Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/jg5ZgQdl1vmnizvZYOB8BbtUu0A.roa
File: jg5ZgQdl1vmnizvZYOB8BbtUu0A.roa (raw, json)
Hash identifier: 8hQRNopjEKER+fkfbypxSap/PGbnQTVpHPz7UTBfHag=
Subject key identifier: 8E:0E:59:81:07:65:D6:F9:A7:8B:3B:D9:60:E0:7C:05:BB:54:BB:40
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 01938AA2DF56891E8B9CF69662EBA91DB62B
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/jg5ZgQdl1vmnizvZYOB8BbtUu0A.roa
Signing time: Tue 03 Dec 2024 03:49:09 +0000
ROA not before: Tue 03 Dec 2024 03:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.149.62.0/23 maxlen: 23
45.149.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 11:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8a:a2:df:56:89:1e:8b:9c:f6:96:62:eb:a9:1d:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Dec 3 03:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e0e59810765d6f9a78b3bd960e07c05bb54bb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:e8:8d:35:90:ce:72:e1:b7:8f:9d:fe:17:
d2:70:e7:cb:de:ce:98:f8:ea:74:a0:50:c6:09:f6:
1d:4e:37:6b:cd:d8:bd:bf:24:56:6c:71:ce:bc:5d:
67:24:fd:7f:c6:31:ef:39:76:14:4a:bc:52:e0:bb:
7a:45:6f:c9:43:38:88:f3:28:bc:d2:b0:54:b9:69:
89:6d:3f:21:8d:8b:06:5e:87:70:6d:37:db:3f:15:
8b:56:37:b0:96:6e:2c:db:f7:e4:52:67:8a:cf:4a:
8e:f6:ea:b2:44:d0:01:cb:78:75:23:ab:a7:39:ce:
7a:b6:03:99:41:9f:ee:07:45:7d:aa:10:9e:af:d7:
81:6f:e3:08:93:14:cd:66:7a:bc:77:46:16:4d:cb:
58:fb:f5:0a:43:25:b1:d4:12:73:46:4b:3c:db:9d:
55:31:ad:89:48:71:85:2a:38:c9:1e:65:1a:ae:53:
d4:f0:9a:48:84:51:a0:4a:8a:57:66:f3:0a:0e:a0:
81:6e:65:e0:40:4e:e7:05:45:f3:5e:1d:1e:d9:70:
b0:65:d4:4f:58:af:32:61:50:57:97:4a:ca:62:0f:
44:33:08:52:3a:03:59:42:b5:1e:b0:f2:9a:3d:e3:
ce:89:86:cb:dd:65:e6:36:2f:cb:92:f2:4a:d6:ea:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0E:59:81:07:65:D6:F9:A7:8B:3B:D9:60:E0:7C:05:BB:54:BB:40
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/jg5ZgQdl1vmnizvZYOB8BbtUu0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:02:45:74:ab:74:f1:08:66:91:85:6a:c1:ad:93:64:2b:73:
2c:43:f6:76:88:b7:d0:4b:06:09:16:e8:f4:db:79:30:cc:b7:
13:e3:a7:15:3b:25:3c:a8:05:11:80:83:7b:76:08:83:f5:05:
90:90:5f:58:d3:a7:e1:33:7a:50:d5:3a:04:fb:5b:dd:da:a6:
6e:af:7a:87:a8:90:11:bd:bc:dd:45:af:0d:3b:f9:d5:99:97:
fe:a0:57:81:c4:5d:98:00:a3:da:e3:1f:ee:c9:7d:3b:10:06:
8a:61:67:3b:58:9d:a2:6e:74:a2:ac:cc:b4:c8:f1:1e:81:c7:
bd:1b:be:fe:38:59:89:bb:50:5d:bc:8a:8f:b4:d4:ca:3a:50:
97:3c:bf:7a:6b:30:c0:94:04:43:60:bf:9c:e2:93:0e:59:ec:
80:33:9d:f9:fe:20:e3:35:21:17:b9:f8:73:a9:e0:0c:b1:db:
a6:81:04:a7:b8:50:2a:49:41:be:87:31:7c:dc:be:3f:05:0f:
e4:f0:fe:d0:17:53:03:a1:c8:09:ba:a1:57:57:70:37:fd:17:
90:82:49:3f:87:e2:39:cb:22:55:02:db:97:fb:e0:6f:87:ec:
ff:96:26:a0:af:65:76:ef:a1:9f:49:73:a6:48:1e:9b:d7:07:
31:55:4a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:34:06 2025 by rpki-client