Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/8aLpU4BwFnztQfWUxkRwDq7NjwU.roa
File: 8aLpU4BwFnztQfWUxkRwDq7NjwU.roa (raw, json)
Hash identifier: x6GHLh+pamYjstY5DXO3u1xexnZpfXoRprTjH6EL54Y=
Subject key identifier: F1:A2:E9:53:80:70:16:7C:ED:41:F5:94:C6:44:70:0E:AE:CD:8F:05
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0191457A3DB9FE8982BF4DE1B0D3FE6F527E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/8aLpU4BwFnztQfWUxkRwDq7NjwU.roa
Signing time: Mon 12 Aug 2024 07:25:24 +0000
ROA not before: Mon 12 Aug 2024 07:25:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 22:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:7a:3d:b9:fe:89:82:bf:4d:e1:b0:d3:fe:6f:52:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 12 07:25:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a2e9538070167ced41f594c644700eaecd8f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:14:6f:35:37:f5:91:ee:12:61:17:bc:72:
c0:72:05:87:65:e0:58:6b:36:a3:76:11:ea:7e:18:
d5:ad:5b:ef:5a:2d:05:c5:24:f3:4a:23:a6:11:eb:
c4:ff:e5:1c:52:b6:8e:1d:99:77:d6:dc:75:bf:d2:
ce:48:2d:bd:4e:3b:2a:6a:16:f7:d3:c7:bf:d7:55:
d7:12:a5:30:50:41:c0:15:f3:ff:1a:14:5b:9a:61:
5a:34:e3:e3:48:a3:ee:4e:2f:03:ca:5c:99:56:c6:
5e:5e:e7:77:60:b9:96:d7:6c:b7:47:eb:d8:27:55:
cc:d8:83:2e:19:52:90:24:5f:18:ff:68:70:45:20:
b1:f2:a5:08:2b:fa:44:98:ab:18:e3:c9:75:24:bb:
77:e6:3a:75:dc:03:84:cb:fe:98:8b:3b:5a:f5:a8:
5d:eb:3b:d9:32:2f:af:c3:56:34:7d:d0:26:e3:99:
c6:4f:55:67:17:22:f7:e3:73:f7:c9:a0:17:f9:75:
59:3b:ca:df:44:63:b0:35:a3:f0:64:24:de:37:a7:
80:c7:ce:ab:91:cc:74:ea:4a:e1:9b:7c:85:6b:43:
c1:f0:68:1d:72:77:b2:69:51:07:fc:1e:51:ca:78:
58:5a:d2:87:b4:1a:c3:bf:d6:00:81:d0:5a:c9:13:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:E9:53:80:70:16:7C:ED:41:F5:94:C6:44:70:0E:AE:CD:8F:05
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/8aLpU4BwFnztQfWUxkRwDq7NjwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.214.0/24
195.114.200.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2f:d3:23:ca:ee:f9:4e:e4:3b:3d:bb:ea:e5:39:30:d0:0d:
69:cc:62:ea:a1:d6:96:e5:66:6c:37:b7:37:a8:c3:8e:f7:13:
2a:61:6f:31:3e:d0:67:37:e6:1a:5a:d0:88:50:46:a5:0d:9d:
c0:11:07:d6:07:ba:b0:b3:4d:fe:91:f8:53:33:95:a4:cb:9a:
79:09:e0:a1:a0:8e:59:e4:10:7f:17:43:35:b9:b1:83:d4:dc:
25:0a:5d:96:6b:b5:9d:9f:3c:07:99:12:43:68:5d:11:8f:20:
88:86:0f:05:85:36:8f:d4:ea:d0:8c:9e:ff:c2:3f:af:69:0b:
c4:66:be:f2:bc:e4:0c:23:f2:3c:e4:e6:1c:13:fa:cd:c6:56:
40:e1:13:07:a0:88:2d:d0:26:bc:13:6b:b7:48:42:f1:b4:1f:
e3:aa:58:64:07:49:b0:35:e0:a3:f2:ee:89:1e:1f:83:45:6a:
43:db:2a:8b:01:54:a2:a3:57:1e:40:60:e4:d2:bc:7b:cf:e1:
07:59:a4:08:07:fa:33:30:60:87:9d:e6:5d:0a:ac:00:34:c3:
d8:85:27:49:2f:60:7a:4d:55:5c:84:ab:93:86:7d:fb:1d:13:
08:79:79:8c:84:81:1e:e9:80:34:81:84:0a:5e:16:cf:a4:b2:
b6:11:5d:65
-----BEGIN CERTIFICATE-----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 at Wed Aug 21 02:39:21 2024 by rpki-client on console-fra.rpki-client.org