Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/wDytWtW0u4hetyGVLVurBuHY2OU.roa
File: wDytWtW0u4hetyGVLVurBuHY2OU.roa (raw, json)
Hash identifier: LcXNvFKAp0ck93eU2k/b+8Uk+YXoWLL9/6UZxRIGeZw=
Subject key identifier: C0:3C:AD:5A:D5:B4:BB:88:5E:B7:21:95:2D:5B:AB:06:E1:D8:D8:E5
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 018CC2DB538288B1A23F841DBA9FD76204D3
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/wDytWtW0u4hetyGVLVurBuHY2OU.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30437
IP address blocks: 159.245.16.0/24 maxlen: 24
159.245.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:53:82:88:b1:a2:3f:84:1d:ba:9f:d7:62:04:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c03cad5ad5b4bb885eb721952d5bab06e1d8d8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:bf:b8:74:c9:b8:1e:5c:0c:cc:b1:39:7a:
3e:9f:05:df:af:ae:44:ce:ff:ee:0a:4e:ac:ae:43:
4c:8a:2c:ea:6c:fb:70:52:19:f6:a3:cf:07:34:f7:
06:fc:eb:fa:da:22:0b:4b:79:c8:15:bf:7f:da:22:
8e:f7:10:60:25:1f:b2:e6:9b:83:8d:b1:92:77:28:
4e:11:6e:c0:f5:ad:fe:26:76:51:d2:82:9d:a8:e7:
bd:39:32:9f:6d:ac:91:40:32:ff:ef:df:b9:73:5d:
d3:87:02:d9:28:ae:34:00:c8:ef:f8:81:99:74:d0:
74:12:2a:47:9f:5a:e9:49:11:ef:3a:0b:91:91:ba:
6e:9c:86:48:6e:e9:6d:54:c1:e0:05:f7:c2:d9:0f:
89:57:58:af:a0:b4:1c:ca:da:ac:45:00:eb:12:9f:
92:08:85:19:da:4a:3b:ee:df:f5:65:36:41:09:69:
94:c5:2f:3d:72:35:aa:49:53:18:bb:fb:77:5e:3e:
4a:d7:4e:fb:d8:ad:f9:de:8e:b7:f3:2d:0b:97:c8:
75:71:f3:a0:7e:27:8b:9d:88:18:31:78:90:e2:86:
e0:97:36:51:c6:9b:9a:1d:1a:fa:68:5f:02:d0:08:
b5:81:87:34:ea:21:b8:34:c4:81:26:de:ed:51:b7:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:AD:5A:D5:B4:BB:88:5E:B7:21:95:2D:5B:AB:06:E1:D8:D8:E5
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/wDytWtW0u4hetyGVLVurBuHY2OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.245.16.0/24
159.245.18.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1f:da:db:43:03:13:dd:68:08:87:98:5d:d5:34:e0:1b:69:
e2:35:50:6c:3f:0e:6a:f4:b4:e4:84:83:86:ce:8c:5d:76:5c:
83:5c:82:b6:ca:4c:a3:a6:f1:04:2b:b2:27:39:06:f1:41:47:
83:cd:09:51:ca:ad:69:35:86:3a:63:9b:a0:75:c4:18:db:20:
f3:ff:2d:8f:84:9e:c7:e1:cb:1a:80:a0:e9:d7:bc:ce:63:db:
67:a5:c6:8f:87:58:e1:56:12:f0:80:25:92:b9:5e:04:10:cc:
4f:3a:80:b9:8d:ad:af:94:ac:f2:d0:8f:35:ab:67:c9:38:90:
fc:c5:ce:7c:93:d4:8f:bc:56:f6:2e:57:d6:ae:c4:aa:36:6f:
de:d1:be:53:5d:b8:25:4c:94:d4:5c:97:42:b4:dd:59:d2:32:
f9:74:d4:68:cc:31:a8:aa:aa:ff:00:1b:cb:e7:9d:f7:27:69:
ae:6e:1c:3e:ab:3b:fb:c3:96:b5:d7:13:f5:14:0b:93:9a:c1:
cf:4a:79:26:08:88:94:9c:10:44:81:6b:e3:aa:62:96:a2:45:
61:a9:7a:5e:a5:15:ad:a3:93:ce:51:ad:4e:53:ba:af:fc:b5:
a0:43:ec:6a:3a:2b:c3:99:13:15:89:16:31:2c:4d:69:b8:0e:
8d:e6:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:01:22 2025 by rpki-client