Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8fs3JcP8J1wL3-0w1qbBxUl6Law.roa
File: 8fs3JcP8J1wL3-0w1qbBxUl6Law.roa (raw, json)
Hash identifier: MO238A9p3PNFHYfxywIpbuMkWcmabDQXFkOTAyQTxKc=
Subject key identifier: F1:FB:37:25:C3:FC:27:5C:0B:DF:ED:30:D6:A6:C1:C5:49:7A:2D:AC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018F5D8659C9ADBD0DF1E9B57B8A9B66C112
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8fs3JcP8J1wL3-0w1qbBxUl6Law.roa
Signing time: Thu 09 May 2024 13:23:56 +0000
ROA not before: Thu 09 May 2024 13:23:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.43.140.0/24 maxlen: 24
45.43.141.0/24 maxlen: 24
104.239.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:86:59:c9:ad:bd:0d:f1:e9:b5:7b:8a:9b:66:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 9 13:23:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1fb3725c3fc275c0bdfed30d6a6c1c5497a2dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:b9:53:8b:c9:86:26:95:06:e1:9b:1f:3e:
3f:50:a6:f6:82:a5:15:0c:03:e9:98:6b:94:5e:17:
f3:f2:c0:d7:50:96:d9:ac:d8:d0:3d:cc:20:b0:46:
8e:0d:0e:a7:73:c6:04:24:78:e6:4d:1e:ad:2c:fc:
e5:94:e7:dd:cd:5d:88:4e:43:7c:72:e3:f6:cd:95:
c1:d1:76:db:48:63:dd:63:28:0a:66:a3:be:38:87:
ce:6e:f4:ee:29:49:f5:f3:c3:9f:76:71:37:c3:b7:
75:63:4b:12:10:83:68:c0:98:eb:b0:d0:e0:b7:6b:
e4:5c:a5:e9:8e:f9:65:ad:be:80:cb:60:01:fd:da:
5c:c2:7e:d1:82:1c:19:8e:07:24:89:67:ac:c6:99:
aa:33:6b:43:fa:7f:f7:f7:ab:b4:18:2b:37:2c:a8:
02:d3:f0:10:f0:8d:46:19:c4:1c:fe:d9:39:9d:1f:
e7:1f:72:55:b3:86:a9:c9:53:5f:2a:a7:84:b2:01:
3e:e4:a1:2d:29:f9:41:f8:a1:da:0a:12:25:94:b5:
1c:28:63:ca:95:64:7d:7d:5f:e8:99:a9:28:40:d6:
24:9e:f5:07:e4:76:b5:3b:bc:d7:2f:6f:b7:3c:36:
25:8a:85:fc:e0:17:f9:14:e5:c6:bb:e8:e7:a0:09:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FB:37:25:C3:FC:27:5C:0B:DF:ED:30:D6:A6:C1:C5:49:7A:2D:AC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8fs3JcP8J1wL3-0w1qbBxUl6Law.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.140.0/23
104.239.67.0/24
Signature Algorithm: sha256WithRSAEncryption
01:52:89:23:ed:2b:07:fe:6d:2d:4a:16:10:77:ad:07:ce:50:
7e:64:d6:d5:9a:39:0a:15:ff:08:d6:f6:c6:a2:e9:d4:d7:3a:
67:2a:fb:8e:88:c1:54:4d:a6:42:e6:c3:81:9d:5f:7f:cf:9c:
37:89:43:c2:c5:a5:72:d9:81:da:2b:73:f3:e3:a8:db:88:d6:
e5:76:69:82:83:56:1a:33:4e:3a:c1:09:7d:66:3a:f3:a8:eb:
d8:8d:36:1c:fe:88:64:e0:df:c3:ae:06:e8:77:3b:1b:46:fe:
ad:59:6a:96:a1:e5:b1:13:45:0d:90:f8:30:93:6c:f8:a1:4f:
1a:fa:cc:5c:34:04:5d:10:c9:0f:41:ea:07:98:36:27:62:28:
9b:f8:46:f2:0a:5a:b5:b4:26:d5:cb:0f:21:ed:e2:d7:2d:44:
64:41:9f:81:9e:ac:29:48:4d:52:6e:a3:3d:fd:f5:0b:08:c4:
c3:cc:0e:90:95:fe:30:fb:ae:07:7a:77:62:3c:e5:19:39:84:
a5:0c:be:5c:59:f9:7d:da:21:a9:2d:01:db:51:60:6e:cb:aa:
8f:2c:24:bd:d3:7a:c3:59:33:d7:45:25:40:39:f3:4a:55:1a:
dc:a6:5f:a7:0a:c6:a7:fa:52:c2:f2:3d:a7:1c:18:e7:db:05:
bd:88:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:05 2025 by rpki-client