Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/60CDWhb2f_QEXCwOUjtoGWTC4bM.roa
File: 60CDWhb2f_QEXCwOUjtoGWTC4bM.roa (raw, json)
Hash identifier: gbeUrfOeERfrbL56Wl9FV0ywXW65POcjJhtnKwpDsWA=
Subject key identifier: EB:40:83:5A:16:F6:7F:F4:04:5C:2C:0E:52:3B:68:19:64:C2:E1:B3
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018731C4BAD75B511C8FF9BB81F860EA7D02
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/60CDWhb2f_QEXCwOUjtoGWTC4bM.roa
Signing time: Thu 30 Mar 2023 09:06:29 +0000
ROA not before: Thu 30 Mar 2023 09:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.137.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:c4:ba:d7:5b:51:1c:8f:f9:bb:81:f8:60:ea:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 30 09:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb40835a16f67ff4045c2c0e523b681964c2e1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:9a:09:3e:d2:42:b1:be:4d:34:a9:c8:13:
35:b0:f5:5c:e1:21:d5:55:b6:0a:6f:ea:1b:a0:48:
38:f7:ae:1e:4a:6d:fa:7b:2c:52:84:2b:6d:79:2f:
05:44:29:99:a4:9e:c4:81:65:b6:aa:dd:73:2c:2c:
c5:bd:8d:42:f0:1c:a8:06:65:e8:c3:fd:76:3d:a0:
11:70:6f:f4:e2:b5:5e:ac:bd:fa:71:ab:38:3f:70:
f0:91:7a:fd:c9:31:dd:38:f7:a0:de:db:c5:c0:56:
1e:dd:93:07:5e:ee:eb:17:d0:0b:69:47:bd:85:d9:
de:08:77:11:56:87:d2:6a:d6:c0:58:ce:41:ed:ae:
2b:43:79:2a:3c:12:85:ff:8f:9c:57:ef:bd:80:ab:
74:0c:90:12:ac:0e:1e:c5:18:c2:d7:88:2a:49:d8:
51:a2:88:1d:67:82:36:d0:a1:e4:e8:e1:bd:c7:a6:
38:fb:84:c2:7b:1a:39:2a:fb:26:69:7f:5d:37:0c:
35:21:06:87:8b:2c:13:9f:91:f8:bd:63:25:76:6d:
ff:f9:87:f9:2e:e8:8f:bc:13:ad:88:c2:fc:e0:cd:
b4:d1:d8:07:01:c1:f9:42:9b:56:55:b9:2f:48:81:
c7:5e:ec:97:2d:3e:05:24:c1:66:54:17:1b:bf:28:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:83:5A:16:F6:7F:F4:04:5C:2C:0E:52:3B:68:19:64:C2:E1:B3
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/60CDWhb2f_QEXCwOUjtoGWTC4bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.201.0/24
Signature Algorithm: sha256WithRSAEncryption
67:73:ab:2b:c6:03:5f:f2:e5:64:f9:f1:1a:05:50:d7:f8:39:
c7:17:07:fd:3b:9a:d1:65:ad:e6:ed:cf:ac:49:8e:48:73:78:
0b:53:58:1e:2f:ef:79:4c:50:83:22:a7:fb:13:e8:28:e9:63:
cd:9a:fb:d8:15:04:1b:5f:ae:58:b9:57:f5:9c:79:d8:58:d1:
0d:60:a2:4b:70:71:4d:9c:9a:58:0e:92:36:d3:d3:fc:85:bb:
64:3b:d9:42:7f:8b:71:ec:71:73:26:6e:c4:77:3b:05:82:91:
0a:66:53:cf:90:ab:f5:65:26:9c:4a:0c:e9:17:c8:08:3d:a7:
98:c5:5d:b8:4b:98:e2:02:be:66:48:ca:1f:ba:15:59:f2:b6:
12:6f:41:17:5a:d4:dd:44:1b:9f:df:fd:80:d5:5d:d1:ad:7e:
46:0b:fd:f9:23:90:e0:5c:50:fa:87:fc:f8:dc:83:cb:cc:18:
aa:a8:81:c1:bb:71:1b:3d:c7:89:4c:0b:ba:99:53:c4:3c:35:
22:60:96:aa:d8:52:33:6b:91:ad:8d:36:b7:fd:47:96:ed:06:
89:3e:4d:f5:b0:0a:80:bf:dc:df:48:a9:2f:a8:91:4a:b2:11:
ad:47:6f:d7:d1:bd:28:3c:9e:8b:29:09:43:90:3b:be:2c:9e:
d9:7f:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 03:18:20 2023 by rpki-client on console-ams.rpki-client.org