Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/DVQPsRz2fr2AtKzJQlfzw5U3ATY.roa
File: DVQPsRz2fr2AtKzJQlfzw5U3ATY.roa (raw, json)
Hash identifier: LR0lImnRi7k0AJR3MKY4GYcgIP+UXqDXGRGtHDsom44=
Subject key identifier: 0D:54:0F:B1:1C:F6:7E:BD:80:B4:AC:C9:42:57:F3:C3:95:37:01:36
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018D4720AA961BC3958A7F7846EEB78F8039
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/DVQPsRz2fr2AtKzJQlfzw5U3ATY.roa
Signing time: Fri 26 Jan 2024 18:55:39 +0000
ROA not before: Fri 26 Jan 2024 18:55:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.43.166.0/24 maxlen: 24
64.137.52.0/23 maxlen: 23
104.238.31.0/24 maxlen: 24
104.249.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 10:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:20:aa:96:1b:c3:95:8a:7f:78:46:ee:b7:8f:80:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 26 18:55:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d540fb11cf67ebd80b4acc94257f3c395370136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:5e:01:3a:0d:6c:7c:21:97:55:b3:a5:df:
d1:ef:31:0b:5b:c7:ea:bf:64:84:a3:19:ce:95:87:
31:11:72:0f:ed:a9:d5:51:2f:b2:79:39:7d:f4:fe:
b6:4a:b9:c8:a9:9c:ce:d4:14:db:f2:e1:fe:5f:50:
b4:c1:28:f1:e2:15:91:f1:73:92:c1:e2:11:56:2b:
22:f0:d2:cd:23:e3:c1:4e:d6:60:6e:be:7f:73:21:
16:95:3a:9c:3b:7f:15:d9:c1:60:c7:1d:19:f3:f9:
10:f5:ce:4f:31:cd:84:8f:d2:26:8d:83:70:4c:e4:
f5:6a:01:cc:48:66:de:cd:a5:98:52:d4:8b:09:4b:
04:48:b8:be:6a:05:2d:b6:9b:0b:78:c0:86:4a:fa:
aa:b5:48:bd:23:3b:35:3a:5c:bc:cd:e8:6c:b0:e0:
16:79:75:12:b9:4d:5a:99:1c:68:cc:44:57:49:c8:
e8:b3:3e:6d:c8:75:d7:93:39:f6:f5:79:72:17:5b:
28:b9:7d:95:80:64:04:2e:c9:2f:06:81:99:03:6a:
8e:3f:a4:c1:ed:81:f8:e6:8b:25:db:23:ed:ad:db:
c7:7b:13:f2:66:38:ee:44:ee:f5:24:1a:29:7b:4b:
7c:0c:ae:84:f9:cc:37:02:45:d2:5c:a4:9b:63:e5:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:0F:B1:1C:F6:7E:BD:80:B4:AC:C9:42:57:F3:C3:95:37:01:36
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/DVQPsRz2fr2AtKzJQlfzw5U3ATY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.166.0/24
64.137.52.0/23
104.238.31.0/24
104.249.40.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4d:95:a4:10:c5:f0:0f:cd:8a:2d:f1:f1:7e:c2:b4:31:e6:
5b:4c:d5:ce:a5:1e:45:2b:88:f0:32:5c:88:c0:cb:cc:6d:fb:
f4:ea:5a:fe:e7:0d:46:a3:43:e3:08:cf:49:20:dc:18:30:5e:
49:a6:39:3a:76:bc:8d:83:79:66:90:ab:f1:a0:e4:de:a6:db:
35:5d:b4:26:55:b3:84:09:bf:e5:6f:6e:54:e2:aa:1e:5d:e3:
0d:40:aa:d1:4a:f1:27:7a:20:61:c3:a3:ea:f0:23:71:b4:18:
6b:21:6b:43:f1:b8:4f:b2:13:dd:ed:53:5d:cf:44:f4:61:b5:
fa:79:e7:2d:48:c7:06:93:c0:90:ca:a5:c9:da:08:b1:3c:d0:
c6:21:f0:ff:9e:66:33:a6:2f:96:4b:c0:e2:c7:b3:44:76:fd:
6e:81:b5:fd:25:51:49:ef:be:0f:c9:81:a2:e4:d8:cd:82:25:
f9:57:55:fe:7e:00:c0:b6:cd:08:8d:d8:ef:2a:85:1f:97:49:
42:f5:d3:21:4e:9c:84:d5:ef:6b:e2:6e:36:4c:34:da:b2:bb:
b9:00:ee:e1:f2:50:4b:a1:1f:51:9f:f3:8a:2f:0e:78:5b:27:
7f:96:e6:91:03:56:55:8f:5c:f2:45:60:89:a8:15:1c:a8:9d:
7c:ca:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 13:56:23 2024 by rpki-client on console-ams.rpki-client.org