Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/J4YPGDI_kG7pGdMRvvkQKKpUyZE.roa
File: J4YPGDI_kG7pGdMRvvkQKKpUyZE.roa (raw, json)
Hash identifier: UoIl2sqN0CLPs6PNObSvB/MmaKsP6eSnCTszV1MdLsQ=
Subject key identifier: 27:86:0F:18:32:3F:90:6E:E9:19:D3:11:BE:F9:10:28:AA:54:C9:91
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA7EAE7EF9F8885503C47DFDC8DB3
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/J4YPGDI_kG7pGdMRvvkQKKpUyZE.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 45.93.17.0/24 maxlen: 24
45.155.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 23:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a7:ea:e7:ef:9f:88:85:50:3c:47:df:dc:8d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27860f18323f906ee919d311bef91028aa54c991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:cb:24:c1:c6:cb:6e:41:89:44:70:3e:c5:
93:b2:4c:4d:20:56:e5:95:27:5b:5f:8a:05:30:d7:
6b:06:c9:57:43:eb:2e:e6:ce:a2:93:02:ea:c3:4e:
40:84:a4:da:68:f7:3b:4d:a0:02:4f:3e:f1:61:ae:
e4:09:cd:98:57:7c:c6:88:2b:6a:83:8d:2a:25:77:
bd:bc:55:35:cc:d8:d3:eb:46:a6:89:65:42:2d:98:
ad:89:8e:9c:27:95:f7:08:ca:15:35:3f:a3:98:56:
ef:ef:98:61:45:21:4a:57:04:f7:3d:13:ec:da:0b:
6f:e4:fa:9b:67:81:07:de:25:cf:c0:25:44:0f:06:
ce:96:76:ea:b0:c2:69:5f:e7:91:c3:7a:19:16:1e:
09:7e:81:8f:f5:98:40:1b:e1:7d:2e:fa:43:29:6d:
a0:83:02:00:bf:2a:be:9f:05:4f:5e:8b:37:4e:ad:
18:da:12:0e:19:de:c0:c8:fa:b7:bb:91:64:59:2d:
db:93:0c:b3:a9:9e:92:9d:74:b2:7e:0e:73:e9:a7:
e0:04:c7:db:04:6d:7d:77:e0:01:e0:08:2f:b7:2f:
9a:f8:f9:3c:24:b2:ff:87:0e:63:ee:70:32:c3:a5:
bd:df:97:06:6c:84:63:97:4c:07:f5:09:30:8f:8a:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:0F:18:32:3F:90:6E:E9:19:D3:11:BE:F9:10:28:AA:54:C9:91
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/J4YPGDI_kG7pGdMRvvkQKKpUyZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
45.155.225.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b2:8c:93:3c:01:cf:2e:4b:0f:7a:f6:5f:c6:88:5e:42:d4:
63:1e:2e:c6:41:6d:94:85:c4:5b:7d:75:00:91:e4:0d:29:64:
8e:91:41:1a:b8:9b:42:f1:ed:c5:48:dd:fb:26:82:37:c8:c9:
e0:4c:86:94:43:0d:4a:2f:6c:8a:ba:a5:f1:5e:a4:2d:15:ff:
fb:0e:66:ed:77:98:5a:03:d0:69:38:8f:0e:fb:35:45:76:db:
35:a6:7c:ab:a9:4a:39:94:7a:71:a3:4b:5d:2b:de:ac:f7:41:
8c:f1:40:33:ee:8a:c8:d5:27:59:1b:b2:18:6d:24:42:39:5b:
f7:71:2a:41:ea:3b:96:3b:f8:67:8e:49:de:22:6a:85:1d:8b:
14:04:65:81:78:a6:d7:31:55:ca:cb:dd:86:fa:fb:bf:b5:25:
03:dd:51:6f:fe:d5:36:01:a5:8c:ad:6f:4c:2b:8d:fa:a8:c8:
09:26:0b:d5:7f:fc:fb:23:d1:5d:f4:01:7b:c0:4e:98:f3:17:
dd:04:2c:3b:90:47:0e:76:e6:33:7e:42:7f:58:95:86:8b:35:
a1:99:79:79:9e:be:0b:28:e1:4d:ca:49:8f:3c:77:02:7d:03:
8e:85:89:81:08:8d:e2:8d:a5:63:97:b5:c4:89:51:25:48:94:
2c:5e:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:29 2025 by rpki-client