Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/POpi6akD38lnnwuVVLa6NfTGDxw.roa
File: POpi6akD38lnnwuVVLa6NfTGDxw.roa (raw, json)
Hash identifier: n6bQSr7R5N//rq/Lm63CfOfhIRflZzKalrJz3P+ueiM=
Subject key identifier: 3C:EA:62:E9:A9:03:DF:C9:67:9F:0B:95:54:B6:BA:35:F4:C6:0F:1C
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018B3CD04FF71496871F9F78073C5AA7D87B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/POpi6akD38lnnwuVVLa6NfTGDxw.roa
Signing time: Tue 17 Oct 2023 08:46:06 +0000
ROA not before: Tue 17 Oct 2023 08:46:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 07:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:d0:4f:f7:14:96:87:1f:9f:78:07:3c:5a:a7:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 17 08:46:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cea62e9a903dfc9679f0b9554b6ba35f4c60f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:28:e3:33:6c:b6:3f:5f:44:9f:c1:a9:b6:
0d:c7:cf:d8:2a:58:98:c7:62:65:6a:33:d2:48:e3:
73:e7:c1:69:97:22:81:76:74:f3:1b:f1:93:89:11:
ed:2a:63:09:5f:9c:e3:59:b7:5f:08:f7:ee:d7:c9:
99:17:d1:5b:2c:1a:a8:0b:30:df:82:eb:5f:ef:dd:
61:3e:84:2c:60:3b:a9:2e:f1:7e:5a:41:14:32:4b:
da:72:d8:6a:01:56:e0:8e:1f:0d:69:08:48:4d:e3:
b9:39:6f:0a:bd:48:2e:57:81:a9:88:92:51:a0:10:
14:5b:05:43:d2:06:af:33:3f:1b:ea:1f:36:70:95:
5f:09:14:ac:a4:eb:a7:d9:f5:a8:4b:36:cb:1f:6f:
6e:2f:8b:c1:b2:56:69:4b:fd:b2:89:f9:3d:92:2f:
12:fb:25:f9:77:a5:ef:a7:9c:70:02:ed:e5:93:4d:
d6:ef:bf:c9:3d:ca:08:50:5d:11:df:19:ad:0a:80:
11:89:50:16:f6:22:8d:c0:d8:51:8a:77:42:d7:51:
3c:ce:ca:c1:56:aa:f2:3b:c0:78:ba:1a:05:fb:a8:
ec:40:3b:3f:3b:fe:ba:0f:27:92:d7:60:9b:cb:65:
b7:2d:74:78:fb:ba:31:3a:34:c2:ae:06:f2:72:a7:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:62:E9:A9:03:DF:C9:67:9F:0B:95:54:B6:BA:35:F4:C6:0F:1C
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/POpi6akD38lnnwuVVLa6NfTGDxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:a0:32:af:a5:e7:d4:c6:ea:b8:ed:bc:40:01:26:53:71:36:
65:11:88:8b:cf:e2:c1:ae:0f:cf:40:6d:a1:c0:82:de:50:e9:
85:ae:1d:70:f5:23:5c:f6:ae:a0:df:17:5b:58:80:2d:8e:21:
88:a1:47:b9:83:2f:77:af:74:21:db:a6:64:ea:17:ed:e4:76:
b7:be:1a:55:60:29:e0:47:c0:2b:ef:db:47:00:81:de:bb:79:
84:a6:e9:80:c9:4c:e1:be:05:ab:79:39:a1:61:2b:9b:8e:24:
51:0c:6e:f4:cc:61:77:c8:f7:86:59:89:a1:b5:d4:c8:6b:57:
c0:8e:fd:32:9a:58:14:97:19:8e:e6:8f:f3:8c:7c:f8:2b:22:
d2:d2:2a:a1:f4:3e:3a:27:91:3e:42:2a:36:90:cd:b5:42:29:
82:47:4b:bc:f4:fa:42:9a:68:db:18:68:09:95:ab:6e:1e:8d:
45:0e:02:a0:04:c8:3e:1c:7a:f3:69:28:6c:65:10:7f:6f:9b:
e7:58:be:49:35:a9:bc:22:ff:a0:63:93:3f:87:01:fd:cf:90:
0b:7f:fe:78:f3:f7:12:6b:f6:26:d8:6a:0a:04:ce:81:6f:0d:
e4:d3:28:f3:d3:23:c3:8a:d9:11:90:a6:6e:97:5b:07:a1:27:
0e:50:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org