Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/JdQigwi_P-OcPW7DoJwZd9IJwxw.roa
File: JdQigwi_P-OcPW7DoJwZd9IJwxw.roa (raw, json)
Hash identifier: 1x8z6mwvGQ4CsZU8a6WbelEKtFUQzjXJvik/eHwP//0=
Subject key identifier: 25:D4:22:83:08:BF:3F:E3:9C:3D:6E:C3:A0:9C:19:77:D2:09:C3:1C
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01916A12EFB904C325AC20D3B469CDEF5ABB
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/JdQigwi_P-OcPW7DoJwZd9IJwxw.roa
Signing time: Mon 19 Aug 2024 09:58:31 +0000
ROA not before: Mon 19 Aug 2024 09:58:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 45.155.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 07:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:12:ef:b9:04:c3:25:ac:20:d3:b4:69:cd:ef:5a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 19 09:58:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d4228308bf3fe39c3d6ec3a09c1977d209c31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:87:0a:d4:e4:63:6e:38:a3:7a:89:92:ab:
32:7c:3b:4d:bb:f6:34:99:cd:76:1b:89:ee:17:97:
8d:95:6a:a6:37:e1:e1:4a:5d:2f:b3:8e:bf:0d:6f:
7e:d0:e8:2e:94:66:7a:94:a1:b4:ba:6f:41:50:bb:
a3:18:cb:0a:c8:53:eb:24:c7:28:3d:ae:0a:49:cb:
d3:fd:d8:aa:f4:43:bd:3a:b5:e7:7f:73:c3:1c:da:
bd:fd:68:c6:65:bb:09:e7:3e:4e:12:03:12:32:e0:
71:7f:7c:1d:43:45:6a:bb:a9:62:1e:c6:c0:d9:20:
d9:b4:71:d0:92:dd:a1:1b:5c:57:b3:20:72:a7:51:
c3:14:4f:4f:6c:d5:a1:89:d5:4a:92:00:25:32:91:
43:dc:98:d5:56:e4:8a:61:13:df:9d:2a:8b:38:4e:
84:8f:43:ae:ed:49:18:ae:5b:10:9f:5d:a9:07:86:
69:e2:4e:80:6f:8d:b2:73:2a:00:ce:0e:74:ad:2e:
9a:e5:a1:4b:61:38:41:b6:10:2f:6c:1b:82:08:23:
7c:85:3e:15:e2:21:fa:fe:f3:8e:b8:25:ad:d8:f5:
46:74:62:da:44:b0:ed:cf:e6:1e:34:a2:0d:3a:54:
92:a0:a9:93:3c:a7:f1:21:78:83:3a:28:d0:b4:e1:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D4:22:83:08:BF:3F:E3:9C:3D:6E:C3:A0:9C:19:77:D2:09:C3:1C
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/JdQigwi_P-OcPW7DoJwZd9IJwxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:00:c0:2f:8c:c4:96:65:a7:53:5c:a8:76:42:ee:e7:ab:7b:
48:17:3c:e1:c1:80:ec:1f:3a:fd:ce:ac:1f:ac:1a:b8:cc:31:
fa:9b:5d:b7:5c:1a:b6:a2:f7:fc:67:b0:c7:04:1f:c8:9b:76:
ed:3b:6e:c6:7f:32:cc:2c:fb:52:09:3c:ca:61:12:03:83:dd:
a0:d8:59:f7:1e:70:a1:17:c4:4d:01:4c:75:54:96:b3:4d:89:
eb:a5:7c:16:a3:87:7b:f6:d3:94:76:10:b2:80:0c:4d:ab:3a:
a9:aa:50:5b:44:95:69:b6:92:de:19:4e:61:4a:b3:33:59:0c:
d1:ba:a9:a3:a9:62:49:36:82:da:29:76:70:d2:66:db:41:60:
31:04:57:89:95:71:7a:ce:26:e6:a2:42:96:ef:e8:46:89:fc:
6e:2a:e8:18:9e:8b:71:b7:1e:52:83:36:58:cc:e0:d6:03:d4:
28:68:6d:86:ab:d2:0f:a3:e6:81:80:e7:72:57:ea:b1:84:3c:
eb:1c:70:e6:4e:96:6c:57:00:cb:7c:b2:17:18:a0:e7:60:04:
82:1d:92:a5:70:3c:ba:9b:54:3e:0c:88:54:68:e9:3d:86:69:
35:0f:7a:7f:7e:85:d0:1e:4b:c3:59:3c:4e:ea:bd:83:d6:b1:
e4:20:78:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFqEu+5BMMlrCDTtGnN71q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQwODE5MDk1ODMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWQ0MjI4MzA4YmYzZmUzOWMzZDZlYzNhMDljMTk3N2QyMDljMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxreHCtTkY244o3qJkqsyfDtNu/Y0
mc12G4nuF5eNlWqmN+HhSl0vs46/DW9+0OgulGZ6lKG0um9BULujGMsKyFPrJMco
Pa4KScvT/diq9EO9OrXnf3PDHNq9/WjGZbsJ5z5OEgMSMuBxf3wdQ0Vqu6liHsbA
2SDZtHHQkt2hG1xXsyByp1HDFE9PbNWhidVKkgAlMpFD3JjVVuSKYRPfnSqLOE6E
j0Ou7UkYrlsQn12pB4Zp4k6Ab42ycyoAzg50rS6a5aFLYThBthAvbBuCCCN8hT4V
4iH6/vOOuCWt2PVGdGLaRLDtz+YeNKINOlSSoKmTPKfxIXiDOijQtOF1fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCXUIoMIvz/jnD1uw6CcGXfSCcMcMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvSmRRaWd3aV9QLU9jUFc3RG9Kd1pkOUlKd3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZvxMA0G
CSqGSIb3DQEBCwUAA4IBAQBbAMAvjMSWZadTXKh2Qu7nq3tIFzzhwYDsHzr9zqwf
rBq4zDH6m123XBq2ovf8Z7DHBB/Im3btO27GfzLMLPtSCTzKYRIDg92g2Fn3HnCh
F8RNAUx1VJazTYnrpXwWo4d79tOUdhCygAxNqzqpqlBbRJVptpLeGU5hSrMzWQzR
uqmjqWJJNoLaKXZw0mbbQWAxBFeJlXF6zibmokKW7+hGifxuKugYnotxtx5SgzZY
zODWA9QoaG2Gq9IPo+aBgOdyV+qxhDzrHHDmTpZsVwDLfLIXGKDnYASCHZKlcDy6
m1Q+DIhUaOk9hmk1D3p/foXQHkvDWTxO6r2D1rHkIHjm
-----END CERTIFICATE-----
Generated at Wed Sep 4 09:07:41 2024 by rpki-client on console-fra.rpki-client.org