Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/wAVU4h-xd2QdmqHSdKOLTEZDwJc.roa
File: wAVU4h-xd2QdmqHSdKOLTEZDwJc.roa (raw, json)
Hash identifier: xWrgu/ihp26I2/Ipgarrh8VvGmn8WljmjOoi8LDjrJg=
Subject key identifier: C0:05:54:E2:1F:B1:77:64:1D:9A:A1:D2:74:A3:8B:4C:46:43:C0:97
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 018AA83F384E57104CC1DF55C931093B10C6
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/wAVU4h-xd2QdmqHSdKOLTEZDwJc.roa
Signing time: Mon 18 Sep 2023 12:23:50 +0000
ROA not before: Mon 18 Sep 2023 12:23:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 45.143.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:3f:38:4e:57:10:4c:c1:df:55:c9:31:09:3b:10:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 18 12:23:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c00554e21fb177641d9aa1d274a38b4c4643c097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:e0:2f:4a:5b:52:d6:b1:3c:06:b5:dc:77:
2b:2c:50:53:c7:3a:2a:99:3f:9f:1c:a4:1f:62:7c:
03:48:0f:7b:91:1f:3d:41:fd:de:58:da:8d:1a:3a:
5f:62:9d:1e:f8:f5:88:0e:11:43:18:34:5f:e9:a1:
43:52:e8:7d:8b:b1:17:a4:ec:9a:3a:d6:b1:ba:45:
0b:0a:e5:44:c9:a1:70:aa:77:d9:ed:52:c7:94:4a:
4f:ba:0f:68:af:80:c4:61:40:9d:a4:a8:3d:71:04:
c9:66:61:e1:4d:2a:f6:24:60:85:a9:e8:58:31:91:
8b:ef:99:18:22:72:75:50:55:11:e8:51:ec:57:de:
60:d1:81:c8:48:fe:4f:50:7a:d3:cd:e6:85:f4:d7:
77:b7:8c:51:3b:0a:e1:0a:d1:b6:3f:2c:1f:01:73:
7e:a9:9f:75:44:79:df:2d:0d:fa:8c:ed:56:bd:e4:
5a:df:7b:b9:7c:62:a1:ee:1b:96:7d:92:bf:93:98:
f3:7e:38:71:33:37:d1:86:82:ac:aa:a2:d2:83:36:
66:28:4b:56:5d:05:74:b0:93:8f:fa:9f:c3:fb:57:
1d:39:01:1e:27:86:5b:4a:e1:f4:2b:14:57:8a:d2:
db:ac:b7:fe:f1:57:04:60:19:f0:55:ca:2e:9f:d9:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:54:E2:1F:B1:77:64:1D:9A:A1:D2:74:A3:8B:4C:46:43:C0:97
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/wAVU4h-xd2QdmqHSdKOLTEZDwJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9b:10:97:3d:8b:42:20:5a:54:b2:b3:a2:ab:98:e0:93:3f:
6c:99:51:d0:c4:10:a2:79:ea:aa:5d:50:95:9d:b5:84:cd:e6:
0d:2a:c7:88:19:85:50:fb:dc:ae:38:d3:30:4a:a5:c6:31:ec:
d8:f4:4c:b0:82:a1:7d:7e:9a:4c:f2:23:5f:cd:10:8a:5f:e2:
c1:8a:74:02:fe:a5:a2:8b:81:6d:46:b8:c7:1f:9d:52:47:5d:
10:09:83:80:da:48:80:ef:77:e4:b6:69:10:0d:59:34:c2:77:
9b:b6:40:81:28:12:e2:22:30:0b:76:54:74:49:20:e0:2a:54:
62:c6:3e:c9:a1:70:87:c5:f9:9a:21:36:16:f2:7d:e3:f5:8d:
c7:b5:30:96:14:1e:72:06:d8:d1:fe:67:41:04:e7:5a:97:49:
c5:7f:bd:b1:ad:40:ba:25:c3:0c:eb:b7:dd:d2:4a:76:96:90:
6c:3a:ac:01:a2:5d:8a:ff:b1:a9:50:07:54:31:27:78:8c:d6:
5d:0d:7e:5f:a1:22:14:0c:6f:85:6b:85:cd:ae:40:af:05:1c:
15:47:c5:89:d4:7b:4b:37:ff:f7:a8:31:fe:90:ec:89:df:85:
96:41:de:3b:33:2d:0d:26:f6:9a:5f:d6:0f:b6:40:94:7f:6f:
af:c2:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:48 2024 by rpki-client on console-ams.rpki-client.org