Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/WA8qyAPk3CTvpa4pENf7cyZLpOQ.roa
File: WA8qyAPk3CTvpa4pENf7cyZLpOQ.roa (raw, json)
Hash identifier: esdWXdjPLT28BhfWyV7symaub+nvrndk7fQDhuZav1M=
Subject key identifier: 58:0F:2A:C8:03:E4:DC:24:EF:A5:AE:29:10:D7:FB:73:26:4B:A4:E4
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01857336AF0D09575F189A75116CF7CEC9B0
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/WA8qyAPk3CTvpa4pENf7cyZLpOQ.roa
Signing time: Mon 02 Jan 2023 16:00:41 +0000
ROA not before: Mon 02 Jan 2023 16:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.140.246.0/24 maxlen: 24
45.140.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:36:af:0d:09:57:5f:18:9a:75:11:6c:f7:ce:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 16:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=580f2ac803e4dc24efa5ae2910d7fb73264ba4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:dc:b9:91:aa:9f:c1:dd:45:39:3b:6b:dc:
54:c8:f0:c7:21:7e:0d:30:69:58:b2:ff:b2:fa:4a:
fb:2b:8c:e6:ce:5b:c1:57:0c:75:7c:1f:6c:b8:29:
a9:76:e5:a1:c9:09:91:fe:f6:87:b0:bd:44:e9:85:
02:b1:ff:13:6d:5b:bc:c4:ca:0f:49:de:f1:1f:4a:
2d:a2:cf:c2:54:07:16:07:9d:97:1a:60:77:35:8c:
dc:a3:3a:35:83:22:9d:68:a0:9b:9b:4e:3f:a9:5a:
dd:41:19:a2:06:e0:20:f7:3d:69:a5:a7:07:fd:c4:
b2:cb:31:e2:77:7f:d2:81:d7:bd:5a:06:00:aa:cf:
e8:75:9e:93:48:c8:ae:9b:67:86:6c:b1:e0:0b:18:
40:a9:cd:1d:4a:de:35:9a:51:45:22:09:8b:d2:94:
8d:28:5b:8c:72:24:c8:ce:15:c5:5d:3f:b8:eb:98:
36:36:d2:95:ab:e9:d7:de:e1:bc:77:71:17:d1:06:
9c:ce:12:83:2f:ec:08:87:20:d9:77:d3:a0:c5:6d:
a4:29:91:cc:bf:51:9b:3b:02:b7:a1:26:e6:8b:67:
f8:ce:1b:29:44:4f:68:0e:b4:81:70:08:7c:0d:ad:
df:0d:88:94:02:e6:e2:81:6d:38:0d:c5:08:ef:ab:
6c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:2A:C8:03:E4:DC:24:EF:A5:AE:29:10:D7:FB:73:26:4B:A4:E4
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/WA8qyAPk3CTvpa4pENf7cyZLpOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/23
Signature Algorithm: sha256WithRSAEncryption
66:b9:0c:bd:7a:30:b7:28:3b:0c:85:83:47:8a:a2:37:4a:c3:
db:e6:93:39:bc:36:cc:77:05:8d:b6:3f:24:f0:07:b1:0d:90:
38:91:90:55:4c:92:3e:ab:53:07:0a:40:4b:45:0d:40:dd:8e:
0f:e1:6a:94:1f:88:dd:09:62:c4:c9:7a:d5:5c:54:16:ba:0c:
d2:bf:60:b5:30:19:94:89:c6:61:0d:00:49:5a:78:e3:5c:4c:
ea:9e:b4:7a:f5:41:94:93:f3:5c:7e:25:c6:f9:4c:ef:cf:30:
77:c7:84:9b:3b:49:72:be:27:fe:1e:99:63:b5:35:71:26:4e:
93:47:8e:d9:2e:48:77:20:ac:86:62:30:a5:74:cc:e9:c4:6b:
4d:56:1d:e9:a1:70:63:1b:2f:16:56:52:1a:aa:6f:e8:66:70:
84:25:83:96:50:68:6e:27:11:5d:d1:9a:ab:be:c5:02:59:19:
2c:6b:29:c8:3b:3e:49:ba:2d:3d:10:53:70:0e:50:b9:fc:a9:
14:e3:9d:66:35:23:bf:58:6c:87:07:c5:86:4a:fe:0d:b7:c6:
32:64:83:c3:dd:f8:82:86:9e:d4:ae:83:a6:83:14:94:0b:02:
17:8b:0f:bb:c9:36:59:e4:c9:10:8b:43:15:09:f4:62:e2:2c:
11:ef:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org