Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/VFSM7odIvD8f65P5j6JqNUdRV8o.roa
File: VFSM7odIvD8f65P5j6JqNUdRV8o.roa (raw, json)
Hash identifier: C5rMaSGNfW63AqrqMsADVXXjyFUywyLNcuG5UYPNiwU=
Subject key identifier: 54:54:8C:EE:87:48:BC:3F:1F:EB:93:F9:8F:A2:6A:35:47:51:57:CA
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018E75994EAA6446D056BDBE9A8EB0D5BBA4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/VFSM7odIvD8f65P5j6JqNUdRV8o.roa
Signing time: Mon 25 Mar 2024 12:32:45 +0000
ROA not before: Mon 25 Mar 2024 12:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 45.43.136.0/21 maxlen: 21
45.43.164.0/23 maxlen: 23
104.222.190.0/24 maxlen: 24
104.249.32.0/22 maxlen: 22
104.249.40.0/24 maxlen: 24
216.173.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 28 Mar 2024 11:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:99:4e:aa:64:46:d0:56:bd:be:9a:8e:b0:d5:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 25 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54548cee8748bc3f1feb93f98fa26a35475157ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:13:6e:1c:63:31:06:55:11:e1:9b:3f:99:
b4:1a:10:02:d4:49:55:9a:15:6d:8e:f0:15:eb:5e:
fb:8d:5a:0b:ba:70:dc:d5:c0:6f:e1:a2:9d:2c:3b:
21:d2:96:22:69:e0:a6:5c:1e:80:5e:cf:87:93:65:
27:bc:a1:92:fd:0b:f9:69:21:4e:ff:01:43:04:61:
e8:ef:39:7c:be:17:d6:c3:a5:88:94:1e:f4:4b:37:
83:86:86:ad:2b:12:52:00:35:87:c7:95:c7:0e:be:
49:25:ad:a3:25:c9:1e:91:03:f7:ed:4f:2b:1c:d6:
a1:70:d8:f6:59:68:35:9a:0f:2c:2f:8c:5e:93:9d:
10:95:ed:eb:4a:b3:c6:5a:22:d8:c4:13:e0:97:23:
d3:15:20:a2:c7:63:89:08:90:11:1b:3a:76:94:1d:
68:2a:21:1e:73:35:16:d7:5d:7c:20:98:14:80:7b:
c4:19:c4:f5:14:e4:6b:e1:78:78:4a:11:e0:47:03:
bb:3c:a6:a3:e3:aa:e1:b5:73:84:d1:71:b5:db:6f:
ad:a2:16:8d:12:f4:f0:a4:83:cf:39:83:7a:6e:c9:
a8:22:41:b0:52:03:63:cb:34:d1:87:fd:3c:db:f2:
6f:ba:a1:f4:94:87:44:8c:ed:d8:6c:66:11:d5:5e:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:54:8C:EE:87:48:BC:3F:1F:EB:93:F9:8F:A2:6A:35:47:51:57:CA
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/VFSM7odIvD8f65P5j6JqNUdRV8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0/21
45.43.164.0/23
104.222.190.0/24
104.249.32.0/22
104.249.40.0/24
216.173.64.0/22
Signature Algorithm: sha256WithRSAEncryption
55:6a:e9:45:46:dc:48:94:75:cb:86:3e:39:89:9f:36:c6:20:
ce:91:05:5d:0a:1d:3c:dc:5c:19:77:58:cb:ea:1b:c8:98:94:
dd:27:67:95:1b:3a:6e:53:8e:d3:2f:b2:96:c1:57:db:31:bd:
2b:e4:ea:e8:7a:1c:a3:aa:3d:37:0c:81:19:0a:b0:ab:98:99:
be:b7:d8:90:f7:c6:62:73:f1:ee:75:16:d0:f1:57:bc:d6:5b:
b9:9e:6f:5a:cc:f0:83:19:3d:97:c1:8c:81:bc:d7:5c:43:3f:
b1:a9:43:37:2b:c2:10:1c:14:90:a7:02:ed:46:a5:69:33:d7:
ac:c2:2e:3e:b4:c2:f4:f1:16:59:d3:26:92:b8:29:6c:6d:bf:
9f:c1:62:b4:6e:fe:a4:8b:a8:b3:57:17:07:56:33:93:3a:2d:
2c:64:49:8a:91:21:d3:22:f7:2e:e6:e5:1c:f1:9a:ef:75:aa:
92:a7:9d:aa:2f:65:42:45:b8:e0:2c:8a:c9:60:2b:b6:17:a2:
61:a8:2b:8c:07:c8:94:bb:82:11:ec:79:a0:9e:84:1f:3a:8c:
4e:21:55:35:c4:e9:f4:bc:9b:9f:4c:8e:54:b5:64:8e:e0:5d:
d4:27:06:75:b4:1e:9d:c4:7d:19:e2:82:49:79:89:2e:1c:22:
db:2e:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 15:23:24 2024 by rpki-client on console-ams.rpki-client.org