Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/YKIUDAZnFSXE45KUUkvIwNCpuU8.roa
File: YKIUDAZnFSXE45KUUkvIwNCpuU8.roa (raw, json)
Hash identifier: TdcvrPt9UVsjhbThRxBzt8JglMoJ6W5URzgSipxigg8=
Subject key identifier: 60:A2:14:0C:06:67:15:25:C4:E3:92:94:52:4B:C8:C0:D0:A9:B9:4F
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01918D34F11AC76DE269F107D2EF1A01D8BE
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/YKIUDAZnFSXE45KUUkvIwNCpuU8.roa
Signing time: Mon 26 Aug 2024 05:42:22 +0000
ROA not before: Mon 26 Aug 2024 05:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.146.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:34:f1:1a:c7:6d:e2:69:f1:07:d2:ef:1a:01:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Aug 26 05:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60a2140c06671525c4e39294524bc8c0d0a9b94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:90:84:f1:0b:63:91:28:4e:6c:ac:76:e1:
e0:3f:d4:2e:d1:04:5e:4b:68:5f:c9:5a:47:3d:03:
c0:28:bf:05:6e:77:ce:ae:8f:2c:cf:8b:36:c2:af:
56:21:af:94:34:59:14:63:c8:29:64:b9:2b:ff:14:
07:62:03:ac:53:c9:a7:38:1b:ed:1d:00:e8:97:bf:
e1:8c:34:06:87:84:5f:20:c9:bd:f8:03:a6:9e:02:
10:17:a4:03:b1:98:ad:8c:d7:9e:83:b8:ee:e5:f6:
54:b6:5d:be:5f:a9:48:09:ce:0a:c3:b6:96:0f:1c:
3a:a9:de:3a:71:75:90:00:a4:22:f1:2f:90:0b:4f:
1e:a5:8e:b6:a6:26:70:e0:af:6f:3a:92:68:c3:f6:
6c:57:f6:47:96:6b:07:3a:89:bc:8e:8a:e7:87:e5:
a6:74:13:df:d8:8c:4e:06:bf:93:ae:7a:1b:56:90:
da:e7:dc:16:14:9d:8e:bd:48:45:8a:27:64:9a:e6:
15:a6:aa:8b:f7:0d:98:aa:cc:08:35:76:3d:fd:6f:
ad:38:51:ce:55:0b:66:b6:19:3f:d1:9a:b3:ff:32:
c1:52:eb:d2:d4:f0:c7:b5:ae:8a:0e:ce:dc:c7:81:
92:25:ac:e9:cc:a4:7a:b4:b5:64:75:fe:c5:23:de:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:14:0C:06:67:15:25:C4:E3:92:94:52:4B:C8:C0:D0:A9:B9:4F
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/YKIUDAZnFSXE45KUUkvIwNCpuU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
34:f3:e3:c4:c7:26:5e:11:3d:e7:9a:f0:40:6a:39:06:84:fe:
14:a9:c0:5b:49:18:d3:de:a3:ea:ba:b6:ab:c8:f9:de:c1:73:
e3:0c:71:5e:3c:ba:70:97:ac:57:b1:7f:03:14:40:47:b3:f1:
08:dd:2c:de:8a:54:bf:e9:33:71:0e:b2:b5:ef:76:dc:96:a3:
4e:44:39:59:78:85:77:2e:6f:bf:30:bd:db:d4:6f:8a:e5:65:
a9:f8:38:f2:0c:d9:20:be:e1:57:c0:d6:1b:98:21:e2:6f:d3:
ea:f3:f9:f7:84:7e:d2:7e:a8:f6:86:bb:cb:63:65:90:e2:95:
40:9b:4d:8c:20:43:9f:17:ee:e3:d2:0a:c8:dc:63:2c:52:0c:
a4:36:74:a3:f2:6f:ac:e6:d4:e1:1c:d7:d0:94:9a:df:70:cd:
b7:ce:fa:3f:a8:f6:92:bc:18:60:32:8a:02:e2:eb:7b:de:4a:
61:b5:7f:eb:90:12:49:bd:53:02:d6:73:51:58:e1:44:9d:72:
7c:a9:6a:d7:70:99:8b:16:09:b4:f7:65:92:c5:3c:9f:96:32:
fe:1e:2e:03:e5:1d:b8:e4:a1:64:d1:81:c3:ab:7c:c0:2d:d9:
c3:eb:5e:6c:34:cb:63:0d:94:0f:7e:d8:59:3b:33:f2:a7:31:
a2:ab:d1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 08:47:52 2024 by rpki-client on console-ams.rpki-client.org