Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FwRLHPPUVNF8eR1PFvWl64_iP-E.roa
File: FwRLHPPUVNF8eR1PFvWl64_iP-E.roa (raw, json)
Hash identifier: Wg4tlE0g2lbfBZltXbK0TeiGYtUYWEHz+VZen7eAHFI=
Subject key identifier: 17:04:4B:1C:F3:D4:54:D1:7C:79:1D:4F:16:F5:A5:EB:8F:E2:3F:E1
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA25DEE2C662A9FD52F4FAF2F86C5
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FwRLHPPUVNF8eR1PFvWl64_iP-E.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 45.155.226.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 12:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a2:5d:ee:2c:66:2a:9f:d5:2f:4f:af:2f:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17044b1cf3d454d17c791d4f16f5a5eb8fe23fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:6b:c5:e1:37:4a:31:07:3a:3e:0e:6c:ee:
9b:74:20:00:62:6b:b4:f8:85:a3:6d:76:24:95:e3:
16:70:a4:2e:c9:56:71:34:98:57:72:81:61:52:83:
46:2a:74:23:7c:fa:6f:1f:ec:67:c7:67:de:53:b8:
3c:8b:87:81:9e:55:1a:20:e9:a3:53:91:b9:a9:eb:
40:8b:24:32:71:ae:da:cc:70:9a:bc:b4:23:34:02:
22:a1:e9:1d:24:92:31:1a:c6:a5:d4:ba:74:e1:26:
50:71:20:bc:4f:8e:84:b1:e0:76:56:cb:29:35:13:
5e:19:51:d4:e8:a4:94:30:e2:7d:c6:82:85:57:13:
06:26:2b:b2:81:e2:17:a3:fb:ed:6d:de:01:d4:4e:
52:7d:e0:d3:95:ea:f5:d7:12:eb:fe:0c:ea:7e:58:
a2:e3:9e:41:14:a4:61:e8:ba:0b:df:85:6b:88:3a:
bb:74:e8:8a:0e:60:90:ae:0e:bf:42:bc:59:90:67:
a7:4c:bd:41:e0:22:0a:a1:79:f7:1d:a5:c4:2a:47:
01:24:bb:52:8c:ad:58:c7:f7:db:90:1d:41:33:e3:
73:2a:5d:c8:68:f2:3f:1e:43:e2:cf:fa:7d:71:5f:
f8:da:7f:68:73:26:74:30:dc:02:44:33:df:eb:07:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:04:4B:1C:F3:D4:54:D1:7C:79:1D:4F:16:F5:A5:EB:8F:E2:3F:E1
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FwRLHPPUVNF8eR1PFvWl64_iP-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.224.0/24
45.155.226.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6d:a2:ea:71:2e:15:1f:0d:35:04:5c:cd:13:26:ed:ec:dc:
63:54:7f:e8:0e:ea:55:a3:12:00:d6:cf:81:dc:5f:26:bb:92:
28:78:df:f3:ca:e1:d3:c3:c7:dd:72:63:3c:33:c2:c0:dd:e1:
63:9f:95:8e:ed:88:cf:42:a2:58:49:28:06:14:ee:81:09:48:
50:9d:8a:25:44:10:6c:53:69:8c:b0:26:8e:89:0f:49:2c:2b:
94:16:ad:3e:ce:9c:f4:5b:26:95:99:be:5c:43:86:39:bc:f6:
dd:be:38:39:7a:ab:1b:ce:31:27:93:55:19:80:ba:50:42:64:
22:c2:de:0e:c0:0a:b3:a3:35:f4:1d:3f:9d:7a:37:c0:f1:aa:
11:8e:2d:2f:3e:fc:b0:6a:d3:97:ec:13:b7:f7:f2:e5:1f:9e:
d9:27:4c:d1:9d:47:b2:5e:17:bb:25:fc:47:31:3f:7e:64:7f:
e8:c1:87:59:2f:e0:27:06:9b:0f:ea:38:d6:3f:4d:a6:c6:ca:
e8:fe:bd:79:84:8d:e8:9d:e8:3b:17:d4:2b:39:ce:d1:b0:ff:
5d:95:b7:b9:63:10:de:a9:02:b3:e9:79:1e:37:a0:0b:af:51:
a4:44:1c:81:40:69:b7:3f:c4:2b:33:47:8f:19:6f:28:e9:c0:
2f:5c:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:01:03 2025 by rpki-client