Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/P6OHAC7XKN_vcH3dTSvy4wmY2C8.roa
File: P6OHAC7XKN_vcH3dTSvy4wmY2C8.roa (raw, json)
Hash identifier: 46N6iLzCj5+/iIlu8JKrl7j9gGdHdFRs+lfXGcj8T6E=
Subject key identifier: 3F:A3:87:00:2E:D7:28:DF:EF:70:7D:DD:4D:2B:F2:E3:09:98:D8:2F
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 0192F3B2EA3193AD1E3A82CDBCEE979642DE
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/P6OHAC7XKN_vcH3dTSvy4wmY2C8.roa
Signing time: Sun 03 Nov 2024 20:24:01 +0000
ROA not before: Sun 03 Nov 2024 20:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201155
IP address blocks: 45.143.214.0/23 maxlen: 23
45.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f3:b2:ea:31:93:ad:1e:3a:82:cd:bc:ee:97:96:42:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Nov 3 20:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fa387002ed728dfef707ddd4d2bf2e30998d82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:d8:2d:bb:e0:6a:20:80:d7:4b:09:4f:51:
13:72:77:b6:69:e8:a2:d5:82:f7:c1:28:80:ce:ff:
e9:bb:76:d8:98:db:db:d8:5f:df:91:9d:02:5e:ba:
c1:7a:49:6b:84:c2:77:18:8c:ed:52:e1:3d:c6:a5:
51:b6:90:c4:c2:55:22:a3:95:e5:dc:7f:5c:c8:1d:
5c:b6:62:82:a5:4f:7a:e5:c0:03:1b:b9:94:eb:96:
ac:51:fa:80:bc:e7:ba:32:de:7d:34:8b:9d:7a:bb:
7e:cf:82:50:11:e4:a1:33:84:7c:20:bc:73:cd:37:
55:e8:0f:67:fb:78:f9:71:0c:ea:f6:45:2e:5b:ec:
39:47:21:c0:47:f6:58:e0:19:66:c3:84:d6:97:cc:
1e:9d:77:81:08:5e:0f:04:1d:22:f3:b2:da:39:5a:
c0:63:fc:f4:c3:f2:bb:f4:9a:e5:e8:38:3a:c0:89:
6a:1f:8e:3c:c0:e3:92:85:16:34:08:a5:bc:02:0d:
1e:b4:69:26:75:9d:f4:44:89:f3:93:3b:9b:1f:e2:
a2:d7:6f:52:fc:e9:e0:b0:86:f5:7e:9d:d2:10:d8:
51:74:2d:67:c4:80:ab:5e:13:41:48:cc:83:60:dd:
1f:a9:5f:64:fe:a5:7e:1a:34:fa:2e:48:e7:fe:75:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:87:00:2E:D7:28:DF:EF:70:7D:DD:4D:2B:F2:E3:09:98:D8:2F
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/P6OHAC7XKN_vcH3dTSvy4wmY2C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.214.0/23
Signature Algorithm: sha256WithRSAEncryption
57:af:bc:d2:d6:cd:d1:6a:38:b0:2a:b3:02:f1:ef:da:6c:20:
e4:db:e5:ca:fd:c8:cc:51:9f:dc:70:a7:f8:08:16:76:dc:eb:
61:4b:43:a2:51:25:7d:6c:f5:ea:d0:61:66:b6:0d:fa:44:7b:
8e:d7:85:e0:47:0f:ca:54:71:58:ea:e2:38:c4:1b:99:ff:3c:
00:4e:46:08:9f:2e:f4:78:8e:c5:48:68:24:09:7b:36:05:96:
00:05:2e:51:de:ac:9a:0c:dc:b2:db:9f:f8:09:36:c4:bb:10:
90:39:77:1b:78:98:67:a2:2c:f5:e0:09:5b:a1:90:38:6c:bb:
9d:3f:41:cc:6c:15:ea:1a:d8:fc:72:ba:f7:b7:c2:4c:06:45:
ed:c4:8b:be:3e:c6:63:01:68:a6:8a:42:54:07:da:43:66:48:
11:1f:16:f7:af:08:3d:ac:30:cd:16:3e:91:4b:88:27:de:52:
e9:1b:3b:4d:6a:80:b4:34:db:52:57:fe:93:f2:09:fa:68:25:
1b:a4:dc:3d:8c:dd:f0:4f:f9:6c:6a:8b:3b:38:37:c3:ad:23:
d9:12:35:ad:4a:f3:66:0f:9c:31:dd:2d:8c:29:91:80:ca:9c:
f5:5e:87:2f:de:24:b2:c7:eb:60:d5:49:59:21:db:e5:15:4a:
c9:03:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:05:58 2025 by rpki-client