Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/z8S-w0b3z6pTKJkDh2pZd1TqJRQ.roa
File: z8S-w0b3z6pTKJkDh2pZd1TqJRQ.roa (raw, json)
Hash identifier: kLYxXYL51zSCP2w3zOGyrF6lsfwNyC28L8IWlumM46s=
Subject key identifier: CF:C4:BE:C3:46:F7:CF:AA:53:28:99:03:87:6A:59:77:54:EA:25:14
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018DC5FF50300513A12D15A6CAECEA899A48
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/z8S-w0b3z6pTKJkDh2pZd1TqJRQ.roa
Signing time: Tue 20 Feb 2024 10:11:00 +0000
ROA not before: Tue 20 Feb 2024 10:11:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 10:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:ff:50:30:05:13:a1:2d:15:a6:ca:ec:ea:89:9a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 20 10:11:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfc4bec346f7cfaa53289903876a597754ea2514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:d1:46:39:e3:49:75:86:1c:3b:af:a5:a0:
e6:65:02:b1:50:b4:a2:90:f7:ad:2e:e2:c0:3c:0b:
21:14:5e:42:47:26:84:42:08:22:5e:3b:8a:92:ba:
7d:83:24:e2:8b:11:74:46:23:6e:f5:1e:35:91:85:
ee:5d:de:11:d2:f4:16:63:da:d0:28:10:77:17:24:
29:1c:90:91:7e:67:49:8e:12:ca:e8:fd:a5:0a:6c:
9c:7b:61:ed:89:90:c2:45:36:9b:fc:bc:44:ee:52:
4b:be:a9:db:78:87:e2:29:a2:26:d7:c0:e1:1a:b7:
13:7b:b6:77:fa:57:44:e4:e8:87:3c:2b:d6:d6:ef:
f3:ab:4a:f2:54:8a:c7:70:45:c3:88:5b:8c:3a:c1:
c9:01:b0:43:ab:12:8e:18:16:21:88:06:0d:c1:62:
e6:45:9b:69:79:4e:69:cf:bd:b4:e7:52:1c:ab:bd:
62:d3:bf:9d:a5:61:1c:cd:c3:71:c0:fe:b4:4b:15:
bf:13:22:31:01:47:4c:90:99:43:8b:5e:59:a2:fe:
b5:8a:5d:6f:bf:73:d9:04:3a:39:66:d2:ab:1b:dc:
bb:66:f6:70:06:4e:98:dc:3d:a1:d9:2c:de:92:c8:
e6:f4:75:59:47:c6:c2:b3:fc:b6:1c:00:48:b0:df:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:BE:C3:46:F7:CF:AA:53:28:99:03:87:6A:59:77:54:EA:25:14
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/z8S-w0b3z6pTKJkDh2pZd1TqJRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.214.0/24
Signature Algorithm: sha256WithRSAEncryption
16:74:4b:48:1e:23:dd:1b:3f:65:a0:85:8a:88:d3:1e:91:e6:
b0:67:09:b1:0b:a0:c8:e6:f8:cd:75:88:52:ab:ae:00:14:ea:
10:53:ef:d9:a8:ea:92:46:cb:86:95:63:f5:0e:67:f7:1e:72:
1c:8e:df:b2:71:62:0f:d9:e9:9c:db:c6:b1:9e:dc:fa:9c:9a:
f0:3e:ef:c8:b7:7c:a6:00:c2:ea:7b:f6:bf:d6:aa:ba:04:49:
09:55:cd:75:7e:74:eb:2c:4d:d1:13:52:54:0f:41:5a:0f:94:
de:99:ba:22:de:4e:6b:81:a3:c7:07:55:12:17:b1:e1:28:96:
1b:eb:c3:fa:5d:7b:6e:93:4a:50:c6:59:b2:91:e5:0a:1d:39:
f3:b9:5c:c5:3a:2f:c3:2a:95:f9:71:3b:b7:b3:19:46:84:8e:
cd:1a:93:fe:f9:9b:c0:df:2e:7b:f4:a1:7d:5b:00:d8:a5:60:
c4:cd:32:bf:0b:d2:47:05:f2:6c:3d:67:07:21:44:32:e5:ba:
19:1f:33:3f:cb:76:3e:b9:91:42:68:1a:5e:df:60:1f:68:c7:
42:e3:67:15:cd:db:00:10:5e:8f:92:72:61:2d:16:c2:a9:ea:
d0:98:a3:98:fe:a0:82:b8:d3:66:6d:db:9b:39:92:e7:2c:e4:
4f:28:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:18 2024 by rpki-client on console-fra.rpki-client.org