Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/kaR_SFrFwzWjMOzxxL_SKXRd6Wg.roa
File: kaR_SFrFwzWjMOzxxL_SKXRd6Wg.roa (raw, json)
Hash identifier: BonFg4TgT1jPdIg958GrMq0v3pQldrLTNYCFG4k+kHY=
Subject key identifier: 91:A4:7F:48:5A:C5:C3:35:A3:30:EC:F1:C4:BF:D2:29:74:5D:E9:68
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01951098C69E3C665125562F2256652627B8
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/kaR_SFrFwzWjMOzxxL_SKXRd6Wg.roa
Signing time: Sun 16 Feb 2025 21:10:02 +0000
ROA not before: Sun 16 Feb 2025 21:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
213.220.59.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 11:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:98:c6:9e:3c:66:51:25:56:2f:22:56:65:26:27:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 16 21:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91a47f485ac5c335a330ecf1c4bfd229745de968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:b5:0b:23:f3:79:59:a2:d9:d3:d8:34:9c:
db:76:d1:b3:8a:34:9b:e1:53:72:b1:2a:98:13:25:
af:01:91:53:6a:9d:15:4f:aa:78:7e:12:5f:d5:ad:
7a:d5:a4:a1:16:62:3b:21:7a:68:f6:c1:2c:06:17:
1b:f2:ca:e7:f6:26:c0:7e:1e:4c:98:b6:f0:00:84:
4a:99:fa:a5:84:b1:68:ff:15:a1:85:ef:a5:dc:80:
70:6a:5a:c2:9b:83:73:22:d9:89:e4:78:f6:96:6c:
7d:23:58:1d:de:fd:81:0f:1d:a8:a7:fd:95:15:a5:
59:3d:ec:79:c8:c1:dc:17:98:1f:dc:ed:aa:e8:99:
e5:bb:d9:dd:f3:22:e5:b7:f5:b8:9d:33:34:c2:e8:
99:5d:0a:9e:03:b6:f2:72:73:06:61:bc:99:93:6a:
ce:22:03:2c:5f:31:54:6c:c8:a9:8a:94:4b:29:f6:
e4:e4:38:7b:6e:bc:50:d4:5b:d3:31:37:93:2a:ad:
41:f7:7a:f6:a2:43:00:74:ad:3c:cf:82:c5:fe:f0:
97:6b:e6:8e:63:3c:fe:d6:3b:48:b7:b8:2d:ad:b4:
41:9d:ad:8b:14:66:c1:08:1a:01:c8:7c:fe:56:11:
6e:8f:dc:de:85:1f:8e:03:62:49:57:69:82:d6:19:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:7F:48:5A:C5:C3:35:A3:30:EC:F1:C4:BF:D2:29:74:5D:E9:68
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/kaR_SFrFwzWjMOzxxL_SKXRd6Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.205.0-194.143.207.255
194.143.209.0/24
194.143.217.0/24
194.143.221.0/24
195.114.192.0/24
195.114.195.0/24
195.114.197.0-195.114.198.255
213.220.3.0/24
213.220.19.0/24
213.220.58.0-213.220.60.255
Signature Algorithm: sha256WithRSAEncryption
1e:11:3b:fb:30:f2:25:79:5a:ad:a9:1e:ea:c0:29:e0:34:f5:
63:2a:4f:7f:4b:39:c1:b2:f0:57:30:1e:bc:e5:2a:b7:05:a4:
b4:95:0b:ca:0a:bb:53:c6:18:0a:0b:9d:6f:de:85:5d:51:9b:
62:0b:04:97:a6:bf:73:8a:22:11:81:8c:5f:6f:4b:dd:cc:31:
7b:e7:5f:75:e9:b4:ed:b7:eb:12:db:4c:7a:a7:7f:3e:9d:c6:
df:76:80:b7:17:82:fc:95:f0:02:ba:0a:61:61:87:12:41:0e:
96:aa:3e:b6:f7:64:75:43:8b:91:00:09:8a:8b:ab:9b:9a:8a:
95:51:5b:45:e3:6a:38:54:c1:3f:0e:56:b2:6f:82:8f:03:d5:
5c:d1:35:b4:aa:2a:5c:5d:f0:18:0b:9b:fe:d6:ac:ea:b7:d1:
5c:36:c9:76:f5:d4:0d:56:14:60:ac:de:82:3b:fe:b6:15:eb:
14:e7:3a:03:f6:3e:35:49:c5:a4:69:e5:29:20:e6:d1:19:b2:
57:86:a2:31:63:20:0e:61:d6:ba:4a:33:b1:03:f5:75:0a:bf:
7e:b1:b1:c1:c5:f5:fe:07:b4:ee:62:88:bb:a0:d1:62:9a:02:
2f:28:eb:bd:c7:49:8d:29:9b:47:1a:8e:f0:d3:34:b5:43:bd:
e2:a6:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:01:47 2025 by rpki-client