Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/XnHv8HWf5IpEFvhXkwTiueKPOLI.roa
File: XnHv8HWf5IpEFvhXkwTiueKPOLI.roa (raw, json)
Hash identifier: AFe0BkZhczFbHt3YpWuRR04pp7/eooCpGIz2eQpBDl8=
Subject key identifier: 5E:71:EF:F0:75:9F:E4:8A:44:16:F8:57:93:04:E2:B9:E2:8F:38:B2
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0191BBFFB3DCAF7C1C2E76478EC463A50943
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/XnHv8HWf5IpEFvhXkwTiueKPOLI.roa
Signing time: Wed 04 Sep 2024 07:46:22 +0000
ROA not before: Wed 04 Sep 2024 07:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.211.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 11:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:ff:b3:dc:af:7c:1c:2e:76:47:8e:c4:63:a5:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Sep 4 07:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e71eff0759fe48a4416f8579304e2b9e28f38b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:8e:d6:8e:8a:5c:2e:49:6e:04:c5:d4:81:
69:52:46:94:0e:31:50:62:49:33:95:99:d6:cb:86:
dc:08:5e:b2:56:72:dd:45:50:51:0e:4f:78:65:b8:
43:f4:4f:f3:d4:51:45:03:80:e2:83:18:6f:5f:50:
66:c9:87:7b:22:1d:6a:37:52:d6:9c:37:ba:15:b1:
f9:b9:b5:da:0d:23:c6:b5:34:ea:db:36:51:e9:57:
bf:f4:ff:f8:b3:ac:26:e6:15:02:92:4c:3f:2b:8e:
e9:d2:fc:2a:e3:1b:24:33:ff:ce:0a:e3:76:0c:a0:
d1:2e:61:02:74:f4:d9:e8:eb:c9:96:6c:4f:b3:84:
cf:ed:fe:7f:15:93:63:46:21:83:6a:01:9f:7d:b7:
a9:13:a3:e1:d6:4e:1f:ce:1b:07:78:3f:22:88:1e:
dc:4b:cc:74:d6:22:05:31:4d:75:dd:15:5a:8e:e0:
5a:ba:24:96:bd:7e:b0:ba:88:75:24:14:5e:65:86:
cb:e1:4f:d0:70:66:24:83:16:b0:13:66:c8:63:c0:
98:9a:1e:52:bb:c1:a2:18:7e:8e:86:29:fd:2f:30:
82:2e:b4:b7:e1:42:87:06:1c:52:bf:6b:55:cd:cd:
c5:6e:ed:2d:a7:9f:20:7c:3e:42:f1:51:ea:9d:24:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:71:EF:F0:75:9F:E4:8A:44:16:F8:57:93:04:E2:B9:E2:8F:38:B2
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/XnHv8HWf5IpEFvhXkwTiueKPOLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0-45.155.242.255
194.143.211.0/24
194.143.214.0/24
195.114.192.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b2:15:b2:c5:f4:40:f7:44:63:95:53:25:c6:ba:49:6a:59:
e5:7e:0b:ef:d6:be:1f:12:98:b5:38:41:1d:85:14:6b:06:70:
2a:0f:7a:c7:88:82:c7:9f:d9:78:d6:fa:59:8b:f5:d1:14:b5:
bb:54:9f:ff:c5:ec:b2:b6:b3:84:91:f8:60:c9:c5:ee:2a:cd:
50:32:fb:af:0c:bd:f7:a9:b7:41:c4:be:d5:e5:49:f0:58:21:
d8:4e:13:65:44:f9:a9:7c:94:a5:ac:b3:e5:c2:83:46:77:4a:
d8:0b:44:fd:e9:e2:06:4c:8c:b1:5b:5d:cc:64:9a:38:d6:2a:
f5:92:98:da:cd:6d:ff:51:3d:c8:72:33:f2:da:f3:e8:b1:1b:
e0:22:2a:f3:49:1e:37:56:d8:df:0c:21:f0:ba:7f:ec:bc:cc:
d3:fe:26:28:45:76:1a:ec:73:85:b4:7e:91:8f:2b:23:92:83:
96:ba:2e:24:d4:fb:08:d6:5c:3c:07:0f:02:f7:67:6c:11:25:
33:82:ef:dc:ba:0e:fb:31:60:92:b1:24:de:e4:05:44:1d:d3:
7c:95:9c:0a:3f:d6:0d:82:39:a3:c9:fb:0a:b2:49:da:98:0e:
5f:97:36:b0:19:f0:70:5f:5d:e9:bd:87:70:23:f3:70:a4:7c:
08:c7:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 14:32:39 2024 by rpki-client on console-fra.rpki-client.org