Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/J3nPX2AwW7Ce0yY39s3MwzbyCsE.roa
File: J3nPX2AwW7Ce0yY39s3MwzbyCsE.roa (raw, json)
Hash identifier: xs6Rab5HqAeb4zs79VW9KAhNvSi2b1wdNyGzKdIAsao=
Subject key identifier: 27:79:CF:5F:60:30:5B:B0:9E:D3:26:37:F6:CD:CC:C3:36:F2:0A:C1
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019275103EEA1016B4200411824C710BC013
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/J3nPX2AwW7Ce0yY39s3MwzbyCsE.roa
Signing time: Thu 10 Oct 2024 06:14:11 +0000
ROA not before: Thu 10 Oct 2024 06:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43700
IP address blocks: 14.102.4.0/22 maxlen: 24
31.172.224.0/22 maxlen: 22
31.172.224.0/23 maxlen: 23
31.172.226.0/23 maxlen: 23
45.84.244.0/22 maxlen: 22
45.84.244.0/23 maxlen: 23
78.158.0.0/19 maxlen: 19
78.158.0.0/20 maxlen: 20
78.158.16.0/20 maxlen: 20
95.215.140.0/22 maxlen: 22
95.215.140.0/23 maxlen: 23
95.215.142.0/23 maxlen: 23
110.172.188.0/24 maxlen: 24
110.172.189.0/24 maxlen: 24
110.172.191.0/24 maxlen: 24
185.246.240.0/22 maxlen: 22
185.246.240.0/23 maxlen: 23
185.246.242.0/23 maxlen: 23
185.252.108.0/22 maxlen: 22
185.252.108.0/23 maxlen: 23
185.252.110.0/23 maxlen: 23
185.252.204.0/22 maxlen: 22
185.252.204.0/23 maxlen: 23
185.252.206.0/23 maxlen: 23
216.25.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 11 Oct 2024 11:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:10:3e:ea:10:16:b4:20:04:11:82:4c:71:0b:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 10 06:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2779cf5f60305bb09ed32637f6cdccc336f20ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:fb:9e:1e:dc:51:9a:4f:6d:30:12:57:a5:
e5:22:54:06:1f:f0:48:30:a9:15:d2:15:7c:2a:96:
95:bc:ba:47:f6:5b:c1:81:7b:ac:e6:c1:26:2a:3e:
b1:70:bd:1f:47:87:a4:34:02:fe:5d:e6:0e:61:aa:
26:38:64:1e:14:97:c3:b1:0a:fd:22:b0:8b:49:14:
78:fb:11:5c:cc:0a:9c:eb:ea:d3:e3:ec:f7:b8:52:
42:73:d3:ce:da:cc:1f:5d:bb:e6:47:30:24:5c:6c:
bd:d0:1f:c3:57:7d:d2:3d:09:c6:fa:62:e4:a5:13:
c8:7f:c6:a3:07:29:78:0c:24:8b:07:c1:13:a8:c9:
bf:b9:da:49:e1:cc:8c:f0:c5:5f:23:65:aa:6e:3e:
24:74:e5:ad:66:90:0e:e1:6c:a6:0b:d6:26:eb:a2:
3a:1f:6f:87:21:03:ee:a0:14:fb:59:4f:cd:60:d4:
18:26:7a:48:07:d0:bc:df:25:84:99:f1:44:8d:e4:
55:0c:aa:02:c3:73:31:6b:d1:0c:78:c5:7a:07:a0:
e3:4c:f7:83:c1:6d:f3:16:b5:e5:c7:b9:f2:e3:85:
c0:37:47:a8:a9:df:17:da:2d:e4:74:ec:f2:08:db:
04:1a:41:09:c3:e5:9f:88:38:c3:7e:bc:50:bf:d1:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:CF:5F:60:30:5B:B0:9E:D3:26:37:F6:CD:CC:C3:36:F2:0A:C1
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/J3nPX2AwW7Ce0yY39s3MwzbyCsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.4.0/22
31.172.224.0/22
45.84.244.0/22
78.158.0.0/19
95.215.140.0/22
110.172.188.0/23
110.172.191.0/24
185.246.240.0/22
185.252.108.0/22
185.252.204.0/22
216.25.0.0/22
Signature Algorithm: sha256WithRSAEncryption
05:21:69:f7:9b:45:d1:4b:d5:34:f3:16:32:35:63:be:73:96:
58:df:57:40:85:e0:08:df:7a:1a:74:ae:f3:a8:2e:35:0e:96:
43:6f:c8:ce:aa:9e:52:24:82:9d:50:3f:87:64:f3:ec:b3:d3:
7c:84:ea:ff:d5:a2:01:f8:b1:41:e6:b5:f0:da:fd:d4:16:15:
92:c9:f1:9d:88:62:2a:67:0e:17:85:a0:be:b7:1f:be:b8:15:
cc:eb:f5:a2:33:58:0d:a5:90:d1:e1:4d:36:f3:d8:4c:38:4a:
92:5b:68:59:6d:3d:69:e4:32:20:20:1f:42:02:9b:57:49:e2:
37:fb:5e:73:89:4e:d4:e4:6d:fa:e6:3d:ae:2d:1a:b7:50:bd:
c4:ff:33:60:c1:47:94:29:ae:8d:04:2b:11:57:04:56:5b:b5:
7e:5c:8c:db:47:3a:b2:0a:3c:f1:fd:6d:18:1a:4f:d7:71:00:
18:34:3b:a7:18:b7:06:94:55:cf:35:35:81:20:fd:71:3b:62:
6d:bc:f7:82:9c:99:88:94:e7:98:7c:1b:7a:ef:cf:27:8f:c4:
bd:3c:88:6a:4b:76:3a:a0:3d:57:08:70:c2:f4:a1:7a:ee:6f:
93:2b:aa:f6:36:ac:e5:3c:9d:65:7a:6d:d9:0a:d3:5b:69:1c:
31:48:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:55 2024 by rpki-client on console-ams.rpki-client.org