Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/WIYCYXsfUIw8uVo9I0m8x6Xw0uo.roa
File: WIYCYXsfUIw8uVo9I0m8x6Xw0uo.roa (raw, json)
Hash identifier: DSbkJ055vG00UU2LwtBIe1wj1fONG3euEIpTQ0UrdNs=
Subject key identifier: 58:86:02:61:7B:1F:50:8C:3C:B9:5A:3D:23:49:BC:C7:A5:F0:D2:EA
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018998ED79DA59E86FFB4101FC028F3598B8
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/WIYCYXsfUIw8uVo9I0m8x6Xw0uo.roa
Signing time: Thu 27 Jul 2023 19:57:27 +0000
ROA not before: Thu 27 Jul 2023 19:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59651
IP address blocks: 45.143.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 10:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:ed:79:da:59:e8:6f:fb:41:01:fc:02:8f:35:98:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jul 27 19:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=588602617b1f508c3cb95a3d2349bcc7a5f0d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:22:e1:07:56:0e:eb:ae:7e:16:d4:fd:0d:
fb:12:61:1e:ca:5d:a9:bd:f9:4b:bc:79:8a:c8:44:
0d:3c:63:92:6c:0f:c6:4f:f7:b9:0f:fe:a4:94:72:
bd:37:23:5c:1a:bf:47:6a:c9:60:62:60:66:4e:5d:
3a:8a:6f:11:fa:cf:61:70:ea:3b:7a:da:27:32:85:
9f:03:29:15:fe:43:d0:99:00:04:5f:80:00:b2:7f:
96:b6:fb:b7:0d:33:5c:9f:09:1d:31:3d:46:30:ba:
38:82:59:d9:d7:b1:61:de:00:b5:d1:78:ba:e0:6c:
70:a3:cf:13:85:b5:b4:0a:93:fd:df:15:73:20:d9:
74:dd:21:ad:07:3f:35:c0:30:17:60:b4:d7:d2:1e:
e0:c9:b1:44:ff:6f:12:d8:e1:5d:d3:33:87:2d:4f:
f4:7e:29:8a:80:b5:4e:df:11:50:4a:32:78:3c:fb:
9f:08:74:56:b1:78:14:dd:dc:70:63:83:e2:f1:a3:
5e:27:cf:a4:2a:23:ea:85:de:a4:78:25:14:6c:50:
a7:48:7d:55:99:52:b8:d6:c5:61:57:ae:7e:31:96:
13:ce:d0:74:ec:6e:f7:35:25:a0:0f:d2:0c:60:82:
c3:12:37:2f:d3:12:90:2d:e2:49:63:79:2e:23:9d:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:02:61:7B:1F:50:8C:3C:B9:5A:3D:23:49:BC:C7:A5:F0:D2:EA
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/WIYCYXsfUIw8uVo9I0m8x6Xw0uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:62:f0:f7:87:d6:ca:21:e6:40:05:0b:55:15:8e:f9:bf:90:
f8:9c:72:35:1f:79:ce:7a:5e:e0:64:10:40:71:86:24:46:15:
45:16:5c:79:f9:b9:4f:e3:ab:31:f0:db:6d:c8:54:f0:c6:dd:
e1:cb:c3:f5:cc:a4:5a:a7:8c:c1:16:94:05:d4:db:b0:ac:b2:
4a:41:3d:f7:84:34:d0:68:7c:eb:a9:95:61:e2:aa:0c:1b:73:
1b:46:19:59:7e:06:f1:76:1b:60:ae:40:f7:5c:2a:22:8b:39:
d3:63:39:61:c2:83:50:39:bc:85:e8:05:63:f7:d2:57:40:53:
0e:6c:30:ae:85:b9:28:0b:31:90:a9:89:4b:5b:56:2c:81:3b:
4e:7c:c3:95:e8:fb:f0:ff:ca:3a:2a:61:4d:5f:20:47:bd:40:
e6:2d:89:15:69:fe:11:5b:cf:f4:c9:ab:4f:a0:b3:f5:d9:89:
bd:9f:a6:db:da:35:0b:93:9e:c9:77:4e:f7:d5:0d:82:5f:ea:
0b:fb:69:6d:99:4b:f9:c9:26:09:91:f6:83:02:fb:7a:e1:d9:
4d:f9:16:5c:c4:a4:24:ed:2a:92:6c:92:8d:eb:01:b9:80:56:
80:1c:ec:9a:fd:fd:e7:93:fd:e7:cc:ae:42:d2:ea:4b:a0:07:
f3:fc:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org