Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/eCfvm7QubFz15amrSkJAGDxL6hQ.roa
File: eCfvm7QubFz15amrSkJAGDxL6hQ.roa (raw, json)
Hash identifier: j0mOPm2hyOijUpKe5NRfWqom5YSbcHF1IM4T63P+MYM=
Subject key identifier: 78:27:EF:9B:B4:2E:6C:5C:F5:E5:A9:AB:4A:42:40:18:3C:4B:EA:14
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018DC03AE67858C025073937A708515BD017
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/eCfvm7QubFz15amrSkJAGDxL6hQ.roa
Signing time: Mon 19 Feb 2024 07:18:21 +0000
ROA not before: Mon 19 Feb 2024 07:18:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 10:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:3a:e6:78:58:c0:25:07:39:37:a7:08:51:5b:d0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 19 07:18:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7827ef9bb42e6c5cf5e5a9ab4a4240183c4bea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:e9:ff:13:fd:d6:98:83:ba:f1:15:6d:8e:
2e:9e:f6:aa:ab:d5:e8:38:e3:85:30:fe:5f:17:98:
50:5a:d0:81:14:63:97:f8:67:7c:9c:e1:c4:39:ca:
0c:10:13:b5:fe:e8:ab:b9:18:2a:80:b6:0e:99:ea:
ba:d8:22:81:a7:ab:88:6b:31:dc:fc:d9:41:17:af:
61:a0:f6:84:a0:ba:dc:39:a5:e5:04:48:5d:b9:df:
00:0d:86:60:72:83:98:90:cd:88:a1:a8:5b:32:4b:
46:93:2d:c6:f9:db:09:7e:d0:6f:b8:bf:b9:f4:5a:
d4:80:50:9f:20:6a:64:48:a3:a7:e9:53:0a:69:5f:
e1:b6:de:fc:01:47:f2:96:e7:bc:b8:ff:15:57:56:
ab:49:38:12:7f:30:28:d7:c3:60:1b:4f:56:c4:fd:
c5:fd:57:de:24:35:80:03:97:40:d1:3e:67:7b:07:
9c:f2:81:5c:6e:a6:50:4a:ac:8e:db:33:ee:b4:8b:
b5:3f:e5:bb:d0:ed:f3:a9:52:08:3c:a6:cf:01:2f:
ea:75:21:0e:52:3e:f7:6a:bb:2b:5e:c9:fd:17:99:
84:69:04:43:cb:38:91:5c:35:d6:e3:90:fe:b2:5a:
27:e3:34:2e:2a:34:b7:86:80:26:d2:c9:4d:c7:bf:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:EF:9B:B4:2E:6C:5C:F5:E5:A9:AB:4A:42:40:18:3C:4B:EA:14
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/eCfvm7QubFz15amrSkJAGDxL6hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e9:ce:df:c8:0a:7a:4d:5c:58:7d:2a:42:75:8e:89:92:8c:
40:ea:4e:74:4b:99:31:ad:79:83:eb:44:db:26:ca:c5:ca:5d:
96:cf:5b:a9:7b:7f:d5:aa:9a:2b:4a:76:03:f4:c0:bb:4f:40:
5e:33:88:b0:8f:7d:73:95:23:18:4d:ab:ac:b6:92:70:b4:c8:
29:fe:24:9f:8b:0a:ca:27:13:aa:02:00:4b:da:77:af:03:88:
b5:f3:ba:b2:1e:84:be:73:47:33:d3:37:c2:61:76:bd:5a:fa:
86:86:fd:6a:ce:5b:2f:ca:57:ba:03:16:d6:f9:21:4d:38:ff:
d6:76:a4:73:48:78:d2:16:19:bd:eb:fe:a7:e2:5e:07:94:4d:
ff:fa:de:40:9b:57:63:b8:3a:0a:d7:3d:83:ce:f6:d4:c5:2e:
eb:11:de:24:dc:99:d9:66:d8:72:7f:b2:9f:c4:cb:ea:83:a7:
7c:56:6f:a1:b4:89:5c:16:11:44:8c:f7:64:85:ac:e3:27:fe:
84:ef:ea:23:8a:9b:77:66:54:84:ce:b8:b5:54:dd:a5:e0:f3:
14:3f:53:e9:aa:f1:61:17:8d:c8:d4:57:b1:f3:de:83:bf:27:
12:46:dc:ff:11:0a:d8:7a:c1:d7:e8:5c:04:24:a5:7c:2c:83:
d1:00:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:18 2024 by rpki-client on console-fra.rpki-client.org