Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HgyeI7Pi-YS3MYrp2IcJWzJ6LLo.roa
File: HgyeI7Pi-YS3MYrp2IcJWzJ6LLo.roa (raw, json)
Hash identifier: 67/ZmpTyTlOLm3ckjyYuaHfsei1eEE3PlRYi/eiEKfw=
Subject key identifier: 1E:0C:9E:23:B3:E2:F9:84:B7:31:8A:E9:D8:87:09:5B:32:7A:2C:BA
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019150C517A648086F55191A208C28FF0D2F
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HgyeI7Pi-YS3MYrp2IcJWzJ6LLo.roa
Signing time: Wed 14 Aug 2024 12:02:59 +0000
ROA not before: Wed 14 Aug 2024 12:02:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 45.155.241.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 09:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:c5:17:a6:48:08:6f:55:19:1a:20:8c:28:ff:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 14 12:02:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e0c9e23b3e2f984b7318ae9d887095b327a2cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:68:1c:fc:13:6d:9a:6f:3c:8e:69:72:84:
cb:d8:0c:fe:44:b8:61:e6:2d:98:e2:7c:09:c5:a3:
ba:e1:cb:86:9c:70:97:70:bc:8c:08:d1:5b:e8:77:
70:c5:e7:25:b0:31:09:59:53:f6:6e:89:70:a3:d3:
6e:78:de:30:87:21:08:02:10:a7:87:34:4f:d1:3b:
c7:63:7c:a3:b1:c4:d7:6a:86:38:fc:11:2a:5f:df:
88:e1:fd:46:8f:4e:06:94:33:ac:e0:2f:8f:e8:cd:
8b:1b:37:e2:09:cb:1d:23:57:55:bd:b0:d7:49:21:
34:9c:73:9d:c6:ed:bd:b6:c3:7f:c4:6d:d3:71:9a:
0d:dd:be:1b:c9:7e:60:f7:a0:08:93:86:0e:8d:7a:
84:7b:c1:44:5e:0c:41:a8:ee:30:b6:bc:e7:65:ff:
df:22:4a:e8:4e:13:3a:dc:58:4b:2b:c3:a0:55:6a:
5a:ff:d8:63:91:97:27:d8:c2:62:a3:02:55:e1:3b:
62:fe:cd:c9:30:8f:39:ea:47:d3:d5:e3:51:05:b9:
39:51:0c:5f:b5:0a:23:6a:5b:74:9c:1b:0a:33:13:
4e:27:3b:76:ce:a1:5f:ee:f5:17:d4:0e:3e:52:ea:
f8:ec:c1:88:33:03:12:55:74:7f:ba:8d:fc:67:a7:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0C:9E:23:B3:E2:F9:84:B7:31:8A:E9:D8:87:09:5B:32:7A:2C:BA
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/HgyeI7Pi-YS3MYrp2IcJWzJ6LLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0/24
195.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:44:2c:a5:9d:99:29:02:69:14:cd:d5:43:ad:f7:56:68:d9:
ed:1c:39:e3:60:e5:e1:96:e8:ea:6d:ee:4a:ae:f7:38:8c:e4:
68:ea:9d:8c:86:b4:5c:ac:bd:2d:40:87:72:cb:54:f6:ad:69:
2e:8f:2d:bd:5a:0d:eb:e1:e7:8a:e1:26:76:bd:41:17:2f:0a:
47:8d:c4:cf:1f:b3:df:e7:62:88:3d:1d:13:ec:30:51:0c:7b:
f8:21:cc:00:b5:31:70:16:c1:3f:9b:b8:2e:33:28:ae:83:29:
57:c6:1f:19:93:b9:53:d4:87:bd:28:8c:be:9a:d1:fa:53:ff:
15:38:74:7e:ab:23:61:f1:dc:c9:67:c8:3f:9a:56:45:4f:97:
94:a3:cd:a1:4d:f6:73:f1:5c:88:bd:47:d3:25:a0:ac:ba:67:
c1:84:50:18:1f:5b:cc:4b:b0:28:7c:b5:15:44:f0:63:9f:13:
f3:e7:57:58:c7:c3:62:5c:f3:55:a6:27:59:54:23:8b:41:2f:
4e:2f:97:1b:c4:6c:48:08:99:51:c9:16:24:73:0c:fc:d6:cd:
7e:b7:25:09:d1:09:be:46:c3:a6:e8:35:b5:b3:f1:61:dc:a2:
20:ef:5f:5f:30:78:ed:3c:5a:42:7d:98:d3:e3:61:e4:52:46:
9f:48:4f:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFQxRemSAhvVRkaIIwo/w0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQwODE0MTIwMjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTBjOWUyM2IzZTJmOTg0YjczMThhZTlkODg3MDk1YjMyN2EyY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfNoHPwTbZpvPI5pcoTL2Az+RLhh
5i2Y4nwJxaO64cuGnHCXcLyMCNFb6HdwxeclsDEJWVP2bolwo9NueN4whyEIAhCn
hzRP0TvHY3yjscTXaoY4/BEqX9+I4f1Gj04GlDOs4C+P6M2LGzfiCcsdI1dVvbDX
SSE0nHOdxu29tsN/xG3TcZoN3b4byX5g96AIk4YOjXqEe8FEXgxBqO4wtrznZf/f
IkroThM63FhLK8OgVWpa/9hjkZcn2MJiowJV4Tti/s3JMI856kfT1eNRBbk5UQxf
tQojalt0nBsKMxNOJzt2zqFf7vUX1A4+Uur47MGIMwMSVXR/uo38Z6d34QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB4MniOz4vmEtzGK6diHCVsyeiy6MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvSGd5ZUk3UGktWVMzTVlycDJJY0pXeko2TExvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZvxAwQA
w3LDMA0GCSqGSIb3DQEBCwUAA4IBAQA7RCylnZkpAmkUzdVDrfdWaNntHDnjYOXh
lujqbe5Krvc4jORo6p2MhrRcrL0tQIdyy1T2rWkujy29Wg3r4eeK4SZ2vUEXLwpH
jcTPH7Pf52KIPR0T7DBRDHv4IcwAtTFwFsE/m7guMyiugylXxh8Zk7lT1Ie9KIy+
mtH6U/8VOHR+qyNh8dzJZ8g/mlZFT5eUo82hTfZz8VyIvUfTJaCsumfBhFAYH1vM
S7AofLUVRPBjnxPz51dYx8NiXPNVpidZVCOLQS9OL5cbxGxICJlRyRYkcwz81s1+
tyUJ0Qm+RsOm6DW1s/Fh3KIg719fMHjtPFpCfZjT42HkUkafSE+3
-----END CERTIFICATE-----
Generated at Mon Aug 19 15:41:47 2024 by rpki-client on console-ams.rpki-client.org