Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PjjthUyj40Ehn2382kTBgQ5MAEY.roa
File: PjjthUyj40Ehn2382kTBgQ5MAEY.roa (raw, json)
Hash identifier: IeAh+re2FKdluLCfShqjIH3oENDYhnYEqhAqzDkt2II=
Subject key identifier: 3E:38:ED:85:4C:A3:E3:41:21:9F:6D:FC:DA:44:C1:81:0E:4C:00:46
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C8F8BE07B4D23847850D976A555AE
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PjjthUyj40Ehn2382kTBgQ5MAEY.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 45.155.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 07:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8f:8b:e0:7b:4d:23:84:78:50:d9:76:a5:55:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e38ed854ca3e341219f6dfcda44c1810e4c0046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:60:4e:18:c0:92:15:cb:8b:87:47:f3:2a:
e9:6a:11:f2:0b:5c:92:86:8e:c3:30:13:1c:1a:ae:
6a:05:62:ca:84:43:d6:09:6e:08:67:37:6a:4f:2c:
51:8d:9c:97:89:23:fa:a4:8b:e3:b9:cd:76:29:5b:
db:17:2a:ba:e0:08:98:3a:5f:a0:04:6d:0c:74:48:
44:fa:2b:13:d7:7b:d6:1b:f1:fa:10:e4:89:e4:8a:
c4:6a:62:78:ba:a5:d9:ff:4f:49:df:bc:07:c1:a3:
51:ee:a5:7f:de:ea:2e:ac:4d:65:af:d9:9f:f9:9d:
23:98:03:86:ee:88:21:73:52:b6:93:6d:ed:69:11:
7e:28:ee:ca:f2:74:47:66:4c:f4:ca:20:7a:3e:07:
6d:c5:ad:73:3c:53:0f:80:39:ae:4d:a9:3a:26:c6:
f7:51:2c:24:3e:01:38:98:9e:44:0c:90:3a:61:76:
d0:8e:ab:71:47:ff:67:9f:ab:5d:8e:83:d4:e9:89:
16:a8:cb:b4:ad:1b:56:bb:14:48:48:c6:02:c4:de:
86:5e:6b:cf:c2:02:84:1e:f4:fe:7b:3c:b0:4e:11:
d0:6e:84:de:6c:46:7f:00:15:03:67:cd:0b:88:25:
39:c7:a8:a5:9f:55:e9:f4:6c:8a:61:13:08:05:c6:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:ED:85:4C:A3:E3:41:21:9F:6D:FC:DA:44:C1:81:0E:4C:00:46
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PjjthUyj40Ehn2382kTBgQ5MAEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:7f:e6:87:c8:28:1f:c4:0e:af:90:49:6d:c1:17:9a:a7:64:
b6:ad:24:f3:7e:d2:aa:c0:d1:0a:51:c0:af:b0:3a:89:d0:60:
e8:f5:85:c6:40:c7:24:0f:cf:4f:dc:aa:b5:e5:1d:6c:53:d4:
86:a1:59:ef:d2:e9:4f:2d:a1:e1:47:44:62:c3:d5:b8:e7:63:
31:48:a8:ba:99:f3:8e:fc:c8:7a:ff:f0:07:f4:2d:41:31:bd:
fe:af:0d:54:1b:59:1c:62:71:99:26:1d:24:3c:77:52:da:b6:
61:7f:5a:39:e9:66:98:03:f1:d7:5f:35:0b:a7:f4:da:6b:ec:
9d:6c:f1:7f:bc:d9:96:b3:c6:d8:37:02:26:85:24:28:b4:a6:
26:e6:3b:b2:2c:5e:c1:34:09:fe:31:c6:7e:52:4e:a4:e3:e3:
47:c6:2e:68:0e:0b:77:57:79:cc:85:ab:da:13:14:9f:22:b8:
65:06:dc:5e:69:46:15:b3:27:30:e5:3a:2d:b4:24:76:67:92:
19:eb:10:b9:bf:89:ed:54:98:c0:e2:2d:74:a7:2a:a6:b6:9b:
d1:78:9a:46:eb:d4:89:19:11:1a:6e:58:0d:48:29:f4:5a:65:
55:a1:a4:da:88:64:12:47:d9:4f:38:b8:c4:d7:7b:1e:38:08:
b9:b9:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:24:32 2025 by rpki-client