Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1SxsJZjAafgCWSfkVg5O4h0S-XM.roa
File: 1SxsJZjAafgCWSfkVg5O4h0S-XM.roa (raw, json)
Hash identifier: c8rcopQlKeaEHE4ffuvVhsil1d4XF+otdAYih3BrXeo=
Subject key identifier: D5:2C:6C:25:98:C0:69:F8:02:59:27:E4:56:0E:4E:E2:1D:12:F9:73
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018F9BB3D342D0D883A50B5162FA57867F1B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1SxsJZjAafgCWSfkVg5O4h0S-XM.roa
Signing time: Tue 21 May 2024 15:10:04 +0000
ROA not before: Tue 21 May 2024 15:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.241.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:b3:d3:42:d0:d8:83:a5:0b:51:62:fa:57:86:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 21 15:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d52c6c2598c069f8025927e4560e4ee21d12f973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:de:e9:2d:80:93:48:ac:d5:d4:54:c8:60:
a7:2b:73:6b:b0:b1:d1:9d:d5:a2:09:29:f2:f9:35:
95:1c:58:46:c6:f5:a7:54:16:2f:33:0e:25:f3:27:
e6:2d:8e:a2:af:ce:8c:e1:89:b4:9c:6e:b7:4c:46:
10:f5:ba:4d:7f:e2:6f:a4:58:fd:86:d8:12:70:f0:
c3:69:71:11:a2:f0:fa:26:d2:58:1e:6c:40:a5:b4:
f1:e3:9d:df:9b:32:f6:af:f4:78:02:85:ea:93:d7:
cb:9e:1f:4f:b2:ed:78:29:62:d7:1b:1c:a2:dd:03:
41:2d:c9:95:43:44:72:94:a7:c7:c6:69:54:24:1b:
b1:4f:05:a6:12:61:0d:b4:0a:f7:62:18:a1:af:f9:
d8:1d:2b:03:80:82:da:a0:15:fe:9b:d1:88:7f:b1:
7a:2f:15:68:f5:9d:fd:2e:49:e2:9d:c3:a4:60:f5:
a0:18:d8:2d:8d:18:74:27:ab:a8:dd:1b:f4:de:d0:
c1:68:e5:9e:8f:b4:7f:94:39:2b:8f:50:3d:06:d6:
4e:0a:38:34:7c:26:16:f8:28:2e:c5:1c:18:01:25:
f2:ee:fe:a2:58:1f:c0:50:b7:19:a7:84:16:3a:fe:
1c:2d:26:f9:f1:64:f0:76:2e:cb:07:91:4d:18:35:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:6C:25:98:C0:69:F8:02:59:27:E4:56:0E:4E:E2:1D:12:F9:73
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1SxsJZjAafgCWSfkVg5O4h0S-XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0/24
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a7:df:7a:71:27:63:cd:e7:3b:15:13:12:53:0f:85:8d:3d:
bb:53:c2:d8:0b:aa:9e:45:d0:1c:a9:5d:39:07:86:e4:63:7f:
fc:f4:09:73:fc:f8:af:42:5c:3e:b4:74:8c:c7:6d:49:89:eb:
95:a6:e2:75:4f:6b:45:a6:cd:f3:49:46:7b:4d:4f:3b:d5:eb:
94:18:42:8e:a0:75:d5:97:ae:11:08:00:d9:08:83:2b:93:4e:
7a:50:69:fe:ac:a7:d8:ae:22:83:ed:68:51:9e:24:78:d5:8f:
61:be:d1:8f:41:fa:ee:9b:5b:c3:a1:08:7a:c5:08:ba:9d:52:
0e:75:8b:6f:35:e7:5c:c6:c9:5c:bb:67:eb:74:4f:60:b6:92:
0b:f0:3a:b6:d9:9c:d4:df:7e:10:f6:9e:3e:80:6b:61:0a:84:
6d:c0:cd:9a:ed:72:63:9f:d2:d4:7e:08:6c:8e:df:7e:9b:d2:
47:de:78:fd:d5:0e:50:53:98:66:d9:4a:67:48:2a:db:a9:45:
37:94:11:69:f1:f8:2f:e4:ad:b4:2f:94:be:a1:b0:7a:f2:49:
4c:e0:f6:82:5c:0d:37:68:0d:0e:24:46:2e:45:82:b0:3b:c6:
5b:97:27:d7:37:57:3c:79:f2:f6:ad:58:0d:92:f0:88:f9:74:
57:bd:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:17 2024 by rpki-client on console-fra.rpki-client.org