Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/CMiU8GZ8Ck118E-VHtlPrgkWrxo.roa
File: CMiU8GZ8Ck118E-VHtlPrgkWrxo.roa (raw, json)
Hash identifier: aGepdszHyqgBYWzyX+c2U8mmcmRchu1VtjDQEdNbVlQ=
Subject key identifier: 08:C8:94:F0:66:7C:0A:4D:75:F0:4F:95:1E:D9:4F:AE:09:16:AF:1A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018C7BDF13AB759DBE62A59167B9B5FCA05C
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/CMiU8GZ8Ck118E-VHtlPrgkWrxo.roa
Signing time: Mon 18 Dec 2023 07:41:06 +0000
ROA not before: Mon 18 Dec 2023 07:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:df:13:ab:75:9d:be:62:a5:91:67:b9:b5:fc:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Dec 18 07:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08c894f0667c0a4d75f04f951ed94fae0916af1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:3c:00:6b:10:a3:89:cd:72:8d:b3:e9:f9:
08:a1:b4:2d:d0:04:e8:75:5d:94:a0:92:46:23:fa:
aa:38:36:6f:1c:2d:b7:82:88:11:78:ce:66:58:ed:
fa:20:ec:7f:02:d6:d7:ac:e6:6b:bb:cc:a4:f0:b6:
80:14:fa:c2:85:f9:b2:07:1a:d7:87:c7:85:c2:95:
b5:37:59:47:3e:da:c0:a5:be:98:d5:44:96:7e:ed:
5d:f7:a8:43:fa:26:31:0f:1e:93:aa:c4:1a:a9:77:
c3:5e:c4:4f:ee:3b:02:46:6f:6f:14:f4:40:56:ac:
47:74:12:68:7e:9f:dc:36:83:e1:22:bf:a0:45:3d:
7a:56:24:a5:8a:80:d9:0b:fd:51:b4:6e:0b:0c:b5:
00:aa:0c:a0:1c:49:3b:bb:87:98:ad:25:6d:70:ed:
e6:d8:34:5a:9e:f2:17:d7:2c:c0:22:3d:78:0a:8e:
3c:b1:d5:70:01:b5:51:e3:68:39:af:1e:c9:42:f2:
9d:c8:83:d6:5c:70:6a:51:86:e8:27:55:b4:7a:ce:
a7:34:d5:53:77:41:27:ea:16:74:49:de:c5:ab:a7:
67:60:02:0a:a8:f3:72:d7:b1:09:be:12:c4:29:03:
60:2a:ca:d5:e2:ed:4d:0f:de:6b:18:2a:9e:d5:54:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:94:F0:66:7C:0A:4D:75:F0:4F:95:1E:D9:4F:AE:09:16:AF:1A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/CMiU8GZ8Ck118E-VHtlPrgkWrxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
Signature Algorithm: sha256WithRSAEncryption
b9:8a:81:9d:6f:1e:b1:e0:c3:ff:55:e2:52:8b:64:62:de:f4:
11:f7:25:09:79:ec:90:71:07:a3:bc:21:7d:bd:70:47:4a:fc:
e9:38:55:36:ad:96:27:5a:9e:49:9a:3d:02:1d:5e:8d:5d:1d:
d5:7b:a9:eb:00:03:bd:bd:3a:f8:1e:9c:1c:81:91:b4:23:a7:
a6:d3:a9:6c:56:2d:af:0c:ee:b2:dc:ab:9d:d2:73:15:06:8b:
67:3f:0a:59:bf:87:bf:00:14:ff:ba:c0:46:4b:38:d0:2b:d9:
33:be:b1:c3:3d:ba:d9:a4:fd:9a:8a:05:c8:b1:01:37:b3:89:
3d:71:09:41:8d:96:86:ee:3a:39:3e:e0:4a:19:4f:4a:00:d1:
fb:e5:34:8b:27:98:c5:ad:b2:cb:f1:0b:76:d9:0a:1f:35:07:
ce:aa:b4:62:f9:e1:65:be:a1:c8:a1:ac:81:40:bb:1f:b9:f2:
8a:55:72:b7:da:a9:8e:82:ec:f6:a0:22:6d:fb:3b:3a:40:cc:
a2:7c:b9:08:76:2d:79:9e:5c:33:bd:ab:81:37:cc:79:23:05:
94:10:44:42:ac:2c:21:59:5a:a2:d9:2c:e3:77:a0:dc:3d:5b:
f6:3d:27:4b:9b:a1:5b:e5:4b:39:18:60:54:19:c5:b1:99:c7:
3f:14:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:07 2024 by rpki-client on console-fra.rpki-client.org