Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6qRuheOwqOKixwYkmSP80nBieQo.roa
File: 6qRuheOwqOKixwYkmSP80nBieQo.roa (raw, json)
Hash identifier: X7Sd7gKv2iROnTYaLYrm4iljb+VswY8SArQvP0OsT0s=
Subject key identifier: EA:A4:6E:85:E3:B0:A8:E2:A2:C7:06:24:99:23:FC:D2:70:62:79:0A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D26C48D087285B26B8F826E5CF9795370
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6qRuheOwqOKixwYkmSP80nBieQo.roa
Signing time: Sat 20 Jan 2024 12:07:11 +0000
ROA not before: Sat 20 Jan 2024 12:07:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 45.155.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 04:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:c4:8d:08:72:85:b2:6b:8f:82:6e:5c:f9:79:53:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 20 12:07:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaa46e85e3b0a8e2a2c706249923fcd27062790a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:86:c7:97:56:5c:81:c2:c7:57:73:f2:49:
62:54:9e:b0:ad:a9:17:c7:3e:bd:8f:87:f6:fe:cc:
f6:88:fa:0e:72:dd:4f:b5:88:19:72:15:41:5b:1d:
fb:36:e4:96:e8:3d:eb:bb:7d:c8:b2:f5:fe:65:ae:
ff:6c:ad:e2:75:29:57:69:c3:38:3e:a7:c9:0f:c5:
3e:18:8a:e1:5b:45:01:08:0d:2e:e4:e8:84:55:d6:
89:e0:66:1c:a1:a5:11:39:fa:46:ce:1d:5e:5b:52:
6e:85:da:c6:95:1e:2a:bf:03:b1:62:a4:1d:ae:d1:
66:a6:d8:e7:2b:49:4e:9a:7f:ee:02:3c:c3:a0:e4:
96:9c:9e:85:5f:05:ec:7f:17:db:75:20:c6:8c:55:
97:63:25:72:b3:44:fb:08:8b:1d:c0:02:f0:57:44:
a2:24:e7:52:63:4b:34:3d:93:c4:36:da:9f:97:0c:
52:97:a6:71:15:7c:b5:bc:62:6b:fe:6b:96:8d:59:
47:e2:e9:02:87:30:39:e1:df:12:06:eb:6a:31:53:
51:7a:87:13:44:68:a5:fb:41:cb:a6:0d:2e:69:a4:
55:60:be:bb:09:ab:96:11:eb:86:90:f9:01:84:a5:
c9:5f:aa:2b:3d:f1:a3:d0:a3:9f:31:92:d0:d5:9f:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A4:6E:85:E3:B0:A8:E2:A2:C7:06:24:99:23:FC:D2:70:62:79:0A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6qRuheOwqOKixwYkmSP80nBieQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.224.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5b:88:63:a6:02:fa:9e:6a:d9:2e:5c:ca:57:f3:7a:a5:3f:
ad:93:88:e3:d7:d0:7b:f0:c5:cb:3a:d8:4e:51:89:a4:f7:04:
64:94:50:2b:e8:ab:71:81:43:a5:04:b1:0b:4d:bd:0b:44:9b:
42:bb:c6:5f:6a:83:1a:5d:b2:ae:b1:64:b2:1f:99:24:24:22:
c3:3e:84:c5:83:7b:e8:4a:48:7c:aa:09:68:b9:bf:3e:43:17:
9a:b4:04:50:02:f9:85:e7:fd:96:80:fa:6c:b4:99:ef:c6:74:
29:a7:93:b8:66:47:1e:80:23:0f:c8:47:e3:00:00:93:c4:45:
53:dd:36:65:bf:04:46:85:b3:49:40:6b:1d:cf:cf:b7:a2:7b:
d1:85:33:a9:4e:d2:32:3d:b0:4e:f6:72:3e:42:e7:b3:2c:24:
bf:a1:60:28:02:aa:74:df:82:b8:d0:8c:68:23:25:c5:df:cb:
72:78:25:17:67:17:1a:3c:fd:5f:16:3b:dc:e4:73:df:ef:51:
89:17:92:00:16:57:82:37:4e:db:01:1b:39:07:90:b9:fd:5d:
31:b9:f5:28:04:43:a7:7c:10:30:83:fd:da:2f:5b:7a:0c:cb:
9c:50:f2:a1:21:e7:12:0a:94:78:09:97:49:e7:33:05:4d:fc:
ac:ae:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:12 2025 by rpki-client