Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o6QNua1InJFawAhR-1q4ayC9kzQ.roa
File: o6QNua1InJFawAhR-1q4ayC9kzQ.roa (raw, json)
Hash identifier: suPm6Yc9tZk5dhcV2T7z7bLcH1oF1nVuW/4qASjtXoo=
Subject key identifier: A3:A4:0D:B9:AD:48:9C:91:5A:C0:08:51:FB:5A:B8:6B:20:BD:93:34
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019034092E83BEDBCAC4A4E0457F43160878
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o6QNua1InJFawAhR-1q4ayC9kzQ.roa
Signing time: Thu 20 Jun 2024 05:05:35 +0000
ROA not before: Thu 20 Jun 2024 05:05:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40065
IP address blocks: 45.155.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 07:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:09:2e:83:be:db:ca:c4:a4:e0:45:7f:43:16:08:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 20 05:05:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3a40db9ad489c915ac00851fb5ab86b20bd9334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:96:7b:8f:76:bc:07:37:e0:94:f4:15:ad:
7b:dc:51:91:fd:05:00:54:5f:83:99:66:cc:35:d7:
c1:42:67:f5:fa:2a:44:e5:e3:43:81:ff:42:2f:d1:
1d:a1:0c:3a:19:8e:ff:6c:ac:3e:e3:6c:7b:b7:1a:
98:5c:17:2f:2e:4a:45:fa:64:50:f1:08:78:1f:e6:
2d:82:6e:51:3e:fd:79:b1:6b:75:ad:c9:f6:d5:9a:
8d:ca:04:b6:da:df:d9:a2:a5:b6:45:6b:47:b9:d6:
15:73:12:0a:f3:7d:b2:96:77:b2:0f:a1:61:e4:f9:
99:8e:95:60:ac:69:41:fb:a2:cd:44:76:7c:04:2b:
ab:47:c3:f3:16:1a:bf:37:75:8a:ec:d6:e7:2b:26:
01:13:00:b3:4e:a2:9a:4f:67:2b:1d:b9:af:01:43:
0d:60:fe:c4:58:09:c8:dd:22:9d:cf:82:3f:f3:42:
dc:7d:87:26:4e:b0:c1:84:bc:ec:57:e9:22:86:c5:
93:9c:06:3e:24:55:d6:a9:ac:9d:71:9d:e3:63:a2:
86:35:36:9d:ad:36:63:c6:50:ae:1d:b6:bd:ed:04:
70:1c:fa:bc:e6:23:5b:91:fe:36:5c:20:86:8c:79:
06:31:d8:02:49:a8:eb:b4:7a:5d:e5:9d:bd:fe:a3:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A4:0D:B9:AD:48:9C:91:5A:C0:08:51:FB:5A:B8:6B:20:BD:93:34
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o6QNua1InJFawAhR-1q4ayC9kzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:59:11:7f:15:ad:7c:b2:ad:71:11:42:f7:e3:64:4b:23:6c:
9c:a7:a4:cf:ce:75:1e:ef:ea:4b:b8:35:31:91:df:71:f0:53:
90:d0:d1:26:c9:9b:25:90:69:73:1f:be:f2:9a:c0:35:1c:ec:
ab:8c:c7:ad:2c:4c:61:d6:6d:35:d9:a7:a9:d9:7a:63:a7:5a:
2b:23:25:f2:db:9d:29:8f:fe:d3:69:30:af:1e:b6:53:b0:c3:
24:28:c2:2e:d5:fa:1e:16:a0:c5:54:65:7d:ec:26:dd:11:f0:
dc:f7:8c:87:70:80:ab:ef:dd:b8:2e:5b:f8:59:aa:80:a5:d1:
5e:c9:f1:03:62:16:bc:ff:ce:6f:1e:1b:57:27:64:ed:86:bb:
f7:82:38:d9:cd:86:f9:3a:7d:99:8f:a6:f2:fd:55:d9:51:b8:
61:66:2b:5d:31:b6:8a:a5:93:f3:ab:aa:6f:32:05:51:d8:e8:
e2:7f:57:57:d7:4f:33:cd:97:84:0b:08:4e:06:a2:fb:49:89:
55:33:f1:91:f3:34:81:e0:92:3a:38:61:1d:2c:52:21:99:dc:
df:de:3a:23:0b:e1:0e:f3:a0:e4:c4:58:31:6c:a0:24:d7:29:
0f:7f:e0:66:79:c8:6b:90:c2:26:73:bd:74:1f:62:cf:1b:3e:
d5:71:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:38 2025 by rpki-client