Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jx5sZrcjwyTpZY4zxflLFllPZZU.roa
File: jx5sZrcjwyTpZY4zxflLFllPZZU.roa (raw, json)
Hash identifier: oUTiHVCqGaZxTdolDIytVyCNlT86ap30zlaXZBVw8TU=
Subject key identifier: 8F:1E:6C:66:B7:23:C3:24:E9:65:8E:33:C5:F9:4B:16:59:4F:65:95
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01955B32072E6CE370A67388790A0D902B76
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jx5sZrcjwyTpZY4zxflLFllPZZU.roa
Signing time: Mon 03 Mar 2025 08:49:20 +0000
ROA not before: Mon 03 Mar 2025 08:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.90.0/24 maxlen: 24
45.155.226.0/24 maxlen: 24
45.156.223.0/24 maxlen: 24
103.211.103.0/24 maxlen: 24
185.233.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 03:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:32:07:2e:6c:e3:70:a6:73:88:79:0a:0d:90:2b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 3 08:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1e6c66b723c324e9658e33c5f94b16594f6595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:62:cf:7d:18:6b:9f:28:d5:46:3c:61:77:
b7:40:b5:4f:30:a2:c9:7a:ee:b0:e7:0a:f6:af:df:
de:37:14:66:2b:b2:0b:44:15:da:04:8f:3d:66:cd:
ca:50:66:34:4e:6b:22:01:da:60:72:8e:fd:f6:c5:
7f:88:e6:1b:69:2f:2d:51:da:4f:6b:e0:30:d2:13:
43:8a:49:f1:4a:88:23:b0:b1:79:e0:35:36:d5:a8:
f2:07:07:d8:57:5d:ad:68:76:a2:2d:aa:e9:50:3c:
06:4d:2b:47:67:32:4d:6b:b3:a8:7c:0a:45:38:05:
78:0b:2a:b5:66:84:92:3c:9c:df:66:7e:04:91:2f:
2c:32:c4:54:b1:e2:8a:3e:6a:23:98:d3:59:00:eb:
bf:a0:74:02:16:f7:0f:68:60:24:69:da:41:c8:62:
b9:cd:f7:08:2b:11:3d:72:12:95:8d:98:12:10:e6:
b9:16:54:a5:df:87:e7:8a:06:88:de:7a:03:f8:4f:
35:64:26:1a:a8:23:2a:cb:f0:93:8f:9c:9c:d6:c4:
89:57:57:fe:2d:cd:a7:3e:96:00:74:a1:3d:90:b1:
ba:7b:f9:11:d3:e8:74:eb:13:d1:9c:f5:22:44:59:
42:46:ef:77:f1:72:0c:88:33:70:03:9b:7a:fc:e4:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:6C:66:B7:23:C3:24:E9:65:8E:33:C5:F9:4B:16:59:4F:65:95
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/jx5sZrcjwyTpZY4zxflLFllPZZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
45.155.226.0/24
45.156.223.0/24
103.211.103.0/24
185.233.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:40:82:57:cf:0c:4b:d3:f9:35:3c:0c:a1:96:bc:78:c0:90:
22:a4:63:a4:a1:25:7e:26:ce:66:6b:73:3e:2b:de:b0:e0:02:
52:ed:13:ba:92:9b:bf:b9:58:43:34:5e:cf:0e:33:4e:15:cb:
f2:a9:2e:d2:a5:88:b9:90:67:ca:8d:3b:10:d4:de:9e:0b:2f:
b0:90:27:57:80:70:34:51:eb:6a:70:bd:4f:b8:3d:66:da:aa:
54:d8:7f:35:af:ea:cb:ed:1a:34:61:ab:ea:4f:ff:ca:13:8f:
63:f0:d1:61:7b:cc:9c:65:10:70:f8:f1:c7:67:85:9d:aa:39:
24:7c:f2:38:29:01:73:4f:62:04:f0:2e:a5:4b:6d:e6:10:a0:
87:ab:f7:22:b7:6d:56:d2:32:da:f6:5c:1e:24:0c:36:66:b6:
b7:03:c6:f5:f9:f1:9e:af:e9:32:dd:be:a8:25:6d:b6:ae:c9:
14:8c:13:47:39:aa:9e:d3:ae:e6:76:83:54:c6:56:75:ab:02:
36:65:ab:45:3c:4a:a2:e4:de:2e:a5:64:be:81:bf:00:88:e8:
67:74:45:90:4c:2f:2a:31:18:64:ff:a4:19:80:10:89:4e:be:
8f:6e:94:15:c7:85:13:90:2b:ee:de:3c:51:97:51:62:0e:33:
6a:82:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:18:47 2025 by rpki-client