Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/U7RZsKuSoL4jc2PNb-cqVAD-GCE.roa
File: U7RZsKuSoL4jc2PNb-cqVAD-GCE.roa (raw, json)
Hash identifier: qmPLRofuo6AqCE0FPR250afMdTEHRQhwPZQYzOJ+zJw=
Subject key identifier: 53:B4:59:B0:AB:92:A0:BE:23:73:63:CD:6F:E7:2A:54:00:FE:18:21
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01944F38A2A80645F991CA112ECCFB9684D6
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/U7RZsKuSoL4jc2PNb-cqVAD-GCE.roa
Signing time: Fri 10 Jan 2025 07:58:19 +0000
ROA not before: Fri 10 Jan 2025 07:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
45.155.243.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 07:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:38:a2:a8:06:45:f9:91:ca:11:2e:cc:fb:96:84:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 10 07:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53b459b0ab92a0be237363cd6fe72a5400fe1821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:da:11:f7:37:de:28:11:0c:c8:75:c7:7e:
b9:dc:d6:57:21:c5:01:08:38:c8:df:15:4d:dc:a9:
5c:cf:fd:b1:b8:48:aa:41:b5:cd:9a:3a:8d:09:b6:
40:ae:9c:97:d0:a4:b4:f7:1a:44:bb:7f:cb:48:80:
2c:79:df:01:83:c9:85:1f:a3:ac:16:4a:2e:ae:ca:
fd:38:dc:f0:be:3d:22:91:a0:c8:b1:47:3b:a2:18:
93:0d:32:62:4b:1e:ec:e5:74:ed:f7:6e:df:53:0c:
5d:d6:53:20:31:c6:0f:be:47:d9:9b:aa:00:26:dc:
14:a4:cc:c7:4e:6b:c0:0b:97:4a:69:4c:09:ba:b9:
d1:5b:86:c7:ec:5d:00:08:6f:ca:59:64:6b:33:73:
2f:5a:bb:6f:b7:35:80:f6:d5:ae:3a:dc:36:97:2a:
d1:ad:ac:48:20:1a:bc:bd:fa:88:9b:d0:bc:aa:be:
1d:88:28:08:f1:e8:b0:c3:d7:eb:fb:4d:75:77:6a:
fa:67:81:1e:bf:2c:b2:7c:88:41:ea:1a:55:47:20:
49:5b:a3:43:fc:14:2f:96:04:0f:5b:7e:f2:d5:9b:
6a:7c:3b:ea:5d:89:c4:0c:1f:d2:db:3e:f2:6e:a8:
42:45:47:eb:e4:ca:c7:a7:25:ba:db:97:ef:b9:6a:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B4:59:B0:AB:92:A0:BE:23:73:63:CD:6F:E7:2A:54:00:FE:18:21
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/U7RZsKuSoL4jc2PNb-cqVAD-GCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/23
194.143.203.0/24
194.143.205.0/24
194.143.221.0/24
213.220.3.0/24
213.220.19.0/24
213.220.60.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ff:1c:13:cc:88:b3:f0:4a:b7:4e:02:e7:d4:f2:99:91:1e:
79:a6:4d:a1:dd:a5:66:9b:54:61:4e:00:fb:50:f5:38:e5:59:
81:4c:35:f0:13:08:9c:cc:e0:cd:ba:de:7a:b6:d3:d5:e8:6a:
07:75:78:37:d8:c9:45:07:3e:0a:25:d5:30:40:61:89:b9:1e:
90:a7:72:21:ba:87:cc:c7:b9:9c:ba:61:1d:74:8d:bc:fc:2d:
92:59:29:34:76:9c:a9:21:76:51:2b:f1:87:68:96:9b:6b:9b:
25:30:72:cd:53:6a:5c:cb:5b:de:3f:40:72:3a:9b:61:29:a5:
50:23:d7:1e:98:a2:fd:94:f8:34:d5:ef:b8:6b:d6:de:ba:7f:
80:ef:94:51:96:be:ab:e2:bb:d9:fa:6c:37:6e:19:7f:9b:3d:
40:ce:e8:e8:a7:0a:ba:52:4f:a5:9a:25:3b:56:48:3f:28:88:
f9:7a:44:23:04:58:6b:a9:22:d4:44:4b:c6:ee:a9:d4:16:2f:
f3:e2:98:d8:c7:55:cc:48:e7:7a:ec:a4:47:ad:b6:c9:da:61:
df:64:ac:c1:ef:3f:88:b6:9d:70:34:e3:6e:bd:3d:e3:7b:3c:
10:2b:c0:9b:88:33:e2:55:69:9f:7c:21:31:6c:ef:79:a2:d1:
c8:14:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:38:00 2025 by rpki-client