Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vmGSHWJSypWxZ2pkz4jOMeFhuS8.roa
File: vmGSHWJSypWxZ2pkz4jOMeFhuS8.roa (raw, json)
Hash identifier: 8EalbaNvu7ZGUCGV9fx9Es/O0RsPliEeDvNOFw2hzrQ=
Subject key identifier: BE:61:92:1D:62:52:CA:95:B1:67:6A:64:CF:88:CE:31:E1:61:B9:2F
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018872300DC36F9D44E75287F93833EE6C00
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vmGSHWJSypWxZ2pkz4jOMeFhuS8.roa
Signing time: Wed 31 May 2023 14:22:11 +0000
ROA not before: Wed 31 May 2023 14:22:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/23 maxlen: 24
45.155.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 06:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:30:0d:c3:6f:9d:44:e7:52:87:f9:38:33:ee:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 31 14:22:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be61921d6252ca95b1676a64cf88ce31e161b92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:89:bb:00:09:e1:26:0f:b9:7a:20:cd:27:
a7:4e:61:84:3b:fb:f7:d5:76:ca:29:98:b1:c6:6f:
57:7c:cb:2e:0b:41:51:04:dc:d4:7c:53:00:d1:56:
2d:eb:6c:e9:81:ce:20:e1:d5:24:4e:90:6f:2d:06:
6f:71:c9:0a:4f:70:ba:4d:21:6a:e1:c9:da:6f:08:
74:43:17:e2:6e:0e:5b:5c:b6:99:0d:d2:97:6a:b3:
21:d8:08:3a:37:d5:fc:d3:42:a8:57:ea:ba:22:ed:
30:92:32:12:63:b1:64:ec:a9:14:3c:6c:7d:7e:a4:
23:32:86:74:eb:49:9c:12:4c:b6:96:66:2e:76:eb:
26:74:4e:ab:e9:7c:69:11:d3:43:87:9f:84:3b:e3:
c2:fb:8a:8a:14:e6:29:0d:76:d6:29:ea:56:a3:aa:
ac:cc:5e:c9:31:76:26:f4:bf:4b:ea:cf:5b:c6:40:
61:4d:6d:c6:a1:cb:12:3d:17:48:62:fd:f2:87:28:
06:f2:9f:10:ee:32:ca:94:13:8d:ca:77:51:ee:13:
0c:19:16:a9:62:fa:21:a0:c8:cf:5c:6f:e1:ea:66:
8c:68:7b:d1:f6:ed:83:01:9f:5f:f4:b2:64:48:74:
32:66:42:b0:d5:d6:4e:cd:0b:89:e6:c6:a0:d5:2b:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:92:1D:62:52:CA:95:B1:67:6A:64:CF:88:CE:31:E1:61:B9:2F
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vmGSHWJSypWxZ2pkz4jOMeFhuS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/22
Signature Algorithm: sha256WithRSAEncryption
33:b8:66:d0:67:8b:d2:66:db:64:97:ee:ab:2b:bd:fa:e2:c2:
80:37:7c:fd:c2:f6:e4:e7:67:9f:99:1e:57:bc:d0:4e:9b:cd:
e1:4b:17:2c:c0:82:e8:a6:44:43:1b:89:e2:6f:71:cc:f7:96:
ed:bf:b4:0e:ac:cf:b4:be:ea:0a:0b:d2:91:38:ea:63:6f:83:
94:ba:c2:30:03:b4:f5:be:73:d8:fb:b1:9c:b9:7c:68:22:d4:
bd:97:f9:fa:f4:41:07:d3:15:ab:09:10:96:16:b7:1f:27:6a:
14:0a:e0:27:3e:d5:37:af:b4:57:16:03:0b:3d:38:f4:b4:11:
f9:1d:5d:f8:18:f2:40:a7:a4:f9:15:5e:cf:f4:56:86:96:f6:
e6:26:74:2b:16:66:2e:6e:64:6a:e9:e6:73:bf:12:69:9e:7b:
fb:bb:01:e4:fb:4e:45:bf:af:87:78:40:2f:81:c5:34:fa:97:
75:13:ae:83:c3:ff:39:d3:02:b4:52:20:c3:bd:f6:98:01:ef:
64:b7:19:d9:0a:ad:40:ab:9e:38:06:bc:41:77:32:76:c2:d9:
74:0a:d6:a4:0a:58:2b:a0:fe:da:cc:05:e9:e9:e1:09:6f:b0:
03:ba:1c:1b:93:e2:4c:52:93:db:fe:a6:a6:36:d5:9a:ee:a4:
b7:8e:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org