Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/H3LVWHrT806qFZjveUYv1kTXuV8.roa
File: H3LVWHrT806qFZjveUYv1kTXuV8.roa (raw, json)
Hash identifier: OdVgsVO4+hZZBZ3RtoeoC4OrNcdhKEjug8lrIpvaQHM=
Subject key identifier: 1F:72:D5:58:7A:D3:F3:4E:AA:15:98:EF:79:46:2F:D6:44:D7:B9:5F
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018BEB9F8362FE6946DD24332C5B0B6CE3D6
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/H3LVWHrT806qFZjveUYv1kTXuV8.roa
Signing time: Mon 20 Nov 2023 07:26:21 +0000
ROA not before: Mon 20 Nov 2023 07:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.243.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 07:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:9f:83:62:fe:69:46:dd:24:33:2c:5b:0b:6c:e3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Nov 20 07:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f72d5587ad3f34eaa1598ef79462fd644d7b95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:da:01:b2:13:c1:91:6e:77:cc:05:3e:89:
be:5b:96:4e:7b:3b:d1:98:84:ae:32:1d:94:01:27:
2e:44:f6:19:60:52:08:94:81:f8:6e:ea:f9:33:3b:
fc:57:6c:60:72:24:c0:14:d8:21:7f:3f:99:0d:4f:
ea:f3:45:ad:53:fe:91:b7:62:91:ea:6d:5e:df:07:
82:dd:84:33:b7:5b:1a:c5:b8:bf:9a:83:52:15:26:
d1:6c:56:a2:f1:fd:1a:4c:56:94:e3:c4:c5:c0:c8:
53:b3:76:2a:1e:0c:d6:b5:de:1a:c3:5d:9e:a9:e2:
c5:0b:a4:52:09:46:a9:2f:d9:ab:92:6d:bc:d6:13:
62:6b:9a:05:b5:af:bc:d5:3e:84:6f:99:bb:be:60:
64:5b:59:b5:e9:b9:89:f4:88:59:d7:12:2e:a6:e9:
b7:0a:f2:8b:dd:b4:47:64:95:5d:8a:77:98:96:d1:
4a:40:a6:f2:37:d5:51:91:73:27:aa:fe:fa:e4:b1:
7e:c8:72:5d:7b:50:4e:68:21:7f:1c:09:95:92:bc:
e5:49:24:0d:d8:f6:ed:4c:40:75:1e:79:c1:38:1f:
d5:22:c9:7c:44:67:0f:77:ad:29:3c:2a:88:4b:bf:
66:02:bb:54:da:43:e6:24:e5:c6:03:d0:b8:bd:6d:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:D5:58:7A:D3:F3:4E:AA:15:98:EF:79:46:2F:D6:44:D7:B9:5F
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/H3LVWHrT806qFZjveUYv1kTXuV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:a5:11:69:c8:86:a6:95:47:cf:d7:28:cb:f2:e9:4d:69:f5:
8b:79:2d:b3:0a:92:94:69:e8:26:ab:a2:65:03:9c:c2:fc:5d:
84:e0:3a:be:e3:24:8a:ff:78:2b:36:95:c9:ba:15:49:07:b4:
8a:34:b1:09:7f:52:d6:7e:b3:61:48:e2:3d:ea:c6:ca:c6:88:
c6:23:95:74:f8:85:98:d4:1b:79:65:30:d1:7b:59:5b:92:6b:
66:85:8b:c4:7b:6d:2b:8a:c4:75:2e:f1:d0:f9:ff:37:ff:57:
f5:d0:14:92:86:d4:70:e4:62:33:a6:81:fd:9d:68:a5:7b:ab:
cf:c5:2a:6e:29:ee:f2:e7:ef:53:9a:00:04:fb:58:65:a9:d8:
9c:66:95:b3:bc:62:e2:63:ac:b9:6a:78:35:a6:d1:88:2e:dc:
93:74:99:90:e8:ef:ac:68:09:ba:4d:f9:4e:54:e8:47:5a:8b:
1a:9f:7a:23:aa:60:af:38:04:66:4a:c3:84:f7:2c:3a:9f:87:
a5:ef:1e:d4:e5:81:ea:f3:00:6d:2d:6a:51:ad:2c:8a:3f:d3:
2c:b7:f5:52:6a:83:a4:9b:18:fb:2b:23:1a:80:df:b7:a0:a2:
d9:39:05:55:47:fb:a5:78:bd:0c:3d:4f:91:34:35:6a:b1:a5:
f6:11:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org