Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ptrlou7QFFH4RNSCcZ_DCeT_8mc.roa
File: ptrlou7QFFH4RNSCcZ_DCeT_8mc.roa (raw, json)
Hash identifier: oWCjM/haQWYz9w9rVfhnM6nt349sk1lwtmtUMFIFtEo=
Subject key identifier: A6:DA:E5:A2:EE:D0:14:51:F8:44:D4:82:71:9F:C3:09:E4:FF:F2:67
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018CC86F2C4224569FCEF747CCFA72D1CC65
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ptrlou7QFFH4RNSCcZ_DCeT_8mc.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 07:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2c:42:24:56:9f:ce:f7:47:cc:fa:72:d1:cc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6dae5a2eed01451f844d482719fc309e4fff267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:0c:10:9a:67:1a:f6:99:1c:bc:8d:20:4f:
74:5d:7a:ab:b8:1e:8c:4e:7b:78:56:d9:3e:a1:27:
76:3a:20:42:cc:69:ee:28:f3:6a:03:ca:84:c2:fe:
22:ad:67:8a:6a:26:43:79:4e:e2:ab:d3:0d:a9:21:
5c:25:f6:f7:62:87:6e:ba:4e:08:57:f6:7c:e0:de:
c8:14:07:25:f9:8c:ec:6b:77:19:ed:84:a3:30:20:
a3:50:a8:a1:4a:94:92:5d:e6:5a:e1:91:49:21:51:
46:6c:16:9c:f2:19:11:2f:72:a0:d8:ea:39:22:78:
63:d4:0b:40:3d:c9:91:99:3d:2b:5d:ce:b4:f9:9a:
2a:64:9c:30:d8:a3:fd:3c:bf:83:f8:f1:56:87:64:
3c:e8:6a:09:8f:10:99:ac:07:f9:3a:e3:cc:6f:0a:
ad:0e:27:4c:f6:67:c3:6f:94:96:36:2c:ff:87:f0:
98:18:41:1d:6b:75:cd:b8:e3:d7:5c:cd:29:a6:34:
16:4f:3e:53:ae:d9:a5:c0:3c:b3:5d:1f:90:c6:9c:
65:9a:6b:bc:71:89:b8:7f:f7:a3:ba:10:d2:df:b1:
b9:c8:e9:0d:de:3e:b9:47:36:d9:73:d4:28:79:c8:
70:dd:3a:e4:b3:eb:d3:2c:2a:a5:ce:ff:22:72:98:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DA:E5:A2:EE:D0:14:51:F8:44:D4:82:71:9F:C3:09:E4:FF:F2:67
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ptrlou7QFFH4RNSCcZ_DCeT_8mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
Signature Algorithm: sha256WithRSAEncryption
a1:69:d4:bb:a5:b7:13:e4:cd:05:8a:89:dd:1b:8d:7a:b3:b2:
bc:23:39:af:c1:3e:a5:59:f2:46:bc:49:2f:9e:e0:92:1e:e9:
cf:85:48:3c:6e:40:cc:01:54:8b:30:39:0f:25:64:d5:b5:df:
b7:5e:4d:33:b4:20:1d:45:08:d1:94:02:a2:c3:2e:be:5f:11:
4d:ad:47:c1:89:d6:f4:a2:dd:42:7c:aa:09:bb:48:be:b7:47:
d2:a8:18:e1:db:11:a2:73:c2:f3:8e:9d:48:56:2d:37:83:92:
e4:db:95:10:10:8d:7f:33:1d:c9:4e:9c:8f:f3:58:c3:4c:55:
4f:82:73:a8:6d:7c:ce:e3:1b:72:0e:44:eb:35:bf:21:88:cc:
00:d7:c3:f0:22:eb:8a:aa:12:eb:01:fa:1f:38:ce:1d:d8:3c:
43:29:ea:5a:a2:3f:23:16:04:e4:70:b7:bd:1a:d6:63:22:1c:
70:ec:a4:50:e3:d9:ac:2e:28:62:7a:2d:c6:4d:ea:cf:7b:1d:
85:fe:34:79:ff:3d:10:93:61:55:e6:b4:57:5f:4a:a7:54:85:
9c:fe:ca:8c:5d:bb:c2:22:d8:f0:6b:9a:33:07:51:56:e1:40:
94:a4:0d:f0:b6:aa:c5:96:40:6d:e9:5c:1d:e5:c0:82:28:53:
1f:6d:21:95
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzIbyxCJFafzvdHzPpy0cxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQwMTAyMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmRhZTVhMmVlZDAxNDUxZjg0NGQ0ODI3MTlmYzMwOWU0ZmZmMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnwMEJpnGvaZHLyNIE90XXqruB6M
Tnt4Vtk+oSd2OiBCzGnuKPNqA8qEwv4irWeKaiZDeU7iq9MNqSFcJfb3Yoduuk4I
V/Z84N7IFAcl+Yzsa3cZ7YSjMCCjUKihSpSSXeZa4ZFJIVFGbBac8hkRL3Kg2Oo5
Inhj1AtAPcmRmT0rXc60+ZoqZJww2KP9PL+D+PFWh2Q86GoJjxCZrAf5OuPMbwqt
DidM9mfDb5SWNiz/h/CYGEEda3XNuOPXXM0ppjQWTz5TrtmlwDyzXR+Qxpxlmmu8
cYm4f/ejuhDS37G5yOkN3j65RzbZc9Qoechw3Trks+vTLCqlzv8icpjOuwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKba5aLu0BRR+ETUgnGfwwnk//JnMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvcHRybG91N1FGRkg0Uk5TQ2NaX0RDZVRfOG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtm/AD
BAAtm/IwDQYJKoZIhvcNAQELBQADggEBAKFp1LultxPkzQWKid0bjXqzsrwjOa/B
PqVZ8ka8SS+e4JIe6c+FSDxuQMwBVIswOQ8lZNW137deTTO0IB1FCNGUAqLDLr5f
EU2tR8GJ1vSi3UJ8qgm7SL63R9KoGOHbEaJzwvOOnUhWLTeDkuTblRAQjX8zHclO
nI/zWMNMVU+Cc6htfM7jG3IOROs1vyGIzADXw/Ai64qqEusB+h84zh3YPEMp6lqi
PyMWBORwt70a1mMiHHDspFDj2awuKGJ6LcZN6s97HYX+NHn/PRCTYVXmtFdfSqdU
hZz+yoxdu8Ii2PBrmjMHUVbhQJSkDfC2qsWWQG3pXB3lwIIoUx9tIZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org