Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/JzPgrX4wOU_cGxdh6-QCaR55nEM.roa
File: JzPgrX4wOU_cGxdh6-QCaR55nEM.roa (raw, json)
Hash identifier: vFgK1hInC3zCcpMXWdVZ/5qf7hHO6IOC3/xsLVZIKoM=
Subject key identifier: 27:33:E0:AD:7E:30:39:4F:DC:1B:17:61:EB:E4:02:69:1E:79:9C:43
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 019218A880551AF9C49453AEAB53343E1B41
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/JzPgrX4wOU_cGxdh6-QCaR55nEM.roa
Signing time: Sun 22 Sep 2024 07:35:49 +0000
ROA not before: Sun 22 Sep 2024 07:35:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 45.144.16.0/23 maxlen: 23
45.144.16.0/24 maxlen: 24
45.144.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 08:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:18:a8:80:55:1a:f9:c4:94:53:ae:ab:53:34:3e:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Sep 22 07:35:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2733e0ad7e30394fdc1b1761ebe402691e799c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:da:d8:45:3b:d0:ee:9e:32:9c:53:43:2c:
8c:5c:07:1c:df:67:ec:46:8b:4a:6a:e7:f6:ff:22:
9e:b9:cf:35:5c:43:02:b8:78:5b:a9:e7:12:44:82:
f4:63:2d:91:4d:6b:a6:7b:a5:56:42:b5:fd:ae:0a:
bf:a7:66:d0:ee:68:b4:ae:e8:d4:cf:a6:72:7d:2f:
7c:ec:7c:41:a5:b1:69:6e:b9:c8:2a:c0:12:30:e4:
43:94:fe:5b:28:12:44:ab:4a:c0:f9:0a:e5:2a:02:
61:86:3f:29:13:27:7c:dd:9c:a3:8c:cb:dc:80:f5:
78:8e:8e:f7:ac:d9:ef:9d:c0:ff:9a:74:23:70:0d:
05:5b:fc:eb:f5:ad:3d:f5:bd:c3:93:62:99:75:2d:
ca:ec:95:5f:19:40:ed:88:30:e7:8a:86:5f:f7:ca:
e7:7b:db:b2:f0:52:f8:46:3f:fb:32:98:fe:65:97:
3e:03:c1:db:6a:72:f8:e1:f9:6b:12:61:b7:e6:99:
1a:c9:48:21:ef:97:5d:24:ed:02:f9:93:85:ce:a0:
e3:25:8b:8a:ff:7f:19:07:64:ab:81:e5:dc:76:98:
07:13:39:3f:d2:b1:7b:8a:78:ad:dd:a0:a6:83:93:
e2:45:e9:57:27:ad:2c:19:2c:9b:26:8a:57:36:97:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:E0:AD:7E:30:39:4F:DC:1B:17:61:EB:E4:02:69:1E:79:9C:43
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/JzPgrX4wOU_cGxdh6-QCaR55nEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.16.0/23
Signature Algorithm: sha256WithRSAEncryption
be:19:ec:43:bf:47:f4:98:33:4c:ed:9e:37:59:06:a7:14:35:
2e:e1:e0:bb:0f:66:db:3b:b6:1a:fd:6c:dd:ce:bb:c8:65:ea:
48:c6:54:68:b3:56:92:2a:0b:97:59:3e:e9:d7:a6:c1:58:f3:
fc:e7:dc:00:1d:72:eb:2e:8c:ed:43:14:5b:d1:ba:f0:d0:92:
56:9a:cf:9f:e1:27:27:11:0d:79:da:89:79:cb:85:56:37:82:
53:22:64:fc:8b:39:92:72:d9:87:47:33:55:fd:d2:b9:72:97:
f6:48:07:f6:55:1d:d8:81:41:49:2c:40:24:0b:64:0f:54:d9:
b0:f6:15:7b:41:b0:44:dc:e2:0b:20:11:5f:45:12:1f:4c:5b:
35:e1:02:59:51:04:92:af:e4:e8:e2:3e:ea:8b:6e:68:1b:72:
2c:85:61:81:ad:c8:f9:61:68:1e:d0:6a:c2:e1:9e:46:7d:f4:
0e:1d:ec:1a:29:85:88:53:62:d8:16:3a:77:8d:19:2c:ce:b7:
2f:6e:0c:43:67:a2:0e:f0:fa:1c:6c:81:55:83:52:c8:77:68:
08:2e:21:23:73:fe:b7:c2:a3:e2:5c:b1:06:94:2c:ea:44:84:
d6:55:ac:4d:01:4d:3e:04:60:24:7d:a9:b9:fc:59:73:58:b2:
b7:a5:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:04 2025 by rpki-client