Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/JxZHPZx24h5RU7K2Gv91vcJ096E.roa
File: JxZHPZx24h5RU7K2Gv91vcJ096E.roa (raw, json)
Hash identifier: kYxXPJZZjuAHrndUz7uNQwDO6wdFKeuNNVaMGucodt0=
Subject key identifier: 27:16:47:3D:9C:76:E2:1E:51:53:B2:B6:1A:FF:75:BD:C2:74:F7:A1
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 01937BAC4E35FFAECBE6A59E8FFD4FC3AF34
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/JxZHPZx24h5RU7K2Gv91vcJ096E.roa
Signing time: Sat 30 Nov 2024 06:05:09 +0000
ROA not before: Sat 30 Nov 2024 06:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50247
IP address blocks: 45.85.184.0/23 maxlen: 24
45.85.184.0/24 maxlen: 24
45.85.185.0/24 maxlen: 24
45.131.33.0/24 maxlen: 24
45.131.34.0/24 maxlen: 24
91.218.240.0/24 maxlen: 24
91.224.142.0/23 maxlen: 23
91.224.142.0/24 maxlen: 24
91.224.143.0/24 maxlen: 24
109.95.88.0/21 maxlen: 21
109.196.80.0/20 maxlen: 20
109.197.36.0/23 maxlen: 23
109.207.103.0/24 maxlen: 24
185.178.236.0/22 maxlen: 22
2a0a:7080::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 22 Dec 2024 02:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7b:ac:4e:35:ff:ae:cb:e6:a5:9e:8f:fd:4f:c3:af:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Nov 30 06:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2716473d9c76e21e5153b2b61aff75bdc274f7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:65:6b:16:ae:e3:6f:87:4c:df:b2:90:ba:
b6:ed:c4:34:cb:14:de:ae:1c:3c:6d:29:49:eb:dd:
0c:17:df:86:14:a0:b4:06:94:d5:30:11:4c:60:26:
47:69:04:ea:45:e0:d6:41:db:92:1b:c1:51:97:9d:
f9:e2:b8:65:fc:ef:5b:2e:33:ae:2e:4a:38:1e:80:
56:a1:06:32:86:6a:40:fd:59:3c:6d:88:16:eb:67:
a6:fc:d6:45:39:2a:33:5f:e6:89:d9:34:6f:78:f7:
3d:47:1f:01:83:f3:d5:c1:de:28:e0:ca:c6:f2:9b:
92:b3:76:80:73:41:61:de:ca:5f:c6:c8:6b:d8:88:
8a:b1:93:cb:db:6e:a3:03:9f:56:28:5f:49:c2:f8:
e5:f6:f0:50:76:52:16:58:36:d8:11:19:dd:18:b1:
56:d9:ce:15:f1:2d:91:2f:76:d3:ae:e0:93:ae:10:
28:b0:48:77:95:ef:27:56:b0:e1:90:a5:ff:a5:ec:
af:95:60:1b:73:85:13:e1:b1:20:ff:71:f3:87:ee:
6a:f6:04:65:f7:e1:93:0d:e1:ea:10:7b:1b:47:92:
75:32:51:65:a6:80:df:ba:31:cf:f3:3d:6c:81:20:
82:02:e8:32:7a:98:59:43:c1:5b:88:f3:86:03:50:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:47:3D:9C:76:E2:1E:51:53:B2:B6:1A:FF:75:BD:C2:74:F7:A1
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/JxZHPZx24h5RU7K2Gv91vcJ096E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.184.0/23
45.131.33.0-45.131.34.255
91.218.240.0/24
91.224.142.0/23
109.95.88.0/21
109.196.80.0/20
109.197.36.0/23
109.207.103.0/24
185.178.236.0/22
IPv6:
2a0a:7080::/29
Signature Algorithm: sha256WithRSAEncryption
08:69:04:d7:1b:27:d7:b8:76:03:cb:0b:ab:0e:49:95:e6:4f:
ee:0d:8b:45:f9:f7:fa:9e:88:7c:48:3e:85:cc:eb:0e:a3:aa:
ed:31:30:f5:73:d6:12:38:53:f6:c1:7f:ee:0b:0f:96:d3:4b:
dc:ca:73:b8:d3:62:10:67:05:aa:2d:50:23:2f:98:56:4e:cc:
da:20:55:84:18:a1:b5:77:5a:54:25:1b:d7:9e:8f:61:4d:00:
2d:1f:46:f6:34:32:b3:52:8f:2a:d7:71:d4:44:66:f0:bb:c9:
7c:1f:e6:26:2c:a2:fd:92:d7:55:0a:ff:cf:47:22:a0:83:09:
d5:ef:2d:6e:83:4e:97:50:78:20:1a:0b:40:b8:38:47:8e:32:
d4:52:22:1f:fc:12:b3:df:88:2a:12:36:92:5c:63:52:cf:94:
33:03:5e:78:38:d2:d6:61:27:b0:fa:d5:18:bb:9e:ae:ea:05:
56:f0:0d:aa:c2:14:b1:24:14:5c:6f:be:25:8c:01:9f:4d:bb:
ba:c8:2d:66:3a:02:23:ac:46:cf:b6:58:09:59:fa:3a:88:c5:
6c:2b:37:54:d0:1d:f6:49:ee:73:1a:46:18:7f:56:e3:9b:e8:
cd:b9:94:29:30:58:f2:67:0c:c4:32:a6:78:68:44:11:72:a6:
9c:e0:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:22:17 2025 by rpki-client