Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HKWxqGXmcDvYjSnIbfq1qq3DtWg.roa
File: HKWxqGXmcDvYjSnIbfq1qq3DtWg.roa (raw, json)
Hash identifier: TA09OAiKnkmBJ94uFbFJBXPkrKEql6XW4qhbDlXNPPU=
Subject key identifier: 1C:A5:B1:A8:65:E6:70:3B:D8:8D:29:C8:6D:FA:B5:AA:AD:C3:B5:68
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CEAE11178D711E5A093395E3754FDB24D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HKWxqGXmcDvYjSnIbfq1qq3DtWg.roa
Signing time: Mon 08 Jan 2024 21:01:07 +0000
ROA not before: Mon 08 Jan 2024 21:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 45.150.32.0/23 maxlen: 23
45.150.34.0/23 maxlen: 23
45.43.164.0/23 maxlen: 23
104.239.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 12:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ea:e1:11:78:d7:11:e5:a0:93:39:5e:37:54:fd:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 8 21:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ca5b1a865e6703bd88d29c86dfab5aaadc3b568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:df:cc:4b:71:d2:45:7b:e7:7f:0c:45:7f:
7e:bb:da:4d:cd:b2:4a:14:7a:28:70:57:1e:46:26:
42:c0:a1:4e:70:1c:72:76:29:05:31:eb:ad:7c:77:
49:bf:f5:c0:a4:42:f1:aa:5a:5e:10:6d:db:fd:5a:
83:ab:a3:4d:54:06:5b:cf:f0:3d:fc:7d:a2:5b:95:
23:49:f9:25:f3:5d:a0:a1:09:8d:52:02:9c:2c:52:
9b:08:95:e9:13:04:bc:f4:f6:1b:e9:a0:7b:e1:94:
57:55:1c:71:18:6c:04:51:56:23:8e:13:4c:87:48:
fd:3e:ac:03:f4:a3:f1:86:79:1d:b6:a3:01:a1:3c:
8a:14:f7:10:0d:9e:07:40:d9:16:3b:49:13:e7:1a:
ac:0b:6f:a4:60:42:4c:3e:79:70:79:2a:c3:6b:5b:
d2:e7:69:37:56:fb:be:f5:9a:6f:fe:90:70:38:fc:
ea:29:7b:0b:02:a7:0c:d1:48:4c:3a:fe:d1:f5:09:
5a:6b:49:6b:21:19:3e:f1:74:de:88:0b:6e:48:60:
d8:71:72:04:83:3b:d6:93:f8:b1:af:38:c4:dc:51:
db:0f:62:ce:ae:af:6e:69:ae:7f:c7:fa:04:ff:ae:
aa:fe:31:eb:dd:37:6a:f7:d9:84:67:2a:8c:1c:1b:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:B1:A8:65:E6:70:3B:D8:8D:29:C8:6D:FA:B5:AA:AD:C3:B5:68
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HKWxqGXmcDvYjSnIbfq1qq3DtWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.164.0/23
45.150.32.0/22
104.239.47.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6e:93:e5:4a:f2:58:13:33:ca:0f:c1:55:1a:8c:a3:0e:2d:
35:53:b0:10:37:3e:c2:ad:c5:df:82:9e:fb:29:c9:a5:37:9e:
99:e0:8f:94:18:46:2b:e8:28:d0:94:f0:bc:45:6c:f6:df:6c:
d9:b8:3c:3d:a4:16:72:1f:60:8b:23:d0:7d:07:5e:89:ea:11:
13:a5:5c:66:5c:c1:5f:42:6d:ed:8d:52:cd:2e:c7:41:db:9c:
7c:b1:b6:09:6d:38:bc:1b:14:ff:a3:ff:fa:8a:bb:3a:a8:c0:
74:1a:6e:c9:00:c5:7a:92:b3:28:cf:01:89:69:07:3a:f5:36:
c3:e2:07:a2:84:11:29:ab:2c:0f:cf:f1:ea:3f:28:12:34:90:
05:ef:3a:a7:f4:85:2b:40:38:c1:d0:16:2b:dd:9a:d7:1c:d2:
1b:1c:6c:87:fb:ef:70:6f:57:1a:91:9e:12:29:16:3e:de:12:
70:eb:6e:8d:06:1c:68:f2:8c:be:56:bd:59:86:5a:7a:f5:0d:
9c:e1:39:e9:43:f9:40:04:91:23:a0:d6:a5:e2:f6:6d:ed:b0:
97:b0:4c:55:57:cf:bb:16:8d:0f:8e:0c:aa:50:f1:8f:58:d3:
21:46:aa:7f:25:6e:a7:02:30:84:47:3e:12:6f:0b:06:0c:dc:
44:a4:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 17:27:42 2024 by rpki-client on console-fra.rpki-client.org