Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a4yti6cIkarsIrkwoEfjW_50LWY.roa
File: a4yti6cIkarsIrkwoEfjW_50LWY.roa (raw, json)
Hash identifier: GD45sw2Voul0iQh9qZv7a3C6eBlRJEjxG2Z14moLFKA=
Subject key identifier: 6B:8C:AD:8B:A7:08:91:AA:EC:22:B9:30:A0:47:E3:5B:FE:74:2D:66
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019401EF2BD5E3D13AE22F91D7DE2B31278F
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a4yti6cIkarsIrkwoEfjW_50LWY.roa
Signing time: Thu 26 Dec 2024 07:47:18 +0000
ROA not before: Thu 26 Dec 2024 07:47:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 08:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:01:ef:2b:d5:e3:d1:3a:e2:2f:91:d7:de:2b:31:27:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Dec 26 07:47:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b8cad8ba70891aaec22b930a047e35bfe742d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:c3:f5:12:9e:a2:d7:0b:b2:a6:32:68:5f:
51:c3:86:d4:36:bb:7c:fe:3d:3b:49:37:a7:69:fa:
8a:3f:5f:49:8e:36:32:89:0b:43:70:26:41:e3:5e:
74:b0:92:22:03:01:f4:3b:7e:0a:2a:64:6f:1f:12:
41:7e:e1:9c:e0:1b:e3:ba:5d:48:a5:20:b2:24:63:
84:81:e4:cd:9c:e0:7f:7f:67:1f:6d:7a:b4:d2:71:
d2:c9:99:d5:82:de:0f:36:46:e1:4e:60:bb:2f:17:
61:46:07:1f:2c:a9:bf:5a:0f:24:15:3f:58:5b:dd:
7d:46:71:02:70:cd:11:27:37:f1:53:02:69:2a:85:
18:87:87:44:e8:3f:f9:c2:89:72:f1:64:9c:cf:ba:
0e:2d:4f:8c:12:36:91:51:0f:37:11:7a:94:78:4e:
e4:95:e2:96:99:31:fb:5d:aa:7e:a6:5e:55:f7:f0:
26:9b:36:a4:ef:6a:d0:cb:eb:20:cf:71:85:a5:39:
f1:5b:fb:d1:82:ee:2b:b8:8c:9d:73:e3:a9:ff:3d:
00:4e:86:ae:86:5e:4a:a4:18:4d:95:d3:c7:de:4f:
6d:b5:40:54:39:10:80:5d:87:8a:4e:4c:87:17:12:
b6:4f:a5:61:7c:81:44:d2:46:01:9a:56:8f:c8:d6:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:AD:8B:A7:08:91:AA:EC:22:B9:30:A0:47:E3:5B:FE:74:2D:66
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a4yti6cIkarsIrkwoEfjW_50LWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.205.0/24
213.220.58.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a6:40:79:ce:0f:13:20:cd:68:a4:f3:0f:88:4a:23:6f:aa:
da:c7:35:59:07:02:f5:32:d0:b4:1d:7c:01:c9:f4:71:20:f6:
6e:1e:94:b3:02:11:57:d8:09:86:74:97:d1:21:bf:9e:22:f0:
98:3a:27:da:93:9a:b2:e1:86:66:07:47:41:e1:6b:d0:be:ca:
1b:d7:db:8a:75:e0:ef:a3:87:20:1a:e1:0d:93:ef:7f:c0:1a:
cb:24:ab:06:5b:ee:89:aa:43:5a:d7:68:61:c3:1a:ec:aa:0f:
80:25:fe:b0:c7:9c:21:c8:62:88:cf:81:d0:e0:a9:55:e5:a4:
48:cc:56:a2:71:aa:ce:42:f5:84:79:85:25:e7:6d:57:36:58:
0e:fb:36:7b:8b:96:c7:2e:69:e9:b9:ac:18:7a:69:df:fc:c1:
70:54:34:e1:42:72:7e:36:ad:ad:94:49:f4:de:39:16:6c:bb:
e8:f7:3f:d8:cd:45:48:b5:b7:66:8c:8d:d3:e8:bd:47:40:b3:
85:74:43:26:c5:04:1d:1d:19:ed:08:ef:30:50:fd:65:ff:99:
46:05:5a:53:a2:bd:41:17:d6:18:7b:88:6c:2d:d4:a1:84:cb:
68:72:79:03:67:c1:ad:83:e4:47:44:da:83:e6:9f:19:8e:5b:
47:0a:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:27 2025 by rpki-client