Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YEK5rHVbuzamNBqz8-lwXzPLcRo.roa
File: YEK5rHVbuzamNBqz8-lwXzPLcRo.roa (raw, json)
Hash identifier: 2i/01DcIHbeQ/ogwLsCy1KqqwQOeSiAvQ+qhYLct9pY=
Subject key identifier: 60:42:B9:AC:75:5B:BB:36:A6:34:1A:B3:F3:E9:70:5F:33:CB:71:1A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0190DE797104F0EFDE0728F184FD5A64CDEA
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YEK5rHVbuzamNBqz8-lwXzPLcRo.roa
Signing time: Tue 23 Jul 2024 07:23:39 +0000
ROA not before: Tue 23 Jul 2024 07:23:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 10:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:79:71:04:f0:ef:de:07:28:f1:84:fd:5a:64:cd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 23 07:23:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6042b9ac755bbb36a6341ab3f3e9705f33cb711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d4:2b:da:1e:e9:18:4d:0f:99:79:5b:f0:4a:
0c:e0:e7:bc:60:84:82:f8:66:fb:68:4a:2c:c2:39:
fd:88:64:21:85:ab:e8:d4:7a:9f:9c:19:34:fd:74:
3c:73:cb:ae:4c:6b:9d:ef:8a:0c:ca:5b:02:70:b5:
f7:ab:af:6f:3a:ee:aa:67:c7:37:62:ba:a8:53:b5:
0e:45:86:07:06:1e:5d:88:5a:e8:e0:d8:c2:44:0b:
02:5f:3d:5a:f6:bb:71:33:47:04:0b:ad:fe:d0:40:
b4:69:46:9c:95:0f:c4:0c:af:6e:dd:b9:8a:27:5d:
f8:ee:b0:88:a4:5f:ea:4e:cf:76:6c:00:4e:46:63:
98:66:19:d3:e6:7f:f6:f4:3c:ce:59:0e:62:1a:8e:
bf:52:f4:27:83:c0:69:e6:ea:d1:13:f7:c6:b2:09:
78:43:2c:38:fc:ad:12:89:4f:e0:46:2e:ef:13:7c:
bf:f4:38:09:0f:da:52:5f:ae:f6:f3:14:e6:2e:3c:
7c:7f:ba:28:b8:99:1c:bf:01:94:a3:cb:32:3a:93:
78:fa:f9:a2:8e:8c:02:90:d4:a6:56:f2:39:25:00:
bf:ec:48:60:27:af:17:a8:21:b7:88:39:0e:2e:42:
31:56:70:87:ac:29:a1:1b:75:2f:fb:1c:70:fa:77:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:B9:AC:75:5B:BB:36:A6:34:1A:B3:F3:E9:70:5F:33:CB:71:1A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YEK5rHVbuzamNBqz8-lwXzPLcRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.226.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c0:c2:81:d2:42:dd:e3:b6:64:d1:b7:ce:bb:4c:6d:69:a8:
f4:cb:f6:29:58:0f:29:26:1e:47:6c:dc:ba:b9:13:e5:a4:0a:
31:c4:df:83:56:5f:45:95:34:17:6d:ac:02:82:e5:e4:bd:53:
4c:fe:91:db:88:f3:ae:b0:6a:74:35:97:74:91:61:49:14:15:
6a:f1:99:95:c6:53:79:0e:d3:76:f2:d6:89:e4:33:2d:fe:ac:
bc:6b:93:71:69:92:fc:a8:86:06:ec:ab:bd:87:37:ce:00:00:
a7:91:c0:02:b9:ac:b2:04:15:1b:99:aa:68:15:b5:50:42:02:
c9:2d:e8:1f:53:25:16:90:43:8c:21:cc:72:fd:22:cc:9b:e6:
86:10:40:4a:8f:fb:8f:a1:20:37:44:5b:df:31:23:24:e7:b3:
ce:91:a1:5a:3e:40:23:81:4d:5e:c7:8c:f8:4d:86:62:e5:18:
4e:27:fd:32:ed:ce:fe:43:06:59:e8:47:a7:b9:49:34:e3:1e:
7f:ee:52:93:68:e0:de:fb:48:ff:91:27:f6:d0:09:16:c1:80:
89:a5:4c:cc:15:cf:40:50:ba:9e:4f:b0:45:dc:9b:5f:f7:48:
4b:36:0e:e8:93:05:84:ea:f7:52:75:e9:06:37:52:fc:5e:d5:
1a:00:d0:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDeeXEE8O/eByjxhP1aZM3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwNzIzMDcyMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDQyYjlhYzc1NWJiYjM2YTYzNDFhYjNmM2U5NzA1ZjMzY2I3MTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dQr2h7pGE0PmXlb8EoM4Oe8YISC
+Gb7aEoswjn9iGQhhavo1HqfnBk0/XQ8c8uuTGud74oMylsCcLX3q69vOu6qZ8c3
YrqoU7UORYYHBh5diFro4NjCRAsCXz1a9rtxM0cEC63+0EC0aUaclQ/EDK9u3bmK
J1347rCIpF/qTs92bABORmOYZhnT5n/29DzOWQ5iGo6/UvQng8Bp5urRE/fGsgl4
Qyw4/K0SiU/gRi7vE3y/9DgJD9pSX6728xTmLjx8f7oouJkcvwGUo8syOpN4+vmi
jowCkNSmVvI5JQC/7EhgJ68XqCG3iDkOLkIxVnCHrCmhG3Uv+xxw+nd3FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGBCuax1W7s2pjQas/PpcF8zy3EaMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvWUVLNXJIVmJ1emFtTkJxejgtbHdYelBMY1JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZviMA0G
CSqGSIb3DQEBCwUAA4IBAQCGwMKB0kLd47Zk0bfOu0xtaaj0y/YpWA8pJh5HbNy6
uRPlpAoxxN+DVl9FlTQXbawCguXkvVNM/pHbiPOusGp0NZd0kWFJFBVq8ZmVxlN5
DtN28taJ5DMt/qy8a5NxaZL8qIYG7Ku9hzfOAACnkcACuayyBBUbmapoFbVQQgLJ
LegfUyUWkEOMIcxy/SLMm+aGEEBKj/uPoSA3RFvfMSMk57POkaFaPkAjgU1ex4z4
TYZi5RhOJ/0y7c7+QwZZ6EenuUk04x5/7lKTaODe+0j/kSf20AkWwYCJpUzMFc9A
ULqeT7BF3Jtf90hLNg7okwWE6vdSdekGN1L8XtUaANCW
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:52 2025 by rpki-client