Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/c7IVsKeCSOUETMM2Y1lVIbTS-9Q.roa
File: c7IVsKeCSOUETMM2Y1lVIbTS-9Q.roa (raw, json)
Hash identifier: VXgdSXkeJEx0QbtGIDVh67pyH5YGE7XQQBBaTOHWz/k=
Subject key identifier: 73:B2:15:B0:A7:82:48:E5:04:4C:C3:36:63:59:55:21:B4:D2:FB:D4
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019172042F9AEF47FA445E1564C5DB2627FE
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/c7IVsKeCSOUETMM2Y1lVIbTS-9Q.roa
Signing time: Tue 20 Aug 2024 22:59:22 +0000
ROA not before: Tue 20 Aug 2024 22:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 06:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:72:04:2f:9a:ef:47:fa:44:5e:15:64:c5:db:26:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 20 22:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b215b0a78248e5044cc33663595521b4d2fbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:eb:1b:79:97:b7:42:56:36:33:8c:33:2e:
cd:0c:39:ad:a3:ef:1d:9f:47:e3:5c:5b:49:b3:6e:
e2:2a:8e:39:ac:dc:48:61:e3:a2:c5:14:f3:15:f9:
cc:b8:8b:ab:e5:67:53:b0:30:d6:89:f9:96:78:2b:
5c:b0:26:8c:9b:5a:4c:76:17:f1:48:5c:d3:02:b1:
de:6e:c9:5b:10:ad:ea:6b:5b:08:fb:cd:b3:d7:d3:
00:b5:84:ad:10:fa:b2:c4:f8:0c:73:5e:6b:5c:bc:
f1:f0:c0:e7:65:9b:98:4e:37:aa:dd:6f:c5:90:a6:
32:ff:d8:3a:30:86:b2:b0:34:e4:b7:ef:27:ee:15:
4b:ec:c8:aa:bc:6d:45:9a:e7:26:e5:e4:e9:fa:12:
14:b2:32:2b:82:75:56:47:d2:f0:f8:10:23:ac:32:
20:8a:8c:a1:0f:6e:cd:b0:d5:32:bf:fe:12:d3:73:
db:85:b1:71:c2:80:41:13:1b:90:17:f4:ca:de:b4:
57:23:a3:10:0c:33:55:ba:5c:f4:63:59:dd:98:79:
b5:be:9c:bb:b4:f2:67:4d:b8:39:32:aa:39:52:fc:
90:58:21:79:51:bd:4c:ea:83:c6:e5:eb:10:22:42:
c1:f7:4b:e4:9b:d3:43:19:b7:12:ad:50:77:c3:5c:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B2:15:B0:A7:82:48:E5:04:4C:C3:36:63:59:55:21:B4:D2:FB:D4
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/c7IVsKeCSOUETMM2Y1lVIbTS-9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ed:9b:24:82:bd:88:23:a8:9f:fd:84:a2:fb:39:e5:33:af:
71:d9:59:43:36:7c:bd:bc:23:f1:95:da:4f:10:cc:8a:39:27:
e7:e3:8a:f3:31:09:58:36:43:43:46:cc:7c:52:4a:fe:bb:f6:
2d:25:52:c9:01:ac:f2:90:d0:8d:a1:a6:ae:d0:b6:60:7e:77:
e6:bc:b0:ec:aa:fd:e9:c7:67:69:42:12:29:df:ff:11:a5:13:
fd:ce:15:51:b2:c1:f5:4b:a8:5d:1d:bd:90:29:48:c7:4e:ca:
6f:71:53:46:1a:85:6c:ad:5e:ac:16:f9:2f:a7:5b:59:e9:5d:
c6:54:2a:bf:74:b0:67:6a:b3:5d:4b:f4:49:fa:cb:13:ff:1e:
b7:33:77:d9:21:17:af:26:7b:96:6a:5b:4b:9c:38:80:6f:62:
99:8c:66:86:ff:08:de:b2:12:0c:a7:bd:5d:dd:f8:86:bf:d9:
8d:15:f7:20:56:40:d4:d7:50:dd:95:4e:bc:fb:cb:06:6d:2b:
a4:e1:d3:93:76:b0:a5:b5:6b:37:fe:d7:8f:61:99:6c:65:05:
b8:6b:2f:b2:a2:1d:63:bc:5d:be:89:25:b2:94:da:f4:32:80:
83:c7:06:ff:1a:b1:ce:8d:65:04:96:d3:8e:ff:50:78:2a:b6:
e1:9e:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 08:06:43 2024 by rpki-client on console-fra.rpki-client.org