Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/xvf2ydlYjmrvgENm7j2zSy-B0lo.roa
File: xvf2ydlYjmrvgENm7j2zSy-B0lo.roa (raw, json)
Hash identifier: E85Rozi1wk7XcY52WYssQqxwYbvU9f/Mpu9hvSkUpA0=
Subject key identifier: C6:F7:F6:C9:D9:58:8E:6A:EF:80:43:66:EE:3D:B3:4B:2F:81:D2:5A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0194654DE6D5E69BB78EACB56862D8D84434
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/xvf2ydlYjmrvgENm7j2zSy-B0lo.roa
Signing time: Tue 14 Jan 2025 14:53:11 +0000
ROA not before: Tue 14 Jan 2025 14:53:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 07:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:4d:e6:d5:e6:9b:b7:8e:ac:b5:68:62:d8:d8:44:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 14 14:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f7f6c9d9588e6aef804366ee3db34b2f81d25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:1c:e6:ad:35:7e:ec:fc:62:5d:23:24:4e:
80:26:6a:62:bd:d5:cd:1d:31:b4:51:92:d7:08:e2:
59:d3:c5:34:7a:ad:87:fe:2a:99:e8:da:99:dc:9f:
7c:8a:ba:46:28:40:a8:b8:48:c1:9b:b3:aa:99:4c:
a7:fe:e7:ba:cc:6e:9a:a6:bf:d5:23:c7:09:61:83:
da:e1:f7:33:05:43:ae:13:0a:c8:4f:f6:b1:f6:dc:
6a:68:c2:0e:69:88:15:4e:a2:be:3c:4f:e3:32:23:
82:ea:9e:8a:3f:57:7a:15:82:f8:1e:ed:61:b3:5c:
6d:3f:cb:c1:4d:62:87:9e:d5:09:96:d2:68:cb:ac:
01:98:cd:19:92:2f:14:59:ea:5a:35:a0:5b:50:1b:
31:1e:0a:1a:3a:68:20:e8:00:69:6b:40:32:e3:e8:
55:56:cc:e7:68:96:bc:2b:40:f2:e1:54:11:84:f4:
e4:93:9d:e6:c4:cc:7e:d4:98:49:c2:2e:0d:75:0c:
e8:d9:41:e2:32:28:7a:a5:bd:00:0c:a1:10:f7:4d:
3e:60:db:c8:5b:40:89:dc:da:a9:0e:5f:7a:3b:ec:
1f:58:eb:fd:e3:b8:12:d6:e8:74:b7:6f:37:fe:29:
01:e9:79:17:c6:cf:38:25:0f:30:16:51:b2:fb:92:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:F6:C9:D9:58:8E:6A:EF:80:43:66:EE:3D:B3:4B:2F:81:D2:5A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/xvf2ydlYjmrvgENm7j2zSy-B0lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.205.0/24
194.143.221.0/24
195.114.198.0/24
213.220.3.0/24
213.220.19.0/24
213.220.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ab:e7:d0:00:f7:21:3c:41:cf:03:78:3e:2f:56:b5:af:fb:
25:05:42:9c:8e:4b:fa:83:db:2c:7f:12:35:a1:11:99:14:41:
a8:55:fc:2f:ca:fc:42:d6:ef:5d:d5:1f:dd:22:30:ad:ce:92:
a3:e7:8e:68:e4:47:db:97:40:a3:20:20:9a:89:13:58:d0:f3:
80:1a:75:ea:08:c2:9a:f0:91:c4:c4:09:33:e0:0b:b5:3d:a3:
38:c1:e3:7d:1b:16:c5:bc:3e:7a:3a:55:dc:72:46:89:7d:3b:
44:ad:06:97:2f:0d:32:6a:cd:a7:fc:db:f8:91:8c:d1:ae:ed:
f9:59:7b:41:b7:d9:e5:46:b7:81:62:a0:39:25:55:e4:cb:77:
5a:c1:57:db:eb:eb:f3:2c:50:a1:f3:bb:16:49:bf:bb:14:f1:
7f:1c:2b:46:1a:c5:26:97:a7:4c:4a:dd:5e:9d:ba:42:31:06:
d1:6f:09:3d:2c:0f:84:c0:75:17:5a:51:37:c1:a5:61:91:60:
4a:8a:fa:64:32:b6:9d:c9:1f:1d:6d:39:cc:71:98:1b:cc:c1:
55:26:a0:75:28:e2:fe:15:95:29:34:e9:d9:8e:5e:97:a2:15:
fa:aa:15:6a:d4:48:b8:6e:b3:df:78:48:dc:c6:26:98:2b:dd:
4c:aa:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:48 2025 by rpki-client