Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/7GpALXRKvMPGD2KOgiqPhAH-U3g.roa
File: 7GpALXRKvMPGD2KOgiqPhAH-U3g.roa (raw, json)
Hash identifier: SYLk672hXODOcHsxWTRShfagx7j8Xh7e8HXL+m+GTko=
Subject key identifier: EC:6A:40:2D:74:4A:BC:C3:C6:0F:62:8E:82:2A:8F:84:01:FE:53:78
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 018CC2DB279729D1ADC899FA10FA1933527C
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/7GpALXRKvMPGD2KOgiqPhAH-U3g.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208594
IP address blocks: 45.94.151.0/24 maxlen: 24
45.94.148.0/22 maxlen: 24
45.94.148.0/24 maxlen: 24
45.94.149.0/24 maxlen: 24
45.94.150.0/24 maxlen: 24
2a0e:2ec0::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 04 Mar 2024 11:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:27:97:29:d1:ad:c8:99:fa:10:fa:19:33:52:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec6a402d744abcc3c60f628e822a8f8401fe5378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:93:99:1c:86:00:b2:8d:c3:b0:1e:44:0b:
88:5d:df:25:00:ba:54:43:65:27:ba:01:57:c4:f3:
c3:db:52:ae:88:0b:15:0c:a0:05:9f:7f:d5:0d:d7:
3d:45:b4:46:bc:6c:11:16:6a:be:b6:e0:74:43:a0:
79:e6:38:ec:e2:b7:ff:fc:9e:ef:2d:3e:32:f0:8b:
02:b5:4e:4d:30:7a:27:63:27:32:10:2a:2c:6a:80:
0c:d9:34:a7:24:56:7d:bc:a7:15:ac:c8:5d:cf:45:
a4:2c:06:b7:5d:a7:fd:81:c9:f8:b9:48:f3:69:8f:
a3:5d:2b:7e:d0:98:41:81:a8:1c:73:4b:b4:86:3b:
d5:88:49:82:86:63:68:e4:f0:df:18:9d:ac:55:18:
f3:f9:d4:dd:9d:36:26:af:f8:fd:16:85:e4:b4:06:
ab:cd:66:d5:4b:1d:73:79:6c:d6:65:6f:61:60:88:
65:6f:23:77:ea:aa:05:0f:5e:8c:d3:a2:7d:bb:42:
d3:a2:a7:9f:42:d8:af:1f:1d:0f:8a:79:6c:80:38:
2a:1b:76:5b:81:27:be:cb:dd:39:3d:07:01:fc:2e:
be:a6:0f:70:5c:36:1c:7a:95:ee:ad:7f:37:17:0c:
58:b1:f9:42:01:9f:e2:6d:5d:bf:64:53:1a:78:65:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:40:2D:74:4A:BC:C3:C6:0F:62:8E:82:2A:8F:84:01:FE:53:78
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/7GpALXRKvMPGD2KOgiqPhAH-U3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.148.0/22
IPv6:
2a0e:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
04:57:81:2f:52:85:a9:16:44:7a:3f:8a:67:17:54:5b:8f:4d:
5e:77:4f:7a:f8:27:ae:43:fc:bb:3b:6e:d1:a0:f6:1f:f8:fd:
13:9e:9d:10:b0:19:23:12:c2:ca:1a:84:9a:e2:85:f0:2f:8c:
2c:78:37:38:d8:d1:42:72:3a:26:0e:e9:7d:cc:2b:df:5e:a8:
a4:1a:d3:8c:bd:01:5f:96:cf:67:d6:c0:73:c0:24:ed:01:ad:
e7:8d:c4:3c:08:43:58:56:7d:73:fb:4b:fc:d3:d0:a1:71:18:
d0:8e:b9:cb:b0:b8:58:33:74:cc:d1:72:7c:50:04:aa:ab:9b:
5f:a0:c8:4c:82:fb:98:42:40:93:35:03:30:84:f4:2d:f9:c2:
e5:81:6b:d3:e1:3f:11:01:99:5a:e7:3d:6a:59:0a:e7:44:65:
3c:33:ea:f7:5d:8e:b5:e3:2e:83:f6:bc:d8:b5:1f:36:35:aa:
93:69:fa:e7:2e:44:a8:aa:4a:37:3c:21:46:df:33:37:88:19:
f6:25:20:c1:6d:d0:4d:58:fc:b2:90:6c:e3:3a:52:84:e3:cc:
12:62:23:b0:b9:39:8b:e4:8b:6c:a9:66:66:33:32:92:a5:7a:
e3:93:69:d7:08:89:cf:02:94:c4:fb:fb:e9:06:e9:91:62:10:
f4:a4:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 14:29:32 2024 by rpki-client on console-fra.rpki-client.org