Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/1wZawysm9uZHU9gafB1A9UqK4IE.roa
File: 1wZawysm9uZHU9gafB1A9UqK4IE.roa (raw, json)
Hash identifier: FVB/OHCOftOnzu1xszZG/vBhul4a/ybHuCL73uqYt98=
Subject key identifier: D7:06:5A:C3:2B:26:F6:E6:47:53:D8:1A:7C:1D:40:F5:4A:8A:E0:81
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018F4119BCD9A9AEAC576481DD86CD150A01
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/1wZawysm9uZHU9gafB1A9UqK4IE.roa
Signing time: Sat 04 May 2024 00:55:56 +0000
ROA not before: Sat 04 May 2024 00:55:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.151.140.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 03:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:41:19:bc:d9:a9:ae:ac:57:64:81:dd:86:cd:15:0a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: May 4 00:55:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7065ac32b26f6e64753d81a7c1d40f54a8ae081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:a2:b5:e4:fb:96:78:94:54:22:93:6f:ef:
3b:07:35:45:32:28:6c:d6:d8:44:f6:53:9c:c6:e2:
91:29:94:0b:7b:3c:52:30:0c:a3:62:fe:1e:76:ae:
88:43:33:2e:06:e5:8b:7c:d9:35:5e:f9:6b:2b:ea:
91:f1:66:ab:bd:a8:28:db:33:ca:f8:a2:1a:93:18:
77:ac:a4:7c:78:09:06:11:09:bf:b0:a6:96:62:c6:
5a:a9:84:06:b8:02:f2:8b:33:33:56:3d:59:f0:f7:
d5:96:bd:69:5f:4c:93:34:d5:8f:a8:b7:2a:e4:d2:
b5:c0:52:0f:cd:f6:28:c3:dd:e2:27:87:dc:44:2c:
4b:1f:a3:fd:6a:fe:8b:a2:02:81:9b:fb:53:58:ab:
68:cc:df:cb:aa:fe:dc:26:d8:a9:4c:0a:ac:59:2a:
77:7c:24:f9:cb:1a:01:2e:11:62:e0:13:ed:32:d9:
37:88:a8:60:9f:0a:55:4a:e8:aa:f4:07:c5:e6:d5:
a0:d8:dc:49:e0:bf:85:43:d3:bc:03:a1:e9:8f:32:
b3:29:0e:aa:58:94:46:04:9d:62:aa:a5:b4:28:fd:
d4:1b:77:92:8c:84:07:1d:d1:0d:bf:a2:5a:6d:10:
ec:ec:24:21:29:39:03:96:e7:d2:05:71:d9:80:f4:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:5A:C3:2B:26:F6:E6:47:53:D8:1A:7C:1D:40:F5:4A:8A:E0:81
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/1wZawysm9uZHU9gafB1A9UqK4IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/23
Signature Algorithm: sha256WithRSAEncryption
11:29:8f:dc:a7:18:63:81:87:55:1c:05:8d:87:44:f6:f6:e8:
cc:5d:13:a9:78:be:c6:d7:81:4c:f9:82:55:ed:38:fa:bd:fd:
04:79:a1:26:0f:5d:95:74:6b:92:61:d4:fd:ea:f6:23:44:e9:
05:23:bf:01:b7:7e:14:b9:b1:17:d3:5c:f4:f9:c3:21:27:0b:
b9:4c:3b:3a:03:fd:a4:d6:70:a0:2c:15:24:0c:72:65:10:b7:
c4:88:44:18:e2:ce:de:68:f9:36:80:27:b7:0b:e4:08:19:b4:
71:52:06:91:f7:66:c8:64:b7:ea:d4:c8:b3:f2:e4:c6:6a:bb:
8b:d2:3c:5d:61:d9:b5:b2:20:f1:8b:af:7c:0c:42:0f:29:95:
0b:f4:0f:8c:8a:16:26:df:a3:ea:7f:1a:b3:6d:53:df:eb:50:
7a:f8:fb:0d:3d:08:1c:8f:e4:b7:8e:3c:86:ba:45:a6:64:ff:
7f:19:17:ed:fc:14:f0:e3:ea:bc:e8:dc:a3:3f:59:df:f5:8f:
9d:0b:f4:ca:b8:c3:fa:3d:08:cd:3d:95:93:90:c1:c1:00:4c:
0d:d1:d6:6c:72:10:3c:78:03:a7:73:c4:32:d7:d5:b5:ae:9b:
a7:53:41:e2:eb:b6:6f:de:52:0a:0c:42:7e:96:e1:54:c7:03:
cd:d9:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org