f6:0a:10:8e:9c:
8f:54:13:81:54:24:43:ec:2e:91:b4:e2:d4:be:48:aa:38:ab:
63:2e:7e:56:6a:76:ed:0e:43:23:86:13:9c:2f:da:27:9d:4e:
5b:2c:9c:65:fb:e4:57:d4:2e:58:51:02:84:86:df:24:fa:59:
5c:2a:67:96:49:3f:c2:a4:fb:73:79:9d:d7:6f:81:c0:9e:8f:
13:d7:9d:e7:7a:19:ae:3a:44:80:db:2e:6b:de:50:7e:69:8a:
ea:69:96:b0:8f:63:44:b9:97:87:67:c9:5a:c4:af:f5:af:3e:
12:b5:36:b5:20:a1:c7:66:2c:ab:f2:b6:31:4c:08:56:b1:e6:
f4:43:aa:08:02:62:5f:ec:c8:81:53:8e:59:42:72:e2:61:2d:
d6:04:7d:56:0e:88:da:1f:53:2e:da:42:30:bf:5b:77:05:16:
15:7c:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:15 2025 by rpki-client