Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UWaYEWhRat08T3pdwbBAG29MLl0.roa
File: UWaYEWhRat08T3pdwbBAG29MLl0.roa (raw, json)
Hash identifier: ii8ywrR9TYlSXrPkhOwzpGLSExaRs9tyHCQj+uEHUIc=
Subject key identifier: 51:66:98:11:68:51:6A:DD:3C:4F:7A:5D:C1:B0:40:1B:6F:4C:2E:5D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0189D49F041EDF1AAEA2FDF224A3614F0A4E
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UWaYEWhRat08T3pdwbBAG29MLl0.roa
Signing time: Tue 08 Aug 2023 10:08:58 +0000
ROA not before: Tue 08 Aug 2023 10:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202496
IP address blocks: 104.143.254.0/23 maxlen: 23
216.173.78.0/23 maxlen: 23
104.249.30.0/23 maxlen: 23
45.43.176.0/23 maxlen: 23
45.43.176.0/20 maxlen: 20
45.43.178.0/23 maxlen: 23
45.43.180.0/23 maxlen: 23
45.43.182.0/23 maxlen: 23
45.43.186.0/23 maxlen: 23
45.43.184.0/23 maxlen: 23
104.143.235.0/24 maxlen: 24
45.43.190.0/23 maxlen: 23
45.43.188.0/23 maxlen: 23
104.249.60.0/23 maxlen: 23
104.143.248.0/22 maxlen: 22
104.238.4.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:9f:04:1e:df:1a:ae:a2:fd:f2:24:a3:61:4f:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 8 10:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5166981168516add3c4f7a5dc1b0401b6f4c2e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:b3:52:b4:58:d7:77:f7:d9:aa:4e:7b:90:
cd:55:b6:3a:94:4f:58:68:64:8d:3e:4d:bc:a5:28:
f7:85:08:cd:b5:6e:82:3e:08:89:00:30:f4:9a:46:
b7:cd:5f:f8:7f:8a:f7:d3:d0:87:ca:e4:27:e7:f2:
a4:e6:04:2c:0c:55:0f:a5:23:cf:20:2a:68:c1:63:
3c:aa:89:33:8f:30:ac:32:b9:36:7a:2c:42:09:c1:
bb:fd:c3:f4:1c:fe:89:3d:5d:94:1e:ab:04:9a:ad:
2c:d2:7a:ca:30:30:71:a4:b3:30:20:44:00:75:9d:
6d:ff:d6:42:ee:b0:4c:e4:c7:f6:7c:bd:75:8a:ee:
90:48:a4:04:82:96:de:d6:27:66:14:f5:e9:ff:70:
1d:a7:cf:a5:be:1d:9f:18:75:b3:42:9b:7e:32:6b:
c7:e0:29:fa:0f:26:79:7a:61:44:03:f1:cf:d6:c8:
ce:57:99:88:7e:88:60:41:ee:a3:8c:a0:9c:68:98:
b6:af:29:32:18:ca:af:4b:4f:88:b1:e9:73:1d:72:
93:34:a6:52:46:be:dd:0f:b2:10:62:72:b5:8e:54:
89:7a:09:f9:34:a0:c6:45:5b:d4:90:53:23:51:f3:
b6:bc:31:c6:f7:cc:5b:e3:4d:78:ee:6e:e0:60:ee:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:66:98:11:68:51:6A:DD:3C:4F:7A:5D:C1:B0:40:1B:6F:4C:2E:5D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UWaYEWhRat08T3pdwbBAG29MLl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.176.0/20
104.143.235.0/24
104.143.248.0/22
104.143.254.0/23
104.238.4.0/23
104.249.30.0/23
104.249.60.0/23
216.173.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:69:9f:43:45:e5:70:75:4a:55:e4:42:f5:49:85:2f:33:e4:
fc:1b:9e:8e:c0:cf:cc:9e:fb:e2:57:a7:a2:e3:cd:03:7a:1c:
54:59:25:15:3f:6d:65:83:6b:5a:4d:ef:36:b6:33:48:3c:47:
53:d6:f6:ab:5e:37:c6:69:72:a9:a2:5e:bd:5b:cc:8d:10:60:
61:c6:52:0c:37:0b:b0:25:36:fd:13:02:9e:4f:f6:3f:0b:5a:
71:b7:a9:d7:88:61:1b:7d:bd:bc:18:ab:f4:fe:11:c9:6e:df:
71:bf:30:82:b5:6a:2d:30:20:3c:c8:79:8b:ff:f8:0f:3c:f7:
6a:97:cb:13:18:24:4e:a9:9e:54:c5:89:db:84:de:1c:a1:b3:
b0:9b:d6:98:23:03:91:f1:a1:16:55:3c:68:2e:ae:53:e5:08:
46:0b:3f:b4:da:ce:d7:0c:7e:6a:dd:aa:7f:86:92:3b:5b:ee:
0a:bc:39:ff:e4:c4:6c:a6:32:41:68:19:64:b6:f6:8b:8a:8f:
98:df:c0:97:d1:dd:f3:ba:53:e2:20:74:3b:04:a2:16:46:88:
7f:75:82:70:8c:86:c5:85:28:ce:e6:2a:34:d9:56:82:21:ff:
21:2f:f1:a4:58:7f:e8:9a:47:72:dd:c3:e9:25:d7:6e:06:66:
8c:e3:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 10:33:11 2023 by rpki-client on console-ams.rpki-client.org