Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/WkI_XSHquiIWFz5JZvUZ5GWQPic.roa
File: WkI_XSHquiIWFz5JZvUZ5GWQPic.roa (raw, json)
Hash identifier: WbTXxdWpL2HzEYSnl4aR0gGCwC8YYTqXyCCwvadH7X8=
Subject key identifier: 5A:42:3F:5D:21:EA:BA:22:16:17:3E:49:66:F5:19:E4:65:90:3E:27
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018792AFB6129D63331A7910C71A236DE434
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/WkI_XSHquiIWFz5JZvUZ5GWQPic.roa
Signing time: Tue 18 Apr 2023 04:46:41 +0000
ROA not before: Tue 18 Apr 2023 04:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.64.0/23 maxlen: 24
45.155.65.0/24 maxlen: 24
45.155.66.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:92:af:b6:12:9d:63:33:1a:79:10:c7:1a:23:6d:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Apr 18 04:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a423f5d21eaba2216173e4966f519e465903e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:41:12:4f:87:ca:15:21:a1:5d:bd:75:72:9c:
98:72:3e:ad:03:93:7f:46:35:6d:5c:e2:93:d4:54:
7d:b4:ec:6d:ce:4f:a0:b6:10:85:bf:cb:3f:a1:02:
5e:10:77:c0:8c:a1:d2:9a:b3:bd:7b:d1:e1:67:b5:
7e:80:a0:58:9a:ca:f6:0b:38:56:c5:a8:36:02:41:
ec:ad:68:f7:9d:aa:b6:94:16:6b:2f:bc:41:6f:f8:
b3:a4:b5:1d:b2:b3:1a:e6:3e:b8:c6:a4:8c:12:72:
bd:a0:1d:12:d1:af:8e:eb:8e:9d:e2:7d:4c:83:7e:
dd:7a:c4:da:d6:e8:a3:37:5b:51:0a:4d:b3:31:9d:
13:1b:cd:7e:d7:9e:57:36:18:05:48:8f:d8:d3:3a:
6c:39:ad:bf:0a:87:ea:96:65:2a:ae:e4:7d:b0:12:
16:d9:d0:b0:40:a1:c7:56:a2:c7:8d:59:1f:0b:45:
7d:67:da:4c:c0:76:5b:dd:b5:4c:98:d1:dd:e3:69:
f9:a9:d8:40:80:0e:f7:c6:5d:16:ab:de:22:5c:d0:
d8:3c:25:a5:60:b5:56:e9:d7:2b:35:30:b7:d3:cb:
0a:75:8e:e5:e2:9f:3a:1b:cd:f7:df:66:9f:10:48:
fa:61:0a:e2:0f:7b:54:76:37:cd:cf:1e:cb:58:16:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:42:3F:5D:21:EA:BA:22:16:17:3E:49:66:F5:19:E4:65:90:3E:27
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/WkI_XSHquiIWFz5JZvUZ5GWQPic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/22
Signature Algorithm: sha256WithRSAEncryption
59:fc:d4:30:62:7c:ff:3f:ff:13:04:97:19:6c:f0:4b:e1:ee:
37:c8:2e:be:ae:15:6b:ee:a0:56:08:6d:1d:93:fa:26:bb:01:
f5:8c:b2:81:4d:a0:7f:83:7e:f8:7a:ee:b7:a4:7a:68:28:91:
45:00:0e:4d:8e:28:49:e3:1a:d1:15:3f:bb:76:8e:e6:94:91:
93:9c:56:b0:6b:21:57:0a:0e:8e:63:84:de:99:d0:c1:80:23:
72:52:81:f4:0d:c8:b2:66:53:2a:20:18:84:a2:c5:a9:1c:60:
fb:8f:22:98:c7:4c:ac:04:59:09:2f:c0:39:bd:17:d2:9b:ae:
44:2c:30:0d:6c:5e:f8:6c:d1:ea:ed:37:24:9c:80:3a:df:12:
3b:ce:9a:da:34:be:4a:ff:c9:44:96:75:38:87:ca:22:6c:de:
ac:f2:b6:d4:3d:96:da:29:55:8a:da:7d:f5:1a:53:cc:bd:07:
78:15:c5:00:09:25:06:57:4c:3f:d4:58:f0:34:5f:51:dd:cd:
07:21:25:65:ee:d2:db:8d:04:ff:70:0a:97:38:4f:cc:13:9c:
2f:4d:68:cc:f3:b8:33:94:87:b7:73:23:ba:6a:81:a9:52:c3:
e9:7e:bd:1e:05:f6:e5:2e:46:a9:8b:5d:fb:24:b4:54:0b:27:
fe:d1:c8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org