Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/wPISFRecAKCciWEj3NZ0LDoNOPU.roa
File: wPISFRecAKCciWEj3NZ0LDoNOPU.roa (raw, json)
Hash identifier: zaNIYbs23GPibccpLc28OPGz/KdPJfN+GlZSrQVwr/0=
Subject key identifier: C0:F2:12:15:17:9C:00:A0:9C:89:61:23:DC:D6:74:2C:3A:0D:38:F5
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018CC56EDD9DDD2F7D2CF354908DB399EB71
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/wPISFRecAKCciWEj3NZ0LDoNOPU.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.151.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 21:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dd:9d:dd:2f:7d:2c:f3:54:90:8d:b3:99:eb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0f21215179c00a09c896123dcd6742c3a0d38f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:43:b6:f0:ae:34:08:a0:37:55:56:61:c4:
4d:75:b2:db:4f:e3:fe:94:03:6f:2b:e1:4c:d1:0b:
99:0b:38:86:8d:ed:d2:99:3b:94:48:cf:c0:cf:eb:
fc:c8:1e:de:7d:8f:61:bd:00:26:2f:48:2f:6a:6f:
67:2f:fa:c2:76:e9:dd:98:a3:85:1f:02:25:34:77:
0d:d5:38:3e:dd:9c:5c:9c:61:fd:3a:62:b1:bd:83:
1b:51:48:49:81:71:9f:c6:fc:15:65:39:0c:08:0e:
85:64:b3:0c:96:27:cb:af:9d:90:6e:d1:81:6b:8f:
b9:6b:3f:4e:35:1d:34:f4:34:d0:55:75:ff:d3:f1:
55:a6:95:d9:cf:50:81:25:b6:ef:21:47:27:9b:0a:
4c:6c:50:34:7f:33:a4:ce:8f:7a:34:da:31:98:60:
d3:5f:2e:a5:db:ea:1e:52:d0:5c:4c:7d:d5:7c:57:
ae:6b:05:b9:b3:8b:eb:1c:3d:c0:87:41:4d:00:be:
e6:ef:6d:9b:25:35:74:8d:25:30:10:a5:9c:f1:fa:
26:7b:4a:84:31:23:5d:52:91:46:48:7b:ec:9a:a8:
e5:3d:6f:8f:b2:bd:c3:ec:b2:95:41:09:64:97:20:
62:e9:ef:a8:7b:7b:ce:e9:7c:02:a6:ec:79:4e:d1:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:12:15:17:9C:00:A0:9C:89:61:23:DC:D6:74:2C:3A:0D:38:F5
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/wPISFRecAKCciWEj3NZ0LDoNOPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:66:c7:34:33:f1:c0:b6:b3:31:f7:5d:24:b9:53:2d:28:bd:
4d:8f:f1:2c:57:fe:dc:f7:da:5a:ca:7f:66:10:34:e1:51:85:
77:ae:37:68:a5:e6:6e:24:54:ea:6e:3c:85:f2:11:0b:64:5b:
94:a4:bc:54:2e:3a:6a:bc:11:aa:a1:40:63:00:c7:f8:e1:72:
eb:a2:00:b5:eb:e3:98:a7:a5:84:b3:3f:1a:b0:65:89:9c:07:
ff:7f:1e:0e:49:9c:a8:5e:17:7a:fa:0f:b1:60:d7:76:47:1c:
e2:7b:82:14:b2:2b:05:ca:d0:ae:eb:f9:27:44:53:13:96:db:
62:4b:05:d5:78:5f:1f:36:7c:80:4c:bd:25:9b:30:79:de:d0:
f5:d9:6b:cd:69:05:91:be:13:49:b4:14:31:84:da:15:86:0c:
9d:58:e7:54:08:66:97:03:63:84:34:be:cb:d0:7a:cf:ff:35:
91:6e:99:3c:e6:62:79:a5:fe:39:1d:f1:b3:03:bb:ca:83:58:
fa:52:99:3a:c8:24:49:de:f2:45:12:19:9b:1a:8d:b0:2b:b1:
c0:28:42:7a:0c:a5:ce:c3:89:59:51:f9:c5:21:45:9b:8a:fb:
c1:fe:18:3c:34:95:94:82:06:8d:42:b5:10:df:fc:c0:6e:d5:
53:8e:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org