Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0GVWKdTntZ9rtIiAKGicCvhAyZo.roa
File: 0GVWKdTntZ9rtIiAKGicCvhAyZo.roa (raw, json)
Hash identifier: SW0CSQlYzsvwaar6WN4+YIE922pYr2R+ulUgpN5t5xI=
Subject key identifier: D0:65:56:29:D4:E7:B5:9F:6B:B4:88:80:28:68:9C:0A:F8:40:C9:9A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A2C756BBCBC8DB3B483C36E0F5B9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0GVWKdTntZ9rtIiAKGicCvhAyZo.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150179
IP address blocks: 45.155.227.0/24 maxlen: 24
194.120.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 14:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a2:c7:56:bb:cb:c8:db:3b:48:3c:36:e0:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0655629d4e7b59f6bb4888028689c0af840c99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:98:48:1c:9c:ec:81:21:f9:cb:d1:80:73:
75:7f:4e:bf:c8:fa:1a:6d:55:9b:6a:58:12:15:16:
0a:93:8d:a3:59:24:a7:8d:82:83:6d:de:7d:98:35:
4e:55:ff:74:ac:94:59:43:f1:d2:fc:9e:90:c1:f6:
c8:82:bd:6a:8f:93:b0:03:77:33:55:4e:2c:72:35:
d7:42:d2:b3:12:f9:e3:5a:8f:20:a6:75:cd:fd:5f:
13:e5:03:ee:49:4e:3e:ae:9f:e0:75:10:2c:0c:f3:
da:50:3a:48:bb:c8:c4:5e:af:55:90:6e:5c:a6:97:
aa:7a:39:c9:00:7e:4b:4b:1b:63:40:4a:ca:2c:c2:
44:a7:51:c4:92:78:bb:f8:ec:be:a2:14:f4:f0:d9:
43:74:7a:86:8e:48:f6:e3:0c:00:50:e4:a9:6d:fb:
6c:1a:a7:e1:ea:43:54:d1:19:29:b8:84:8e:e6:1d:
82:3d:26:9a:65:5a:25:c5:98:a7:aa:c5:68:19:38:
ce:c9:a0:8a:bb:61:87:dd:0e:f4:83:c1:10:8f:b1:
c8:28:4f:c8:7c:26:35:ce:16:95:77:fb:3d:46:cf:
83:ec:87:b3:45:f9:50:5c:d7:f3:b8:d2:64:71:32:
ad:25:da:cb:31:a6:5a:19:66:ac:e6:68:ee:67:67:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:56:29:D4:E7:B5:9F:6B:B4:88:80:28:68:9C:0A:F8:40:C9:9A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0GVWKdTntZ9rtIiAKGicCvhAyZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.227.0/24
194.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
82:92:3c:01:ca:6c:03:a1:1e:db:8d:46:c6:e4:e8:05:cd:93:
72:6c:b5:67:27:32:1e:99:ed:46:d8:b1:c4:b6:a3:37:4d:77:
00:66:94:46:99:12:a2:88:fe:a9:a7:85:06:e5:0c:c0:13:94:
a6:5c:39:75:eb:98:70:62:49:8c:5a:43:5d:cc:1d:f2:82:36:
bf:a2:24:89:64:d2:2d:b5:4a:93:1d:ff:45:93:b9:1d:e7:1d:
84:02:42:84:07:58:b5:d6:12:3e:5f:9f:73:cd:5c:2f:9a:d1:
4e:15:a5:11:36:09:33:8c:13:1a:a0:6f:3b:40:f4:d6:4f:44:
88:46:ad:85:4c:96:21:f3:e5:be:15:9e:f7:a1:b9:9f:a8:9c:
2d:7a:bb:0a:3a:85:72:d2:a1:f8:4c:af:9b:1a:31:5e:b6:4b:
17:3d:72:73:7b:74:a1:d0:87:7c:14:78:d3:fa:53:f5:c9:84:
c4:be:2d:af:a4:9e:19:47:7d:da:43:a7:74:5e:5c:d7:b9:68:
65:93:6a:61:3c:ce:43:c1:7e:4e:ee:9e:6d:4a:06:9a:63:83:
01:39:ec:90:68:8e:40:d8:59:08:5b:18:44:a7:be:63:4b:56:
87:2b:cf:68:63:67:f7:37:48:03:b6:f0:4f:28:73:27:4d:8c:
6b:3f:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:12:53 2025 by rpki-client