Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/WyAU3Bu0AlBSl9XoAFUCoavISYo.roa
File: WyAU3Bu0AlBSl9XoAFUCoavISYo.roa (raw, json)
Hash identifier: LmBtA3DSi7SQ9Uem7+6axRLv6yrLuVW+b7r/e4dJpGE=
Subject key identifier: 5B:20:14:DC:1B:B4:02:50:52:97:D5:E8:00:55:02:A1:AB:C8:49:8A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018A3C23467648A29D5FFB0E34B82DC18EE1
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/WyAU3Bu0AlBSl9XoAFUCoavISYo.roa
Signing time: Mon 28 Aug 2023 12:34:19 +0000
ROA not before: Mon 28 Aug 2023 12:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.144.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:23:46:76:48:a2:9d:5f:fb:0e:34:b8:2d:c1:8e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 28 12:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2014dc1bb402505297d5e8005502a1abc8498a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:4d:cf:e5:f8:d7:84:55:89:0e:17:7a:0e:
4a:d6:14:85:53:f5:2c:fe:15:9c:4d:f0:f5:2f:f7:
76:da:be:73:47:db:35:ea:c5:ce:e2:0d:4a:ce:c1:
b3:48:bf:55:66:5e:a7:3e:d3:5c:9f:92:17:4f:6a:
b7:0d:39:d8:26:77:24:7a:8e:8a:0c:b6:63:18:3c:
b2:2e:3a:b9:6b:3f:15:21:0f:5d:0a:b6:66:5e:13:
84:94:09:18:55:ba:d5:9a:96:5c:bb:c5:62:03:9a:
d2:1e:2e:94:5d:7c:59:a1:5d:73:43:b1:3d:e3:65:
6c:97:cd:39:90:7b:84:a7:42:96:d6:58:a3:74:64:
4e:ab:2c:3a:53:31:38:f6:ca:bb:d9:46:2e:9b:b7:
e0:64:50:79:cb:e0:bd:26:57:ff:2a:66:b7:96:d6:
9b:34:b7:a0:95:8b:55:45:cc:5c:29:38:f0:86:a7:
d2:38:b0:61:c5:a4:75:d7:e8:6d:42:7d:88:0a:83:
2e:be:33:37:a2:ee:4e:38:67:d0:ed:2b:3b:e8:31:
7f:bf:bc:32:33:db:35:64:da:01:8b:68:77:2d:ae:
5d:fd:c5:33:68:37:7e:8b:2c:8c:6c:a7:f6:97:e0:
d2:bb:6e:72:a1:e8:b9:c3:2a:fc:ba:7f:7f:86:5e:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:14:DC:1B:B4:02:50:52:97:D5:E8:00:55:02:A1:AB:C8:49:8A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/WyAU3Bu0AlBSl9XoAFUCoavISYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.232.0/22
Signature Algorithm: sha256WithRSAEncryption
49:54:4e:08:41:fc:b8:d8:ce:50:65:5c:0e:2d:11:88:98:d6:
24:04:62:2c:a0:a4:bb:03:50:34:70:95:7c:fa:43:5c:65:16:
2e:21:48:2e:9a:86:92:e6:4a:f5:f9:b3:a3:0e:75:7f:4c:0c:
97:6f:f5:3b:ef:ca:5c:2b:08:8a:7f:84:3a:78:f3:f1:64:c8:
e5:47:3d:85:c5:f7:49:f1:d0:a2:95:bd:99:65:73:bb:e1:8d:
cd:af:93:62:80:03:b8:54:ae:d8:e6:e3:4b:ce:1b:2a:79:e1:
55:58:2d:dc:fe:b4:c8:b1:2e:f1:c0:60:6c:8e:49:7a:e6:9d:
ed:35:58:3a:ee:4a:34:d8:ea:a3:40:91:a6:df:51:ef:b5:bb:
45:0f:2e:0e:01:c7:05:e3:b3:2d:64:1d:b3:9f:65:52:74:3e:
43:86:6f:64:12:32:d2:eb:7c:b8:42:a1:05:20:44:20:21:56:
96:a9:7b:5f:69:b0:d9:5b:85:95:7d:b2:c1:66:93:1d:36:fc:
93:ed:8b:f7:6f:cb:ff:4a:21:aa:66:de:11:ab:54:b3:22:f9:
8f:ca:3a:90:3a:0f:60:fe:be:1a:1b:37:52:2a:07:b3:db:db:
d4:68:a2:98:fd:c2:01:f2:22:b7:ff:46:75:37:2d:a3:48:ea:
aa:d6:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 13:03:10 2023 by rpki-client on console-ams.rpki-client.org