Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_oOQ9904LyDChpski5DQac_Dwl4.roa
File: _oOQ9904LyDChpski5DQac_Dwl4.roa (raw, json)
Hash identifier: vVk9xKZeBayqAt+daPUsNWrnF2KEJYgYx/ulkQkUBg0=
Subject key identifier: FE:83:90:F7:DD:38:2F:20:C2:86:9B:24:8B:90:D0:69:CF:C3:C2:5E
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CCF003C406917B008FD8BE77D4F75D28E
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_oOQ9904LyDChpski5DQac_Dwl4.roa
Signing time: Wed 03 Jan 2024 11:05:48 +0000
ROA not before: Wed 03 Jan 2024 11:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215938
IP address blocks: 45.134.144.0/24 maxlen: 24
194.145.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 14:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:00:3c:40:69:17:b0:08:fd:8b:e7:7d:4f:75:d2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 3 11:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8390f7dd382f20c2869b248b90d069cfc3c25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:de:21:d7:36:8a:ea:5a:73:69:44:03:09:
5a:1c:58:1c:c9:12:e2:f5:5f:22:ff:a2:e8:2a:13:
ea:ac:06:02:9f:68:c2:c1:0a:3a:db:c4:d1:46:de:
8d:66:f1:27:d6:b1:7f:43:ba:7b:00:70:ae:91:0b:
9d:ab:05:e8:3e:e9:e8:9e:c4:b0:53:b6:94:f8:ba:
a9:d9:e8:01:b0:f1:f8:d7:07:de:d7:0f:fb:5d:41:
bf:fa:11:e8:98:4c:e4:07:15:34:14:c0:a4:0e:24:
e9:c6:23:fa:51:35:30:86:f4:2b:ce:ca:d5:b5:29:
ff:39:34:c3:52:ba:ea:37:be:89:85:2c:4e:1d:9d:
ed:db:bc:3c:1c:32:2a:fa:b7:1c:e0:cb:0c:f1:b2:
a7:75:02:2e:b6:21:7e:c4:44:04:ee:ae:db:df:14:
3c:f7:60:c4:97:48:97:e5:04:dd:c5:54:0d:20:39:
25:2b:78:c1:67:05:1e:1f:54:87:90:44:54:aa:3d:
36:7a:da:f8:2e:95:9e:46:dc:f4:93:6f:c1:6a:40:
a6:e2:06:9d:f7:44:7f:21:33:15:53:5f:57:eb:7b:
56:73:59:45:d8:55:4b:48:e7:31:6d:99:30:da:24:
25:37:a0:94:cb:98:62:1c:d3:8e:42:02:25:69:28:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:83:90:F7:DD:38:2F:20:C2:86:9B:24:8B:90:D0:69:CF:C3:C2:5E
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_oOQ9904LyDChpski5DQac_Dwl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:13:3f:32:75:b0:7d:36:a6:4a:a6:1e:75:8e:da:79:9b:61:
ec:3e:da:5c:24:99:2e:6d:26:b6:69:4b:6a:6e:be:28:12:1c:
b1:0d:9d:e8:43:97:3c:f3:e8:77:fa:95:db:d2:2e:83:ff:60:
0c:20:c2:04:9f:17:38:f8:64:eb:44:40:e9:83:ae:bc:f2:f8:
ba:d5:17:2e:1a:fb:9d:29:5d:32:cd:51:3e:70:a6:01:6b:54:
9a:23:52:aa:82:77:36:0e:e0:43:cc:f8:05:90:a9:d9:a2:1a:
ff:9a:cc:2d:b8:a0:79:20:3f:e7:de:21:51:4c:43:68:02:30:
97:82:43:c0:98:38:04:70:2b:54:5c:bc:f9:06:b7:2c:f1:f4:
6c:93:91:18:21:9a:04:ae:ed:d1:83:37:b8:c3:a9:95:42:af:
0a:d4:d8:72:82:33:30:fd:22:ef:3b:56:02:ba:a4:dc:f9:55:
82:00:74:22:c5:14:dd:f1:e8:0a:27:ad:5e:e6:06:8c:d8:65:
dd:1a:88:87:7e:0c:41:92:f3:08:0a:0a:a1:3d:17:17:84:93:
9b:73:22:0c:8b:9b:e0:29:bf:ac:94:c3:dd:cd:f4:b8:e5:7d:
6c:33:fa:b1:41:1e:cd:9b:5b:a5:74:18:1e:b2:dd:3f:a9:70:
27:01:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:43 2025 by rpki-client