Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/PshJWYpuW93xdqqVrpFY-Hi3v94.roa
File: PshJWYpuW93xdqqVrpFY-Hi3v94.roa (raw, json)
Hash identifier: xGzSKl3an0Wp5Kk/NCZh5KEcXulJD6+ImFsKFO3LUNU=
Subject key identifier: 3E:C8:49:59:8A:6E:5B:DD:F1:76:AA:95:AE:91:58:F8:78:B7:BF:DE
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018FE8075D12F111C7FFDCC990A8BB086BF1
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/PshJWYpuW93xdqqVrpFY-Hi3v94.roa
Signing time: Wed 05 Jun 2024 10:52:27 +0000
ROA not before: Wed 05 Jun 2024 10:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.145.17.0/24 maxlen: 24
212.87.200.0/23 maxlen: 24
212.87.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 11:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:07:5d:12:f1:11:c7:ff:dc:c9:90:a8:bb:08:6b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jun 5 10:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec849598a6e5bddf176aa95ae9158f878b7bfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:a9:29:7a:98:d2:86:ee:14:bd:6f:81:96:
0a:46:9f:ad:75:48:87:6a:96:4d:31:d2:ec:6b:55:
ac:a5:25:7f:ba:16:fd:95:d1:af:a6:a6:f4:ab:e9:
f3:31:a6:da:33:45:ac:d4:1b:2c:72:7b:d0:25:67:
c9:23:35:34:84:cf:76:9a:7d:ce:01:cb:ba:2c:60:
cd:58:cc:dd:a1:45:a2:84:8f:13:d6:8c:70:b9:a2:
04:36:3e:04:b1:06:56:31:20:1b:b6:3d:48:6b:f2:
2e:43:17:a8:44:06:dc:16:ad:a3:f3:48:9f:03:1b:
34:d1:c2:10:ff:54:57:b4:1d:6c:9f:bd:c7:af:16:
28:44:72:8a:c1:b0:d7:7b:c5:07:2e:f5:ab:c2:b4:
aa:67:3a:c3:d0:57:1f:01:06:44:a4:18:d7:fb:53:
51:a4:9b:a0:1a:42:96:4e:c6:97:a5:19:84:f3:ed:
28:30:b1:78:d6:48:28:39:d7:e1:9d:d1:64:a7:21:
3f:30:a4:6e:bf:a7:c8:74:f5:7a:2d:56:6b:38:ba:
ba:19:42:b4:cd:06:cc:00:ec:7b:2f:fa:1f:cd:14:
6c:7e:11:37:7a:6c:88:ef:5c:cf:18:01:83:cf:99:
23:4f:44:0c:35:c2:ba:09:c1:34:9f:58:6d:54:f7:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:49:59:8A:6E:5B:DD:F1:76:AA:95:AE:91:58:F8:78:B7:BF:DE
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/PshJWYpuW93xdqqVrpFY-Hi3v94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.17.0/24
212.87.200.0/22
Signature Algorithm: sha256WithRSAEncryption
52:14:4b:7d:33:7c:d1:b6:41:01:80:00:a6:50:7a:49:7e:34:
fd:4b:d1:1c:ef:95:89:29:be:04:6b:68:ce:25:5f:35:47:91:
d9:b7:ac:44:c8:c9:69:7d:46:b7:77:f1:29:8d:f5:99:a3:2e:
d9:55:6e:49:dc:4c:b2:d2:19:3a:ce:d9:0a:27:83:7c:60:45:
a4:66:33:06:ed:62:58:3b:d8:37:a4:76:6f:98:46:ad:29:fa:
0f:e1:1b:cd:bf:e2:b4:72:0b:75:f4:39:e8:fd:30:c6:4e:f0:
be:4b:f1:97:85:30:67:9e:1a:09:9f:fa:ec:4f:a5:b7:c2:34:
59:6c:47:ea:4a:7e:8c:81:57:f6:21:9a:86:c9:ef:90:5b:f4:
cb:54:eb:92:05:66:ce:de:86:90:14:d7:8c:a4:69:d3:cd:c5:
5b:fb:f8:f7:ce:09:ba:1c:2e:d1:4f:23:54:5c:45:64:c4:a7:
ab:02:ea:23:f9:e0:0b:46:3b:59:51:01:94:4c:c3:27:64:a1:
f4:9c:d3:5f:0c:6e:d3:ee:1a:d7:a8:57:0a:14:77:5f:25:ac:
f3:60:b5:3e:3f:22:b0:49:25:9e:32:00:56:3d:c3:dd:10:97:
67:13:b8:4d:4e:e9:cf:7e:62:ce:07:e2:76:8d:98:7c:59:09:
05:35:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:46:51 2025 by rpki-client