Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/wW6UCgbwPBikxgTdChfrDuzEij8.roa
File: wW6UCgbwPBikxgTdChfrDuzEij8.roa (raw, json)
Hash identifier: KphFEFCRvIhlYjhdszE0cKF9d1oBgpCcyvaVNSdLIb4=
Subject key identifier: C1:6E:94:0A:06:F0:3C:18:A4:C6:04:DD:0A:17:EB:0E:EC:C4:8A:3F
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018EE615B8F0C1F894F57A277C5FE94FA875
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/wW6UCgbwPBikxgTdChfrDuzEij8.roa
Signing time: Tue 16 Apr 2024 08:46:06 +0000
ROA not before: Tue 16 Apr 2024 08:46:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:15:b8:f0:c1:f8:94:f5:7a:27:7c:5f:e9:4f:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Apr 16 08:46:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c16e940a06f03c18a4c604dd0a17eb0eecc48a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:b0:42:f6:7e:69:59:03:bc:ea:f6:4d:4d:
a5:7e:d2:ef:97:45:e7:c0:69:6a:5d:5e:04:7a:54:
6d:31:ae:05:64:14:c7:a7:ad:75:0c:8f:37:b0:75:
8f:55:30:65:07:b7:78:9d:d2:c5:05:d4:46:f1:8a:
3f:53:eb:18:66:06:fe:06:da:eb:e4:2e:1a:a3:41:
5e:79:f9:ce:9d:3d:77:dc:ee:e1:be:ff:63:55:d5:
01:d7:63:23:65:d8:2d:14:ad:28:a8:bb:05:e4:3a:
58:a5:a8:b7:38:fa:15:b5:0d:01:51:01:81:a0:50:
d4:c2:27:09:e5:14:f7:25:e4:0f:4c:e9:bf:72:de:
3e:48:73:3e:14:fd:45:ad:80:74:87:9c:d5:d0:ad:
fc:03:ce:2e:9c:18:6e:70:9e:bb:d7:14:dd:65:62:
4c:5d:06:d8:79:93:d5:38:f6:00:e7:e3:e0:53:77:
69:71:e4:a9:43:3a:dc:97:a0:09:83:31:75:1d:33:
63:b3:cb:67:96:5b:b3:3f:e4:11:c1:94:48:c7:9d:
c2:a2:6c:dd:c5:da:d2:00:3b:2f:36:22:33:07:3e:
b1:c8:99:07:e9:2f:3c:0f:73:65:90:f0:28:34:c7:
21:97:7f:56:ae:f3:ec:6e:e9:c2:d6:2b:43:35:75:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6E:94:0A:06:F0:3C:18:A4:C6:04:DD:0A:17:EB:0E:EC:C4:8A:3F
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/wW6UCgbwPBikxgTdChfrDuzEij8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d8:37:ae:e5:93:ee:3a:95:98:a3:e8:d6:1f:aa:a6:52:29:
2f:20:52:1c:a1:b8:d2:20:f2:e0:ef:88:5a:4a:b5:ef:59:c0:
64:05:fb:fd:73:99:fa:cd:01:23:19:74:a1:ee:fe:44:06:6d:
12:a8:84:41:b7:a4:19:e4:15:53:c8:51:f4:76:3e:94:ad:6e:
05:4f:7d:04:6b:af:6f:ac:f1:39:ea:6d:97:6f:e9:33:bd:d2:
ac:79:bb:9a:fb:9b:cc:6b:ec:bd:3a:5a:a7:b2:3c:ef:ab:39:
90:90:c4:c9:62:38:f0:04:2e:09:e7:4e:c5:05:26:af:3e:6c:
b0:53:f9:fe:39:02:e7:2a:93:0a:f4:ff:ad:78:2c:7c:b0:92:
23:b7:59:43:d2:6c:17:ec:b1:b1:13:6f:ab:73:e1:e7:6a:b3:
b7:7e:8c:75:19:7f:ed:1c:ae:ff:ef:3c:4e:0c:5d:30:c4:23:
00:58:31:5c:ea:37:d4:35:2a:19:e7:ef:60:c5:65:d1:b2:2b:
6f:3d:eb:04:23:de:e9:79:3b:9d:9a:13:97:77:54:4d:fa:c2:
af:84:64:d4:f9:7f:ea:ea:78:e9:98:3b:12:c2:07:32:d3:08:
05:bf:98:3a:cb:6d:be:20:3d:d5:a9:18:7b:b4:12:b6:93:38:
24:b3:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org