Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/jQIrA2G3KwfzuuADXbLPAxLDsAc.roa
File: jQIrA2G3KwfzuuADXbLPAxLDsAc.roa (raw, json)
Hash identifier: IipwESeV9692CiQXP6QQWKiSznXyQkRfoCXOyGZ10n4=
Subject key identifier: 8D:02:2B:03:61:B7:2B:07:F3:BA:E0:03:5D:B2:CF:03:12:C3:B0:07
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 019058B02AA60F7843DDE3DE8F7EC6F86017
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/jQIrA2G3KwfzuuADXbLPAxLDsAc.roa
Signing time: Thu 27 Jun 2024 07:54:18 +0000
ROA not before: Thu 27 Jun 2024 07:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199570
IP address blocks: 45.143.44.0/22 maxlen: 22
92.243.83.0/24 maxlen: 24
149.62.33.0/24 maxlen: 24
188.213.232.0/24 maxlen: 24
2a13:ad00::/29 maxlen: 29
2a13:ad00::/37 maxlen: 37
2a13:ad00:800::/37 maxlen: 37
Validation: Failed, certificate revoked on Mon 08 Jul 2024 14:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:58:b0:2a:a6:0f:78:43:dd:e3:de:8f:7e:c6:f8:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Jun 27 07:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d022b0361b72b07f3bae0035db2cf0312c3b007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:df:3a:ac:c8:16:c4:0d:9e:0c:d5:48:dd:
e5:2d:de:83:55:ad:6c:96:9c:e7:29:18:41:96:0b:
d7:b4:05:57:3b:4d:de:30:1d:c0:6c:45:30:83:2d:
50:e0:ed:8c:f0:0b:d5:1c:81:26:59:54:01:ab:d4:
e3:9d:62:24:f2:02:d4:25:40:86:95:9d:9b:b9:e6:
12:90:30:3c:71:2d:90:72:dd:be:2e:c2:89:37:03:
05:73:08:f8:98:a9:18:a7:85:6f:37:ce:57:b6:70:
c5:18:21:1e:3e:41:d7:09:a9:a8:d9:9e:af:36:19:
14:67:d3:40:ec:00:2f:2a:1a:ee:1f:d4:59:ff:c2:
e5:8a:4f:21:be:3c:2a:ef:1e:a0:e7:88:ad:80:aa:
f9:81:27:b4:4f:c9:dd:7b:aa:7c:5a:3c:53:20:fc:
df:ab:2e:0b:42:d1:9d:fc:f0:a0:af:81:f0:6d:29:
4c:6c:35:fd:cd:fe:29:1d:53:6d:f8:11:05:65:5c:
ad:d5:0d:2e:ad:3c:63:80:7c:87:56:d8:2e:6e:bd:
4f:e5:cb:e8:fc:cd:3e:e8:69:23:ef:e6:e2:e8:b2:
55:74:92:28:b5:0e:7f:f3:73:61:ad:d2:38:37:af:
48:b0:83:49:1c:ef:61:d4:d3:d2:43:37:00:76:77:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:2B:03:61:B7:2B:07:F3:BA:E0:03:5D:B2:CF:03:12:C3:B0:07
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/jQIrA2G3KwfzuuADXbLPAxLDsAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.44.0/22
92.243.83.0/24
149.62.33.0/24
188.213.232.0/24
IPv6:
2a13:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
90:c0:88:37:35:ac:6d:02:aa:9e:f0:c9:d6:49:59:88:16:de:
78:fc:31:3d:fc:33:34:aa:f6:c8:62:71:87:8c:48:81:27:07:
f7:ba:7b:34:54:30:b5:8f:ff:12:7b:dd:0a:06:c6:0a:19:f5:
99:d1:c3:da:4b:63:97:8b:44:2c:45:1c:7c:33:06:f0:79:75:
6e:80:78:c3:01:2e:cc:ed:01:31:e0:0e:be:99:d0:14:a7:15:
4f:58:43:56:7b:07:62:f0:60:93:07:7d:8d:d9:fe:c1:da:47:
ed:06:29:42:f6:af:3f:b0:bb:7f:a1:30:81:24:dc:ea:ee:36:
d1:58:cf:35:06:46:30:69:50:f9:7a:43:06:cc:f3:77:f8:d2:
58:7c:35:a6:a6:5c:0f:71:cc:69:49:37:1e:95:db:9d:7f:a2:
4b:b1:d8:35:62:ff:cc:87:36:23:7a:a3:e6:f3:1b:77:9d:c9:
13:e1:8f:1d:c1:11:f5:32:43:8b:98:6c:57:da:4e:3e:63:e5:
4e:6b:25:04:a0:b3:d2:cc:39:e9:90:92:82:18:95:d3:83:66:
2e:a5:8a:e7:6c:25:d4:61:ab:49:4d:77:54:9a:52:56:44:53:
16:59:00:fb:95:f8:e3:45:bd:90:20:85:3b:7c:30:83:32:05:
84:87:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:04 2025 by rpki-client