Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vTLK6Yel2UX3bIJ73IFLheD3zx8.roa
File: vTLK6Yel2UX3bIJ73IFLheD3zx8.roa (raw, json)
Hash identifier: 2+/Doff+PXmxpQwsiOuDxz6VDm5r2wmzSWy8PGz74n8=
Subject key identifier: BD:32:CA:E9:87:A5:D9:45:F7:6C:82:7B:DC:81:4B:85:E0:F7:CF:1F
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018DA172F59F7EF057A1C8F5C462DC75E57A
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vTLK6Yel2UX3bIJ73IFLheD3zx8.roa
Signing time: Tue 13 Feb 2024 07:51:22 +0000
ROA not before: Tue 13 Feb 2024 07:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 07:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:72:f5:9f:7e:f0:57:a1:c8:f5:c4:62:dc:75:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 13 07:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd32cae987a5d945f76c827bdc814b85e0f7cf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:41:44:d0:52:15:f6:a6:e5:a7:ab:44:78:
dc:6d:5e:58:70:06:4e:f1:36:1d:fe:96:e4:12:d3:
8b:1d:51:27:72:7f:6c:cf:0f:ab:56:7c:38:09:42:
b6:c1:13:1c:67:b2:5f:fb:08:68:d5:a8:ea:71:fe:
f6:61:05:ea:32:42:a2:f3:9f:85:b3:41:49:59:3f:
7a:94:e4:a4:01:01:b9:79:d9:f8:ac:d4:55:e7:87:
e5:01:c3:9a:bc:a3:70:3e:91:98:77:bf:29:bd:52:
59:11:c2:e3:36:e2:ac:cc:aa:87:c8:a1:69:1d:12:
1c:cd:b4:5b:14:7c:b2:44:08:0f:27:ef:37:ca:4b:
09:f9:fd:2b:4a:3f:4f:a8:fc:36:d7:f4:03:42:87:
7d:6d:a0:9e:6a:1b:e0:b8:f3:37:60:0f:45:a4:49:
cf:c5:9e:d7:6d:d1:c9:98:2d:48:7e:30:92:46:98:
43:e1:a3:23:4a:9e:d0:04:0e:a5:ee:9a:83:f9:10:
a8:14:ed:f0:11:ce:fd:a8:da:51:b1:98:d3:2d:df:
97:9d:07:ac:54:08:99:8a:fe:8b:f2:4c:93:69:3b:
18:3b:b7:17:97:90:80:17:29:a0:d9:60:f8:3c:de:
38:56:ef:26:5a:38:9e:42:7c:ba:f3:b4:c3:21:36:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:CA:E9:87:A5:D9:45:F7:6C:82:7B:DC:81:4B:85:E0:F7:CF:1F
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vTLK6Yel2UX3bIJ73IFLheD3zx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0-45.155.242.255
Signature Algorithm: sha256WithRSAEncryption
a6:ac:5c:d3:24:b0:32:57:97:76:3d:46:da:03:3c:62:e7:25:
f5:2b:71:f8:d6:6c:9e:40:57:88:9e:d2:1e:43:59:0d:f4:34:
bb:f4:b7:2e:cc:6a:b1:24:50:68:b4:96:c0:8e:e1:a7:61:da:
fc:dc:19:1c:de:04:72:5a:f4:7a:6a:1d:34:ef:e4:fc:76:7b:
b3:8a:71:0f:f1:23:b0:f2:a2:cb:06:18:ed:e7:db:da:fc:f8:
45:f3:32:ea:e3:66:a5:f2:07:33:54:e2:02:85:e2:31:5d:d4:
33:02:3b:c5:da:00:f6:7e:52:56:53:fb:d8:2a:fa:57:1d:87:
c7:e9:e3:4b:9f:e1:0a:38:af:6c:f3:1d:71:56:86:32:1d:50:
d9:2a:11:d6:a5:69:7e:4e:8c:7a:3f:14:1d:db:b9:27:0f:3b:
2b:ca:70:f7:5d:79:ee:7a:24:d9:04:fa:8b:9f:60:08:bb:d5:
06:2d:e5:6f:5c:f7:46:3c:70:26:3a:d3:dc:03:63:58:e4:9e:
db:14:5e:eb:f8:44:d6:17:2e:93:45:94:29:6f:41:7e:74:ba:
54:6e:6a:e2:48:d8:03:98:77:a1:8d:87:e6:3f:e0:a6:9f:b1:
46:9f:52:e0:ad:e1:9f:46:3b:4f:b2:24:4b:77:23:51:03:dd:
b2:3c:fa:2a
-----BEGIN CERTIFICATE-----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Generated at Mon Feb 19 09:51:20 2024 by rpki-client on console-fra.rpki-client.org