Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/W4yN-Xn8pK2K1ug4K5VjhV16A8c.roa
File: W4yN-Xn8pK2K1ug4K5VjhV16A8c.roa (raw, json)
Hash identifier: X4Fpotf0gARGCyRdRvKext+2wVDPfUFQVStA3vZqGwQ=
Subject key identifier: 5B:8C:8D:F9:79:FC:A4:AD:8A:D6:E8:38:2B:95:63:85:5D:7A:03:C7
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794CC9111AF24BEA409BFED57E75DFD
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/W4yN-Xn8pK2K1ug4K5VjhV16A8c.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13886
IP address blocks: 45.150.32.0/22 maxlen: 22
45.43.165.0/24 maxlen: 24
64.137.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 15:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cc:91:11:af:24:be:a4:09:bf:ed:57:e7:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b8c8df979fca4ad8ad6e8382b9563855d7a03c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:96:80:6e:fb:75:4f:d2:e8:bd:9d:29:7f:
90:ef:cf:40:83:c0:ea:c8:fb:96:60:c2:82:f0:f4:
51:62:6e:b2:57:6b:fa:f9:08:43:2d:2c:97:7f:50:
9f:d2:f0:2a:0f:0a:09:2e:ee:41:d3:d5:21:2f:b3:
d3:dc:5a:9f:a9:e1:8c:01:4f:90:58:ef:62:a5:63:
d2:cb:75:55:54:7d:94:93:45:cd:df:e6:a2:f7:4c:
3b:f8:65:a9:ae:4f:5d:b4:a0:6c:7a:fe:86:86:40:
0d:05:35:02:83:7b:8a:70:0c:06:f7:8d:bf:89:23:
a3:82:28:2e:4f:41:18:ef:f1:35:18:bf:4b:f9:c8:
f6:7a:1d:fa:69:5a:87:db:61:c9:07:d0:2e:e9:1d:
d8:fd:9d:2e:49:2a:b5:31:89:af:d0:c9:9b:1b:55:
ef:d4:20:f9:96:92:90:b4:d6:d9:3d:23:97:44:51:
a4:47:69:5b:bf:c0:08:2a:46:93:8f:51:77:f4:93:
d0:59:89:ed:86:2b:25:8b:31:90:a4:ba:7d:3f:0f:
e0:90:95:4a:e0:d8:ae:2b:ea:ef:f8:86:00:68:c2:
2e:48:7a:35:1c:e5:85:79:fd:f3:66:2a:b5:01:17:
89:9e:cb:9d:64:2e:05:7d:f5:46:7d:aa:4b:39:48:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:8D:F9:79:FC:A4:AD:8A:D6:E8:38:2B:95:63:85:5D:7A:03:C7
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/W4yN-Xn8pK2K1ug4K5VjhV16A8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.165.0/24
45.150.32.0/22
64.137.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cd:25:78:2f:4c:80:d0:00:85:95:40:2d:e4:3f:fe:0b:a8:
0b:33:49:ba:24:64:75:41:6d:66:c3:e8:3d:02:73:49:8f:e1:
70:6b:17:2e:e8:22:69:ad:10:dc:c4:bc:9a:94:91:6d:3c:ad:
94:e0:2f:84:f5:3f:d7:c6:d3:8e:3c:36:6f:88:d1:a8:47:ff:
70:60:88:5c:88:0c:64:8e:5c:de:34:d7:eb:94:fc:a6:e3:b8:
7e:8b:63:11:df:56:7c:54:fd:be:20:f5:54:be:bb:30:6b:9d:
95:5a:41:28:af:fe:87:36:1d:69:c0:62:82:58:5f:08:f5:0b:
0b:e7:ed:e6:2f:f3:6d:cd:3f:3f:c5:96:0a:d5:0e:74:87:1a:
c1:d5:7d:8a:46:20:8f:d9:90:9b:50:d5:1e:e8:71:92:5e:80:
d4:74:f6:44:72:4f:35:5d:bb:a6:4a:8c:e3:f0:96:07:a3:2b:
1a:d8:55:8e:16:82:db:dc:07:7d:c1:65:5a:fc:87:61:90:18:
a1:bf:0d:de:cb:44:71:a2:1a:26:75:93:bd:5d:48:fc:40:55:
f4:bc:b9:d3:0c:1a:06:60:b7:64:87:ba:5b:68:7c:db:01:b0:
6e:1d:2c:06:c1:15:e1:fd:cd:7d:95:d1:c0:8f:6a:0e:f7:4e:
f3:f7:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 20:08:12 2024 by rpki-client on console-ams.rpki-client.org