Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/web_fvAGB7U0m6Sk7rNOLErIzdQ.roa
File: web_fvAGB7U0m6Sk7rNOLErIzdQ.roa (raw, json)
Hash identifier: kAOl9Xm7MpH05KynLjp8uR/9xtVhY/IuIF8Ql6SWwcU=
Subject key identifier: C1:E6:FF:7E:F0:06:07:B5:34:9B:A4:A4:EE:B3:4E:2C:4A:C8:CD:D4
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FF489E13D2A6E18DFE7E224074ABFEB15
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/web_fvAGB7U0m6Sk7rNOLErIzdQ.roa
Signing time: Fri 07 Jun 2024 21:10:27 +0000
ROA not before: Fri 07 Jun 2024 21:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209474
IP address blocks: 5.180.104.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 20:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:89:e1:3d:2a:6e:18:df:e7:e2:24:07:4a:bf:eb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 7 21:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1e6ff7ef00607b5349ba4a4eeb34e2c4ac8cdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:76:f1:df:e6:11:dc:ce:bf:18:de:ec:79:
eb:0d:14:bb:8c:c1:38:f0:7f:1f:68:c6:d3:0f:a2:
c6:7b:de:58:12:03:30:55:83:0a:4e:23:93:25:37:
e6:57:28:8c:9c:26:1a:46:ec:36:f9:af:9a:04:0c:
74:87:90:1a:5d:43:7c:34:aa:6d:ab:06:9a:5a:60:
06:26:a3:f8:fc:6a:47:c9:4a:c9:74:2c:f8:1a:7d:
0c:6b:18:ee:f2:6c:46:38:4d:50:6e:61:2f:ba:98:
b3:57:45:9b:35:78:06:2f:90:49:d7:c7:ce:bd:6e:
ef:22:57:16:e4:82:86:5f:ec:c8:93:3d:93:74:c6:
23:b4:89:4b:44:20:8b:2a:4a:23:93:c7:2b:c2:2c:
f3:3a:a3:48:2a:2b:c7:b6:36:5f:02:53:9f:b9:d0:
15:5b:88:1e:f8:3f:1e:bc:68:28:53:90:f1:ed:0b:
11:54:82:85:eb:67:d0:2e:04:62:71:f1:2b:b9:bc:
c5:f1:c7:4e:44:ec:de:49:68:cb:f9:b1:61:6d:37:
e0:e8:63:5b:7e:3e:59:1b:db:e4:c0:c8:1a:e6:9a:
e9:9f:8d:52:da:5f:c4:5b:26:24:27:3f:bb:b6:76:
1f:0b:78:81:f8:b3:a6:49:c3:78:5f:45:15:ca:a2:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:FF:7E:F0:06:07:B5:34:9B:A4:A4:EE:B3:4E:2C:4A:C8:CD:D4
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/web_fvAGB7U0m6Sk7rNOLErIzdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.141.150.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b9:86:39:49:d7:09:29:fa:e7:1c:53:aa:c8:33:70:09:ba:
e3:1a:d9:ff:ad:4d:9f:ad:f5:53:2e:1d:d2:05:1b:ea:a7:a3:
e3:c3:ec:ce:8d:cb:c3:56:b6:12:78:6d:e2:e2:01:3c:16:f0:
f5:87:cd:ee:81:bc:02:5f:69:26:b9:e3:6d:d2:3b:48:1d:54:
54:0f:df:b9:92:7b:b2:23:3f:a9:c3:b5:06:38:8b:08:27:d7:
61:65:d8:0a:8b:cd:7d:eb:51:c7:10:1e:ba:80:9f:c2:53:c7:
f4:b9:80:9b:09:33:cf:e5:2d:ee:3d:0e:4a:cc:ee:ad:85:ab:
64:a2:2d:1d:4c:b6:f4:b6:c0:72:05:4b:4c:84:ac:63:e0:50:
44:32:58:d0:2f:5b:84:08:ee:b7:86:5a:9b:cf:25:4c:ac:c2:
43:f4:20:8c:7d:92:99:98:0f:13:4b:d6:cb:20:33:6e:f7:f7:
6a:62:d1:29:68:ec:e4:3d:40:92:34:89:4b:05:ca:22:16:87:
41:a7:70:2d:ff:33:78:86:4a:18:5c:09:97:2a:09:73:00:63:
7c:71:a6:31:36:a5:9f:23:cf:e3:d7:9a:20:4c:b8:0b:05:d6:
47:d2:ca:6b:c2:a7:27:9d:8a:18:34:c3:ce:4e:0e:21:21:e1:
c8:a8:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:01 2025 by rpki-client