Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WFqL8JAL2m4EcETz33ckvyqmmew.roa
File: WFqL8JAL2m4EcETz33ckvyqmmew.roa (raw, json)
Hash identifier: s3D5eAnP4g0aAba7QRDVyK+3ky20DQTj7nwQGa7m2s4=
Subject key identifier: 58:5A:8B:F0:90:0B:DA:6E:04:70:44:F3:DF:77:24:BF:2A:A6:99:EC
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019001BB5CA93CBD92A0AF7AD71A44041F4A
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WFqL8JAL2m4EcETz33ckvyqmmew.roa
Signing time: Mon 10 Jun 2024 10:39:34 +0000
ROA not before: Mon 10 Jun 2024 10:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 45.155.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 06:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:bb:5c:a9:3c:bd:92:a0:af:7a:d7:1a:44:04:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 10 10:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=585a8bf0900bda6e047044f3df7724bf2aa699ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:60:5b:09:d5:68:2f:57:1d:22:ab:59:fc:
ad:6a:6a:58:4e:ba:b9:4c:25:26:50:4f:cb:c6:ad:
c3:0d:91:c7:fe:93:e7:be:cd:68:85:6f:93:db:6e:
1d:34:17:3e:51:6c:de:ae:f3:40:7f:2c:97:42:4d:
2e:61:72:d9:0a:cf:2f:50:aa:16:e3:86:b5:1f:49:
98:23:3c:94:ff:a6:16:9d:44:6b:4e:14:ee:f7:df:
41:f4:92:19:6d:7d:74:4b:93:21:82:04:1e:11:7b:
9f:95:2b:42:41:e3:65:b9:3e:cd:bb:d5:b2:29:e8:
7c:bb:3c:2b:5a:80:a2:ec:38:8c:48:f0:ad:ff:c4:
47:63:b7:2e:70:e2:86:bf:0d:1d:c3:2d:16:ea:c7:
60:b6:f0:04:fa:86:43:11:d2:e3:19:31:d4:d0:75:
f3:9b:14:28:f1:43:e9:51:5e:4e:6b:fa:ff:70:c2:
9c:01:d1:17:7a:97:6a:19:2f:9a:c1:ac:6d:c6:f8:
be:cd:bf:9f:be:77:c6:af:c8:a8:78:8e:7a:98:5f:
81:ef:b0:c3:0c:cc:95:47:91:89:1a:23:d0:dd:67:
06:48:64:e9:cf:c7:de:ee:05:1e:ca:77:d9:f1:50:
81:66:5a:00:3b:ad:8f:78:29:bf:7c:65:f8:9a:43:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:8B:F0:90:0B:DA:6E:04:70:44:F3:DF:77:24:BF:2A:A6:99:EC
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WFqL8JAL2m4EcETz33ckvyqmmew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1d:f2:0c:eb:4f:47:ad:df:90:9f:ad:d6:36:7f:8b:9f:fb:
54:d4:2c:16:6c:2d:fb:31:11:94:23:05:09:e2:4f:70:2b:b5:
57:77:b8:5d:b1:54:b7:d8:1f:1b:39:b5:8d:90:44:65:e3:c7:
50:2a:3f:a3:d7:fc:2b:3e:5c:62:af:e6:15:34:18:7d:8a:f3:
77:6d:8d:ac:19:9d:34:92:84:b8:a0:6c:f6:0b:23:6d:30:c5:
d0:69:80:dd:98:41:58:68:0e:2c:70:d6:d9:73:86:89:87:88:
9a:a9:e6:cd:4f:70:1c:c1:31:69:ed:68:e4:7a:6c:a2:4a:3f:
a5:f7:28:59:45:88:3d:1b:f9:ca:86:c5:a4:04:8b:4d:19:f9:
16:f3:cf:ea:51:62:fa:c1:f3:15:c4:71:7a:c2:2d:3f:f2:d2:
30:0b:34:37:2e:7f:f2:53:70:ef:69:82:28:6a:cd:7f:b7:79:
10:9e:1d:32:ca:c5:ba:a0:83:45:9c:2b:f7:9d:94:f1:47:c5:
15:bb:1a:d5:d4:0b:ab:b8:8b:03:19:82:d1:12:af:6c:45:52:
fc:e0:36:ca:29:de:78:6d:a6:8b:ad:01:e0:c9:12:f3:43:90:
cb:de:dc:b4:3c:fd:6e:ea:a1:b5:6c:38:8a:f1:5d:44:ba:1f:
c7:04:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 08:01:39 2024 by rpki-client on console-fra.rpki-client.org