Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/x8EYgE6PQs5sVFNEynxeZcENDKo.roa
File: x8EYgE6PQs5sVFNEynxeZcENDKo.roa (raw, json)
Hash identifier: CevkP6N3JGrNgHD4HX/L22G6H0RF3ejFeuUaGvegi+k=
Subject key identifier: C7:C1:18:80:4E:8F:42:CE:6C:54:53:44:CA:7C:5E:65:C1:0D:0C:AA
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D9AF702234E0D6B59D6A5B833C4A0CEDC
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/x8EYgE6PQs5sVFNEynxeZcENDKo.roa
Signing time: Mon 12 Feb 2024 01:38:15 +0000
ROA not before: Mon 12 Feb 2024 01:38:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150179
IP address blocks: 45.155.227.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 09:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9a:f7:02:23:4e:0d:6b:59:d6:a5:b8:33:c4:a0:ce:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 12 01:38:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7c118804e8f42ce6c545344ca7c5e65c10d0caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:83:18:12:b3:89:99:54:3b:f0:6b:92:98:49:
ae:71:db:23:0e:4b:77:64:0a:65:58:e0:51:90:2e:
76:96:a3:68:69:e3:05:47:fc:6d:81:0d:8d:ab:aa:
b7:0a:9e:01:4a:37:04:dc:b5:16:ab:6c:5e:81:c7:
33:79:c9:e4:ae:77:f2:62:81:a7:0e:64:cf:55:9e:
89:19:e6:6c:ba:44:09:7f:4b:b5:8d:ef:7e:3d:2f:
b8:11:63:3b:52:a5:a4:cd:1d:66:56:6d:fb:8c:57:
67:92:96:2d:93:24:ec:3b:93:d6:2f:94:5e:53:79:
e3:04:01:a4:5a:c3:3a:e7:8a:1d:96:f3:50:c8:0f:
93:0a:d0:11:a9:f5:b9:8a:65:88:32:50:4e:6b:a1:
ed:df:66:ab:c5:75:99:cc:40:6e:45:44:1f:42:f1:
22:d4:2c:a5:79:5e:16:b1:ef:d4:74:e2:b8:73:9c:
69:2a:37:b1:0a:e1:da:7d:d3:16:80:8a:b9:bc:52:
93:7a:c5:6b:7a:69:3c:b2:76:39:f2:69:bd:61:05:
43:27:47:ad:95:0d:bc:ad:63:ff:8c:12:2e:06:8c:
36:3f:d3:b9:ff:24:94:9a:74:a0:88:e8:0a:6e:29:
d8:9e:fd:46:ed:02:9a:7a:e0:ba:9c:34:37:be:07:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C1:18:80:4E:8F:42:CE:6C:54:53:44:CA:7C:5E:65:C1:0D:0C:AA
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/x8EYgE6PQs5sVFNEynxeZcENDKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.227.0/24
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:59:08:aa:5c:1b:b3:d7:03:e4:2a:40:1e:87:db:d0:2b:d9:
a1:c6:f9:e4:5a:0f:1d:44:e0:ea:80:91:bd:a7:c6:d0:2c:fd:
44:2a:13:f9:6e:47:40:16:d5:ed:a0:0f:9e:0c:84:97:eb:b3:
23:d0:77:9c:6e:18:36:19:10:ff:1c:68:22:65:7a:f4:dd:78:
f6:ad:48:6a:cc:74:ad:80:ef:8a:e7:8c:dd:f6:9b:1f:20:b6:
19:1e:2e:4a:d2:91:51:69:76:c4:70:2c:0c:ee:b4:9b:62:23:
e1:03:0c:63:9d:28:ff:8f:89:f0:5a:16:18:47:00:0d:79:dc:
a9:01:15:70:64:35:27:cf:c8:b7:4f:00:72:7c:7d:34:5e:b6:
66:a0:e3:dc:d1:9a:1b:66:9b:79:1e:79:7e:3f:0b:ef:9a:63:
12:a0:7f:85:34:8d:eb:0b:2d:db:1d:34:fb:13:78:4c:73:d0:
6b:3c:91:9c:a9:5e:89:6f:ed:28:1b:8d:cb:5e:e4:aa:58:2f:
0d:7b:94:fa:94:f3:ce:fa:c5:55:2c:b2:5b:33:06:f6:b7:42:
4d:33:5d:9f:73:8e:5c:7c:32:3c:4e:7a:96:b0:3e:ea:33:55:
d7:07:12:96:dc:2d:ef:d0:39:c0:5f:bf:36:6f:69:5f:04:26:
50:fe:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org