Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WGv68qmyW5fEW5ll1EtE8SB_Veg.roa
File: WGv68qmyW5fEW5ll1EtE8SB_Veg.roa (raw, json)
Hash identifier: UewjWYadQYOrD6xl7By3x46UkUuifdvcRf2JywDTrTc=
Subject key identifier: 58:6B:FA:F2:A9:B2:5B:97:C4:5B:99:65:D4:4B:44:F1:20:7F:55:E8
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018ACB21FE4353C1BF2C128C5C8369FE9767
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WGv68qmyW5fEW5ll1EtE8SB_Veg.roa
Signing time: Mon 25 Sep 2023 06:58:37 +0000
ROA not before: Mon 25 Sep 2023 06:58:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.134.144.0/24 maxlen: 24
45.93.16.0/24 maxlen: 24
185.243.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 06:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:21:fe:43:53:c1:bf:2c:12:8c:5c:83:69:fe:97:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 25 06:58:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=586bfaf2a9b25b97c45b9965d44b44f1207f55e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:ba:f1:6b:c0:17:1b:43:e2:a9:be:ad:ab:
b4:3c:62:26:83:61:c5:53:d3:74:10:2d:82:cd:c5:
af:ca:94:b2:f4:13:84:90:58:30:2e:8b:69:e0:72:
f8:0e:09:35:c6:c7:41:02:49:1b:29:06:ec:49:7d:
2b:ac:66:5b:db:13:f9:8e:db:8c:e6:ce:52:83:82:
99:1d:fe:ad:8a:2c:f9:fd:f8:48:90:e3:34:b2:f2:
b9:7a:61:6c:26:01:e4:49:6d:31:21:38:59:35:4b:
0f:09:56:59:6f:9e:c5:fa:34:17:d7:88:71:98:9e:
ac:67:cb:8f:f4:ca:29:d5:6f:91:14:3a:0a:95:11:
a3:ae:40:e0:21:cc:40:92:20:39:b2:d2:15:c9:7d:
ac:e1:96:20:19:9c:63:5e:00:a3:39:bb:44:6f:47:
48:9f:1b:fb:d0:59:fc:4e:79:d7:f9:16:17:12:6a:
3c:99:3d:28:60:da:53:94:b5:94:c9:ba:c8:74:53:
00:80:db:28:e0:fd:77:fc:0c:88:32:4d:90:e8:12:
d0:f3:42:e3:e9:9b:6c:e9:7a:92:d2:90:9f:57:37:
cf:89:32:67:2a:1f:dd:7d:cd:17:32:fd:4b:5e:b7:
31:87:70:c1:7c:eb:0b:a4:ad:bd:17:f6:bf:1c:77:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:FA:F2:A9:B2:5B:97:C4:5B:99:65:D4:4B:44:F1:20:7F:55:E8
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WGv68qmyW5fEW5ll1EtE8SB_Veg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.16.0/24
45.134.144.0/24
185.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ab:bb:d1:07:f9:9d:ff:b0:77:73:14:d6:ed:62:79:f8:84:
c4:9a:93:e2:86:2b:00:72:05:13:70:2d:70:7a:8d:66:ad:7d:
9b:41:72:02:2b:f8:88:17:da:ed:3a:79:98:37:a1:b8:fd:b7:
10:83:3d:b9:6e:fb:5d:cf:41:82:9a:07:3d:a8:b4:e1:80:5e:
5c:09:1f:85:d4:2a:86:92:b0:c6:57:7f:95:ff:55:b9:5e:d7:
ad:76:2e:4e:2a:32:e8:42:3c:41:5b:d1:44:59:a3:99:72:53:
66:5b:ea:7f:d5:a2:40:30:08:c5:00:80:85:24:5f:84:30:ba:
46:62:61:76:ed:c4:89:9e:5d:0f:3d:53:73:a4:fb:82:ce:ff:
8d:18:66:b2:02:4a:c9:43:6b:a0:56:f3:f4:aa:c1:3d:4e:4d:
ff:84:0f:47:f8:35:e6:2e:7e:8e:9a:50:14:f6:c0:1b:09:bd:
bb:67:5c:e4:d9:d3:39:7a:c4:15:60:fa:80:86:ee:6b:31:ff:
74:1b:0f:05:d6:ff:e0:7b:7e:c0:d4:02:ea:9f:c9:0b:ad:84:
f6:a4:0a:cd:27:0f:3b:0d:30:fb:ab:7a:99:3c:c4:13:6c:5c:
89:59:b5:d0:14:5f:3c:46:8a:58:60:3e:95:df:6e:ba:02:41:
3a:01:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org