Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/1-MF1vsRdTeZ3E8Yxavuk4cSlT6w.roa
File: 1-MF1vsRdTeZ3E8Yxavuk4cSlT6w.roa (raw, json)
Hash identifier: J34nBKPgMTKSNew0yo8UP5nT6vE1Y2qfdR1RSp6npHk=
Subject key identifier: F8:C1:75:BE:C4:5D:4D:E6:77:13:C6:31:6A:FB:A4:E1:C4:A5:4F:AC
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 018CC727526463F1888AE38FB182EE3DAF98
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/1-MF1vsRdTeZ3E8Yxavuk4cSlT6w.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.95.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 10:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:52:64:63:f1:88:8a:e3:8f:b1:82:ee:3d:af:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8c175bec45d4de67713c6316afba4e1c4a54fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:23:0f:40:5c:06:5e:cb:47:3d:3f:81:61:7d:
b8:77:75:e8:9c:d7:d2:61:07:49:20:40:81:eb:74:
2f:84:a5:21:3e:f7:9f:f6:5f:03:17:d7:17:de:05:
cd:d3:e7:f8:04:21:48:66:0a:80:e4:7e:06:f4:81:
e9:42:99:f6:4a:ba:7f:52:cf:84:fa:60:5e:1d:bb:
74:14:26:0b:fa:d4:d7:50:0d:e9:02:0b:22:bb:28:
05:2b:b4:63:dc:d6:d5:23:e0:0f:b1:25:4a:38:ae:
39:17:52:d3:86:b0:01:f3:82:71:86:73:06:4f:aa:
7e:b4:5d:6f:4c:27:b9:c5:fa:16:e1:ff:00:26:d5:
49:1f:a9:4e:04:53:ab:cb:b6:5e:24:28:63:52:bb:
c4:95:af:ea:98:1e:31:ac:9e:f2:37:33:89:13:ec:
59:73:54:c5:97:a7:12:7d:8c:01:61:af:4a:54:e1:
ef:c1:06:d0:54:83:3d:87:ac:ac:7d:b7:de:07:83:
2e:e4:fc:17:f9:75:75:36:82:f2:79:7b:19:20:27:
da:5b:f5:60:13:49:b8:e2:c3:df:0e:9e:3f:ee:44:
cb:cd:e6:b4:6e:9d:cf:13:2a:b1:29:f4:3b:f7:e5:
b3:c0:d2:4e:6f:46:c1:f9:92:3e:92:01:f7:b4:9f:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:75:BE:C4:5D:4D:E6:77:13:C6:31:6A:FB:A4:E1:C4:A5:4F:AC
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/1-MF1vsRdTeZ3E8Yxavuk4cSlT6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.206.0/24
Signature Algorithm: sha256WithRSAEncryption
42:59:b9:5e:3b:a1:e5:58:a8:a1:6c:13:00:70:2b:05:2b:3f:
f4:1a:c7:86:c3:88:1b:1d:a7:70:9a:37:6c:0a:c8:44:ca:6f:
a9:19:31:e0:31:71:79:32:ca:0d:5b:f3:85:1e:2f:1d:2b:94:
58:17:3f:12:f3:94:5b:ed:80:9e:9f:10:1a:74:64:ca:9b:8d:
4b:00:70:f7:79:0d:26:56:2a:ec:12:b4:cf:67:94:4a:a5:e6:
9a:08:8c:0e:ca:5d:3f:d2:c2:ad:51:5b:a4:fb:1d:d3:d9:af:
e1:53:91:9d:cb:3e:a1:17:68:ee:9f:84:e7:9f:8c:33:ef:f0:
04:0e:9a:f2:e7:c4:21:60:1e:c8:cc:6c:38:4e:37:27:20:8d:
2c:28:42:39:29:a4:91:04:f5:a6:b3:64:d7:35:e4:74:85:55:
d5:69:28:6c:79:5f:2b:2a:16:43:8b:4c:be:60:ef:c1:92:7c:
90:b8:35:65:d9:5e:75:bb:f0:10:b4:43:9d:73:6d:0a:2d:1f:
76:e6:40:ec:91:11:55:75:70:2a:2b:e8:5a:22:42:c5:be:cc:
58:31:36:d4:ee:25:d5:3d:62:2a:82:90:2d:11:c7:10:07:e3:
5f:5e:48:89:f1:e7:e5:02:de:c2:b9:68:40:c4:26:26:23:1d:
97:b1:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:35 2025 by rpki-client