Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ShcVD4deLaw6pBAg0Z-GaPd-HBc.roa
File: ShcVD4deLaw6pBAg0Z-GaPd-HBc.roa (raw, json)
Hash identifier: F/KLupPGBTG5lXdyTxkpNgbmJ0RXLPcS6/3CA/1zOwo=
Subject key identifier: 4A:17:15:0F:87:5E:2D:AC:3A:A4:10:20:D1:9F:86:68:F7:7E:1C:17
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019034092F9C9F22652D323D095176CAC7E0
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ShcVD4deLaw6pBAg0Z-GaPd-HBc.roa
Signing time: Thu 20 Jun 2024 05:05:35 +0000
ROA not before: Thu 20 Jun 2024 05:05:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216047
IP address blocks: 45.155.90.0/24 maxlen: 24
45.156.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 07:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:09:2f:9c:9f:22:65:2d:32:3d:09:51:76:ca:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 20 05:05:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a17150f875e2dac3aa41020d19f8668f77e1c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e7:af:53:bc:25:67:a8:23:6f:64:76:d0:9e:
76:68:62:46:a8:46:6c:e7:cf:c8:82:4e:2e:91:c4:
b9:b6:29:7c:e7:8b:20:ab:e6:d0:27:82:29:07:2a:
b6:4f:a7:1c:50:ca:b6:60:c8:2a:a6:3d:35:55:75:
ee:75:2d:43:68:df:37:a3:fe:db:05:f1:4e:de:bb:
a7:6f:b5:c1:d3:35:12:e1:e0:34:28:c9:ea:75:5b:
51:96:8c:fa:bd:ea:26:73:87:66:17:c7:88:16:01:
64:f1:95:19:8a:75:99:75:c5:a7:14:87:4a:2b:bf:
a6:bb:00:a4:cb:a1:e0:66:1c:84:b9:9e:52:bc:ee:
37:92:aa:8c:99:53:4c:55:dc:e2:12:f7:5d:24:1b:
a4:a1:aa:22:09:cd:a8:05:65:4c:31:62:d1:1c:28:
95:20:4f:e7:d0:bf:d3:b7:f0:f7:f0:d9:f9:fa:79:
b6:12:15:db:0f:3a:b1:fe:7b:be:a1:92:64:c9:f1:
65:43:c2:44:25:4d:45:83:7f:9f:d9:a6:43:83:3f:
c8:7a:fd:56:a0:65:a4:7f:c0:25:59:cf:5b:74:56:
9c:a8:f8:5e:a2:cb:a3:3d:b4:d1:76:39:2c:07:b4:
b3:27:82:c0:46:dd:69:36:d8:c1:4d:5e:3c:82:7c:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:15:0F:87:5E:2D:AC:3A:A4:10:20:D1:9F:86:68:F7:7E:1C:17
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ShcVD4deLaw6pBAg0Z-GaPd-HBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
45.156.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a8:6a:a3:25:9b:07:15:17:a5:c7:f5:65:f4:fd:f4:ff:38:
95:1e:fc:8b:38:44:d1:25:0b:e6:07:0e:e5:87:84:f2:af:c9:
e8:91:44:af:5c:b5:ed:47:2d:a9:73:a6:02:6f:3c:7e:f0:1c:
7c:36:c0:3d:99:bf:e2:4f:f2:4d:b5:c5:1b:c1:7e:87:4b:ba:
ad:6b:7c:24:a2:2c:af:a4:83:73:0e:31:25:46:a9:91:a3:d9:
8a:30:5c:e9:ab:b7:6c:1d:fa:22:15:fb:36:38:f5:c3:3a:0e:
18:fd:20:54:f7:e9:9d:c7:65:08:5f:12:8c:7c:1e:0c:ab:a4:
db:22:5f:2a:d2:2f:9d:f4:6b:df:80:43:95:09:87:e3:a0:ea:
d8:18:37:1e:91:64:64:45:05:5f:2d:39:74:c6:f1:bb:8e:13:
12:95:6b:3a:ba:1a:79:1b:ed:da:32:a4:a1:55:09:5f:35:40:
21:1b:4f:8a:bc:4e:41:ec:27:47:70:43:8d:bc:42:9e:c6:da:
66:41:4c:8c:1f:30:a6:d7:41:b8:96:ac:77:f0:4c:df:79:da:
cf:9e:fc:50:b4:a2:7b:08:ac:01:9a:92:6a:b6:4c:6b:08:87:
fa:de:09:ad:6b:f9:d7:52:2f:e0:89:13:96:3b:93:2e:cd:50:
92:33:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 13:47:34 2024 by rpki-client on console-fra.rpki-client.org