Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/8gcpDhLJInmzaPO8KKQG1aFm9Gc.roa
File: 8gcpDhLJInmzaPO8KKQG1aFm9Gc.roa (raw, json)
Hash identifier: JhTYJaarxSd0YJ/PP7BRIGazx1FwM2FYcHN3PT30RwE=
Subject key identifier: F2:07:29:0E:12:C9:22:79:B3:68:F3:BC:28:A4:06:D5:A1:66:F4:67
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 018D8AC3AA8B06882CC0E1C5D97F0D8E4653
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/8gcpDhLJInmzaPO8KKQG1aFm9Gc.roa
Signing time: Thu 08 Feb 2024 22:08:15 +0000
ROA not before: Thu 08 Feb 2024 22:08:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.94.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 09:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:c3:aa:8b:06:88:2c:c0:e1:c5:d9:7f:0d:8e:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Feb 8 22:08:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f207290e12c92279b368f3bc28a406d5a166f467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:8f:45:ca:00:5c:84:dd:47:9f:ef:12:a9:
f7:7c:2c:4a:33:cd:8f:fe:57:a3:a4:89:8e:97:55:
8a:d0:f0:1d:84:a1:c8:c0:dc:83:2b:9b:77:14:a0:
1d:18:5c:d7:46:69:eb:40:b4:5b:84:06:c7:d4:25:
0f:50:62:1e:76:aa:3b:19:e6:87:63:81:2d:db:c7:
c9:50:b0:02:bd:6b:fc:7b:3a:14:bb:5c:28:86:a2:
8d:eb:93:56:b2:5c:f9:28:2e:65:c0:8d:31:ba:c8:
26:09:87:2c:80:21:38:cb:57:56:a4:f4:42:88:3b:
4b:02:f0:4e:cd:10:18:47:60:fe:ac:ae:78:c1:d3:
3d:9d:79:e5:ce:93:76:5e:99:d8:17:1f:a7:4d:f2:
60:c6:6c:85:24:2d:a4:a7:42:1b:64:c1:d1:f3:42:
af:9d:64:ed:1c:de:16:bf:ae:15:4c:f3:fe:f0:42:
a3:33:ff:3f:0c:24:37:6d:81:3b:5e:36:21:ae:7e:
c5:60:1e:94:11:aa:40:ce:50:c9:09:f7:f1:ff:b4:
d2:ed:f4:ca:44:88:4b:54:c4:52:73:ce:41:4f:06:
53:59:a6:8e:87:a2:c8:97:51:b7:9e:2f:de:3b:89:
8c:92:22:fc:cd:bd:0f:86:c1:3c:dd:24:e7:31:92:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:07:29:0E:12:C9:22:79:B3:68:F3:BC:28:A4:06:D5:A1:66:F4:67
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/8gcpDhLJInmzaPO8KKQG1aFm9Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.139.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f6:55:42:35:02:c9:e3:6b:4e:b3:56:a7:d1:c1:ee:80:84:
dc:45:69:28:23:1d:8e:0e:90:32:da:a4:78:58:13:22:3e:e4:
c2:87:97:4d:5d:fb:e1:eb:f7:69:94:53:9b:a3:f8:15:a9:27:
52:b3:1b:0b:f1:df:85:25:ac:9d:bd:df:ea:bd:e6:ac:d1:68:
10:de:63:41:e5:20:a4:8f:db:30:f1:2c:ce:cc:e6:7a:f6:97:
9f:86:de:96:83:01:cc:34:ad:82:46:46:3b:ac:70:0c:96:30:
1d:b5:68:45:81:8e:59:cc:2b:f4:ca:a1:9e:0e:76:d7:65:f3:
51:fe:5e:1c:fe:92:c8:74:fb:19:cb:12:e1:a1:52:e1:14:e2:
4c:d7:39:3a:2e:90:3f:72:45:18:fb:7d:9b:49:62:f6:ae:cd:
09:88:65:74:e3:c3:95:80:15:42:a5:1d:c6:91:bf:f1:b4:58:
6f:20:ee:9c:38:1c:63:94:84:83:76:21:0d:e0:49:bd:c7:30:
43:65:a8:ae:c2:b9:c4:06:3e:32:3f:9c:3f:20:b4:35:79:cd:
2c:d5:d2:38:b3:f2:37:77:4c:b6:7e:af:d1:76:56:05:da:4f:
63:d1:68:8f:ac:95:17:81:f2:45:60:f5:b2:cd:24:c5:69:8e:
54:03:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:10:44 2024 by rpki-client on console-ams.rpki-client.org