Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/NurNdapUNapJ5YuuI3akdGt-SQk.roa
File: NurNdapUNapJ5YuuI3akdGt-SQk.roa (raw, json)
Hash identifier: pEukdPh7iM8D1B53JahDxUZS4A7yDp6mSIRyuW2z7J8=
Subject key identifier: 36:EA:CD:75:AA:54:35:AA:49:E5:8B:AE:23:76:A4:74:6B:7E:49:09
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019121571CED2FE9B52325D75E2F1D585EA0
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/NurNdapUNapJ5YuuI3akdGt-SQk.roa
Signing time: Mon 05 Aug 2024 07:00:42 +0000
ROA not before: Mon 05 Aug 2024 07:00:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:57:1c:ed:2f:e9:b5:23:25:d7:5e:2f:1d:58:5e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 5 07:00:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36eacd75aa5435aa49e58bae2376a4746b7e4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:81:67:dc:42:6c:92:64:24:30:06:6c:20:
c3:73:d1:3b:cd:da:0e:f0:e5:77:7f:14:17:ca:33:
c8:01:b1:43:72:93:1c:db:02:ad:2b:9a:09:9f:2c:
12:cf:2f:10:8b:1f:ec:51:b8:ff:ac:4d:57:94:db:
8f:ba:6b:da:85:ec:62:d8:25:97:34:2e:6a:22:2e:
f1:2c:9a:3a:f9:5d:e4:c2:12:73:f8:01:11:71:13:
5f:58:f4:7a:6c:c0:13:2c:4f:98:99:b9:80:88:95:
da:01:de:e9:b0:9f:ec:97:89:4a:d9:bc:41:49:f0:
59:e1:d5:e2:7c:b2:84:ea:c5:ea:f5:63:f6:ce:3e:
2a:e2:34:a3:4f:82:ce:44:58:b7:75:be:ac:ae:b7:
7a:32:a3:68:4f:9f:ec:f9:3a:69:b7:c8:ef:9f:ef:
9b:da:30:8f:9d:b7:f0:46:24:9e:2f:7f:29:df:4a:
b8:61:ca:8b:24:9b:65:b6:95:f7:12:b2:39:62:e6:
76:46:7f:06:ee:78:a8:61:ba:18:e4:de:af:6e:e3:
d0:50:57:cd:24:3d:10:6e:ed:6b:a7:3a:42:42:4d:
4b:89:5a:27:14:b3:83:70:36:6d:b9:4f:c8:a8:0f:
6b:50:da:91:c5:c4:70:10:bd:c8:28:37:bf:c9:14:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:CD:75:AA:54:35:AA:49:E5:8B:AE:23:76:A4:74:6B:7E:49:09
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/NurNdapUNapJ5YuuI3akdGt-SQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.214.0/24
195.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:01:bf:73:6d:91:ae:a4:6c:fb:81:2e:e4:e3:9c:05:d2:78:
6a:6b:b4:68:90:dd:b9:47:19:4a:c2:e3:5c:38:38:00:69:95:
57:64:48:57:6b:27:d2:38:7d:93:db:9c:1b:31:e1:f3:8d:a5:
85:1c:d2:e5:3c:4c:ee:df:41:26:82:ee:ba:12:5c:88:86:7b:
c7:5f:83:41:e4:60:28:2b:e4:03:32:fb:e5:d1:75:29:79:0b:
06:45:81:46:aa:d2:84:b9:06:14:80:54:98:63:8b:14:05:38:
9f:40:6c:1f:d5:96:7a:7e:49:1a:11:b8:04:da:7a:1d:4d:92:
db:5a:29:c6:25:91:b9:f0:2c:25:23:d4:71:88:2a:28:28:25:
14:6c:cf:39:42:b8:b1:1c:58:48:88:42:1e:77:96:48:33:38:
05:4e:02:c0:26:e1:37:78:9f:a5:2a:73:cc:df:74:a5:25:41:
a1:dc:7e:39:c9:7e:b7:95:4e:a6:60:ee:bf:00:cf:ed:1e:87:
5e:63:b6:21:81:15:60:f7:99:86:66:18:5f:55:85:4c:0d:23:
78:1f:ef:b8:ec:2a:65:b9:64:12:be:4a:2c:5c:89:f6:9f:cd:
e7:1c:f5:46:51:89:bd:3d:8b:bc:36:ac:49:83:af:62:10:cf:
6f:69:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:01 2024 by rpki-client on console-fra.rpki-client.org