Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/Wa7uddddEi4-LDQ8OGuh4_GImZE.roa
File: Wa7uddddEi4-LDQ8OGuh4_GImZE.roa (raw, json)
Hash identifier: NeA392k8LNAzPGYg5h3T6VDH5rzZ8lhRVMRJW0A2pBE=
Subject key identifier: 59:AE:EE:75:D7:5D:12:2E:3E:2C:34:3C:38:6B:A1:E3:F1:88:99:91
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 01856CE607D14DBE6824F411C634ED9BE0A8
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/Wa7uddddEi4-LDQ8OGuh4_GImZE.roa
Signing time: Sun 01 Jan 2023 10:34:52 +0000
ROA not before: Sun 01 Jan 2023 10:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208702
IP address blocks: 45.154.93.0/24 maxlen: 24
45.154.95.0/24 maxlen: 24
45.154.92.0/24 maxlen: 24
45.154.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 May 2023 07:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:07:d1:4d:be:68:24:f4:11:c6:34:ed:9b:e0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jan 1 10:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59aeee75d75d122e3e2c343c386ba1e3f1889991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:38:ca:5b:53:c5:00:a2:d3:90:bf:46:54:
77:fd:e5:d6:5c:5b:fb:0e:8d:3c:d7:f8:a4:33:25:
6b:d5:dc:e4:b3:d6:0a:3a:d0:d8:06:94:ca:6d:6c:
de:96:8a:9d:3b:1e:b7:31:97:f4:4c:40:dd:ae:42:
62:c3:f3:71:2b:d4:78:11:03:3e:83:e2:c5:03:df:
f1:e4:06:db:2e:47:36:17:83:f6:76:74:ef:60:79:
01:7c:89:a6:8d:b0:80:bd:82:5e:ec:9b:36:d7:a2:
a6:99:3b:88:92:e0:9b:9d:d9:34:0d:9b:85:63:2d:
a5:e9:43:38:5d:a5:80:54:11:22:25:7e:20:84:35:
bb:0d:f5:70:b7:dd:18:0f:be:8d:bf:09:ac:f6:8e:
b8:6a:6e:df:35:f0:ff:ed:e8:d9:9e:9a:f2:ae:9b:
2c:67:a5:69:44:56:17:12:15:fb:6c:9e:2e:a1:12:
30:c4:1b:6f:f6:3f:ad:5c:71:47:88:a6:94:77:a3:
e0:eb:69:b1:a9:74:0e:29:21:79:73:9e:6e:7e:c6:
eb:04:ee:c5:ee:f1:dd:cc:7e:43:1c:ba:e4:5b:d2:
d1:74:17:36:e1:84:8e:1e:a3:f4:d0:80:6c:e3:1c:
ed:b5:6e:14:ed:4d:1a:25:08:d3:12:fe:9e:8e:1e:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:EE:75:D7:5D:12:2E:3E:2C:34:3C:38:6B:A1:E3:F1:88:99:91
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/Wa7uddddEi4-LDQ8OGuh4_GImZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.92.0/22
Signature Algorithm: sha256WithRSAEncryption
83:4b:f3:d4:7e:93:1e:7a:93:6c:91:8b:f3:8e:62:df:5a:f6:
1e:7b:9d:77:9a:e7:8e:58:4e:01:37:61:63:a5:9d:4e:89:3f:
37:82:79:c0:0a:e7:d1:57:0a:13:d3:a2:63:a0:5d:bf:b2:b3:
87:1f:8f:32:1c:6f:cb:4b:96:61:a0:b2:f6:33:64:a2:56:b3:
90:67:6f:59:8d:20:f9:ca:8d:4e:12:41:3c:ac:db:ef:6f:2d:
70:92:c7:84:99:28:96:9d:06:cd:84:a2:e4:eb:19:12:46:a2:
db:7e:52:34:6d:0e:76:e4:00:c3:73:45:a5:d9:d8:ce:f1:5e:
cc:2b:90:20:22:c9:66:ed:e5:90:f1:65:07:b4:e6:81:f7:66:
de:65:a2:af:aa:93:54:aa:c3:8a:1d:47:69:5c:ae:96:fc:83:
d8:84:4b:fd:8a:52:4e:13:1f:3d:49:d1:1c:f8:ce:d5:de:57:
d1:2a:4f:da:2b:ef:bc:46:a8:70:ca:12:79:cd:b0:ed:b3:7d:
a4:b2:be:bb:fe:6d:4a:d4:0e:ad:0e:5f:62:f5:70:45:44:23:
a1:ea:b7:91:3f:15:76:5c:d7:2a:40:71:1d:38:15:63:9b:d6:
a2:66:24:33:78:10:ac:a8:45:3b:65:28:ae:07:04:7c:3d:74:
50:81:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:24 2024 by rpki-client on console-ams.rpki-client.org