Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/YI5vaIOFXjYQlaHVLiH2jYJ6Ogk.roa
File: YI5vaIOFXjYQlaHVLiH2jYJ6Ogk.roa (raw, json)
Hash identifier: 9wjNbE58FJCx1cph20FN8z6/fM9xlvp++Ydxl9TypSw=
Subject key identifier: 60:8E:6F:68:83:85:5E:36:10:95:A1:D5:2E:21:F6:8D:82:7A:3A:09
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 018ADFE8A30F65D2FE8409D5E3CFB87F7AE8
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/YI5vaIOFXjYQlaHVLiH2jYJ6Ogk.roa
Signing time: Fri 29 Sep 2023 07:47:59 +0000
ROA not before: Fri 29 Sep 2023 07:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5404
IP address blocks: 45.89.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:e8:a3:0f:65:d2:fe:84:09:d5:e3:cf:b8:7f:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Sep 29 07:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=608e6f6883855e361095a1d52e21f68d827a3a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:25:5c:75:53:06:a1:e5:66:0e:33:3c:75:
ca:bc:87:2e:14:92:e8:56:3d:85:71:f3:12:49:b4:
a9:8e:7c:7f:72:2b:3a:31:a1:9c:23:fb:3a:d1:40:
b9:8c:7c:41:3d:2a:8a:ef:f5:c3:63:f9:c1:c7:3d:
03:24:b8:0b:f9:13:62:2f:43:c5:44:bf:e7:1a:89:
c6:53:f4:4d:be:05:92:bd:e2:bc:3b:13:8d:67:f1:
6c:39:c2:54:6c:cb:b1:58:e2:fa:02:ea:db:a5:e7:
ee:2b:97:ea:e7:95:2c:52:17:07:53:b3:3c:98:25:
af:bb:10:5e:2f:72:13:18:95:72:00:9b:a7:72:53:
fc:4e:c8:65:1a:6c:ba:67:95:21:bc:5b:e2:59:ed:
05:82:95:5c:af:db:01:c9:4a:11:89:8d:4c:4c:66:
14:32:cd:3a:9a:99:ba:3e:0a:e1:bd:59:6a:5e:82:
e5:9e:99:f6:7c:bf:8a:4a:25:17:d4:fd:ad:e8:42:
fa:ec:23:14:d6:f9:43:d5:39:39:7a:48:c3:07:20:
38:7f:54:6b:2b:41:42:14:3e:ea:65:bb:a7:a2:e3:
c1:45:2b:3f:57:83:10:eb:a8:91:8b:2c:f7:a9:43:
f8:79:92:a8:fa:0c:80:39:ee:6e:f7:5d:db:f0:76:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:6F:68:83:85:5E:36:10:95:A1:D5:2E:21:F6:8D:82:7A:3A:09
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/YI5vaIOFXjYQlaHVLiH2jYJ6Ogk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e0:8b:96:d8:7c:20:0f:9f:5c:08:90:d9:6e:9d:e4:26:a8:
00:3d:89:ab:8d:da:ac:54:87:fd:29:2a:c9:be:d6:7f:8a:aa:
4a:80:b1:74:da:21:5c:ce:80:04:12:a4:0e:17:a7:4f:b3:03:
0c:6f:10:e4:55:12:3a:91:0c:2f:ba:32:19:57:c5:2b:b2:0b:
2a:c9:f0:86:94:a1:ea:9a:1e:02:98:3f:19:4d:e2:30:a0:f1:
f2:00:ac:e9:63:b0:82:a5:f4:21:5c:e9:2e:98:cc:02:bc:8f:
cf:15:40:3a:36:93:29:fc:23:84:55:93:7f:c7:99:9d:ae:f1:
c0:e3:ff:51:a6:9d:e4:8d:bd:8c:f3:fe:8f:c8:b4:f6:8e:5e:
60:44:17:99:bf:d5:f0:d6:94:25:90:f2:a3:4e:44:81:8b:0a:
1b:99:19:fc:7c:76:a9:f6:75:9c:91:ce:da:c3:e8:dd:c9:1b:
8d:85:2b:01:00:d8:aa:6f:aa:a7:86:06:99:01:af:11:b3:d0:
5a:14:af:96:85:25:a0:af:56:19:ec:52:77:c7:bf:63:b0:36:
1b:ac:80:55:5e:c2:0d:0e:8f:4d:2c:8b:55:64:34:43:bc:26:
3f:e5:5a:ac:f2:dd:2a:ef:69:4b:f1:81:8d:91:23:e0:2f:f1:
91:c9:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org