Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/pHz2c0v3CgWNzR57vD58LCZtsOs.roa
File: pHz2c0v3CgWNzR57vD58LCZtsOs.roa (raw, json)
Hash identifier: oZs/LV+oSj20oB0hJu5dRxy9HenLPykCRWXcQfmhYPc=
Subject key identifier: A4:7C:F6:73:4B:F7:0A:05:8D:CD:1E:7B:BC:3E:7C:2C:26:6D:B0:EB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018DD7B03ED5EBBB9BF2B2A00549A7651650
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/pHz2c0v3CgWNzR57vD58LCZtsOs.roa
Signing time: Fri 23 Feb 2024 20:37:48 +0000
ROA not before: Fri 23 Feb 2024 20:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 45.43.163.0/24 maxlen: 24
104.222.190.0/24 maxlen: 24
104.222.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 11:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d7:b0:3e:d5:eb:bb:9b:f2:b2:a0:05:49:a7:65:16:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 23 20:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a47cf6734bf70a058dcd1e7bbc3e7c2c266db0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:49:9c:18:85:4d:0a:75:72:7c:bb:b8:ad:
c0:b0:54:2b:25:a9:7b:93:2b:ed:38:ec:f3:77:61:
fe:7b:8e:b8:78:af:48:7b:94:ee:a3:8a:93:5f:30:
55:ef:9a:24:5d:3b:40:3d:72:84:8c:c7:b9:d3:26:
c7:d7:66:f8:de:69:39:c2:87:6f:f5:fa:7e:f6:8d:
a1:11:d4:01:a4:0b:ab:85:33:4e:25:53:b7:8b:3a:
8b:0d:02:12:b6:bc:8a:8d:a3:b2:73:88:8f:53:5f:
de:5e:a3:70:78:5e:7f:09:4c:ce:0a:9b:0d:d2:2c:
cc:a8:90:a5:bd:91:0a:fa:d7:03:ef:4c:76:d5:94:
51:63:43:fe:b5:13:80:0c:b1:ce:12:4b:d0:a8:99:
57:18:0c:a4:31:44:00:e7:1d:09:51:2d:6d:ca:af:
cc:78:e8:02:ab:01:c6:cb:ca:7d:fa:a6:f4:b7:cc:
dc:22:10:46:a7:9a:f8:cb:14:86:97:dd:8f:6a:ea:
1e:25:de:7a:9e:e5:50:1f:91:21:50:24:c2:ba:b7:
1a:36:02:33:17:43:04:a3:b7:9c:92:b9:d8:c9:73:
7c:fd:92:bb:25:18:d1:46:c6:c8:d2:aa:f4:93:42:
2b:b9:1f:d2:bf:ec:52:b7:e0:ea:33:37:95:d0:15:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:F6:73:4B:F7:0A:05:8D:CD:1E:7B:BC:3E:7C:2C:26:6D:B0:EB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/pHz2c0v3CgWNzR57vD58LCZtsOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.163.0/24
104.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
74:47:4a:57:fe:43:56:9a:6d:b6:35:46:b9:59:aa:41:f7:60:
41:fb:68:2c:df:3a:02:5d:93:0a:fa:ec:60:01:eb:0a:e9:95:
f5:86:40:57:85:d3:2d:b3:23:c0:29:10:52:ec:a1:99:07:3a:
f4:cf:3e:9a:1d:59:d8:9b:12:f4:3f:df:c2:79:cb:d8:4e:5d:
fe:c7:b5:35:a8:a9:06:fb:3b:23:3f:d2:91:64:a8:57:ca:93:
5b:bf:8b:bb:de:ee:4d:18:01:b1:a6:66:9e:1c:50:fb:f1:00:
2b:55:ec:a2:cc:28:3f:a7:b7:94:df:a8:b6:36:dc:9d:d5:f8:
d7:dc:e9:0f:74:06:d5:17:8c:50:ae:cf:75:81:49:09:0f:2f:
53:4f:0a:62:d3:e5:1d:89:a6:11:60:95:79:95:74:ab:cc:5f:
c5:fb:ae:43:fe:77:8a:41:f4:44:1a:24:64:86:4d:90:fb:c7:
59:6f:5b:a9:3e:de:b9:fd:6b:a1:e1:a3:22:9a:2a:20:4c:3a:
32:4e:e5:e6:27:08:aa:d0:da:62:96:bc:de:3e:12:8c:03:9f:
71:40:0f:1e:f1:72:b7:cb:9e:4c:ef:73:4d:46:4a:16:11:45:
91:df:43:60:69:78:33:c5:b3:91:c6:53:d3:f7:bb:44:85:3d:
1c:a5:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 14:29:23 2024 by rpki-client on console-fra.rpki-client.org