Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YVifvxw__-e5P_3pggocTf6eGaU.roa
File: YVifvxw__-e5P_3pggocTf6eGaU.roa (raw, json)
Hash identifier: m9o70HncJuwfuBc52tSJBm0tdiUrS+eWNmjXv5e1V2Q=
Subject key identifier: 61:58:9F:BF:1C:3F:FF:E7:B9:3F:FD:E9:82:0A:1C:4D:FE:9E:19:A5
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C97FB60907B68E4E59437D97D1A53
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YVifvxw__-e5P_3pggocTf6eGaU.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215539
IP address blocks: 45.155.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 11:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:97:fb:60:90:7b:68:e4:e5:94:37:d9:7d:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61589fbf1c3fffe7b93ffde9820a1c4dfe9e19a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:c6:f4:e2:43:6d:93:da:17:b7:3c:48:84:
93:a0:14:7a:ac:c9:8d:27:24:35:22:7e:e2:40:67:
4e:f5:5d:88:b9:73:a3:12:23:f8:7a:46:31:a8:6a:
94:c0:35:bf:cf:2b:95:4d:26:9c:ab:73:94:60:ed:
a6:dd:53:b5:f1:2d:c7:a6:5e:39:1d:05:85:bd:43:
fe:48:8f:3e:59:be:66:82:99:9b:b5:8b:30:3f:fb:
f7:a1:76:2e:0e:68:b0:d8:e1:4b:d1:64:2f:7d:21:
ec:5b:ee:3b:76:19:fd:2d:b1:46:9f:28:05:70:75:
92:02:be:76:51:f9:5c:ca:96:b0:c8:2d:8d:41:83:
8e:1c:af:3c:e6:f3:71:40:ab:58:20:32:35:45:99:
a3:a8:df:a2:63:99:41:fd:49:be:6b:c3:0d:79:3a:
44:4f:bc:35:e8:11:78:58:35:03:40:a7:dd:07:d3:
92:d9:b5:fb:f2:6f:ab:6f:76:a7:7b:54:b0:2a:8d:
21:7e:e9:96:36:80:b7:d7:03:00:f5:d0:60:97:67:
35:76:ab:a1:15:59:1e:e6:8e:45:3e:c2:80:da:23:
c1:07:9a:9b:47:8f:e3:f9:9c:4f:8c:bc:b5:e3:49:
8e:8c:85:fd:ae:d3:f9:3d:be:33:61:45:09:7b:e2:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:9F:BF:1C:3F:FF:E7:B9:3F:FD:E9:82:0A:1C:4D:FE:9E:19:A5
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YVifvxw__-e5P_3pggocTf6eGaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:39:c0:f2:e4:37:d7:aa:1a:cd:9e:c9:c3:f9:dd:59:be:1e:
23:96:6a:fa:8e:10:de:de:0c:bd:20:a6:fc:af:8e:da:db:1e:
79:f7:17:53:d5:6e:93:74:40:ec:0e:40:2e:41:34:8c:1a:4a:
53:08:f3:86:f1:a8:bf:e0:14:e2:ab:87:5a:05:58:0e:df:c6:
c7:ee:36:6b:65:1f:63:85:e6:46:9e:e3:bb:c7:4b:ce:0a:17:
22:2d:94:99:6d:d4:cd:41:f2:ef:9d:a9:f6:cd:cb:8c:de:6f:
e6:15:fb:03:c3:18:2f:51:13:6b:c6:6f:8e:3e:62:2a:80:9f:
f1:38:87:32:55:09:7b:6e:ce:c6:b3:1e:0c:25:71:ae:0d:eb:
df:1f:54:3f:c7:4e:fc:65:5b:f0:ef:98:cd:b0:1b:6f:8c:8a:
6d:75:8a:cf:54:a5:8f:88:e4:d7:db:46:0a:93:49:74:bf:05:
b1:1f:f3:c2:38:1c:03:c6:2a:a0:07:24:67:37:0c:be:75:56:
64:cc:ed:99:8e:8e:ac:eb:dc:d4:8d:66:a6:80:e4:ac:5b:91:
3b:55:34:c3:50:a2:9a:30:7b:e9:f6:ae:69:1a:2b:2c:13:fa:
75:ad:a8:08:a3:25:87:9c:95:ed:ce:63:6e:a4:a5:d5:71:38:
c0:83:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:11:13 2025 by rpki-client