Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/WIf6ztAbyGQXX4sr3AS01bQ3fu0.roa
File: WIf6ztAbyGQXX4sr3AS01bQ3fu0.roa (raw, json)
Hash identifier: pxtzNr68cOQixBituLksobjIBNeO7xlMqXyzcXMzgzE=
Subject key identifier: 58:87:FA:CE:D0:1B:C8:64:17:5F:8B:2B:DC:04:B4:D5:B4:37:7E:ED
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01872D8B7E12BED3FECB1FBA7AC14F3F96F0
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/WIf6ztAbyGQXX4sr3AS01bQ3fu0.roa
Signing time: Wed 29 Mar 2023 13:25:29 +0000
ROA not before: Wed 29 Mar 2023 13:25:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 45.143.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:8b:7e:12:be:d3:fe:cb:1f:ba:7a:c1:4f:3f:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Mar 29 13:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5887faced01bc864175f8b2bdc04b4d5b4377eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:3a:a8:b5:5e:9a:14:ea:87:61:76:40:25:
d7:ab:e5:ff:e9:fb:cf:9d:fc:d3:de:bb:68:fe:79:
52:5b:5b:db:fc:6c:fa:7e:1f:8d:89:31:67:3c:ec:
f6:ed:39:2d:b0:39:61:aa:b8:66:f5:28:80:56:27:
59:e7:1c:c4:55:ff:8d:cf:af:11:6f:67:62:9d:09:
d8:1b:fb:94:44:02:d4:62:d9:50:e5:f0:f5:6d:a7:
a7:46:9e:3d:8a:6d:61:37:7b:af:e0:53:61:28:00:
94:c2:59:c7:22:db:1e:5d:8d:80:51:e4:b6:85:89:
24:7d:25:07:2a:48:c0:75:5f:52:2a:4f:66:d2:9b:
5d:0e:27:21:fe:74:52:56:ab:f4:ee:82:18:57:22:
c1:e1:9e:25:6f:c1:41:ec:1c:57:6c:07:44:b4:bd:
90:bd:4a:5d:9d:a2:0f:c8:8e:2b:ea:73:f3:b7:ba:
ad:11:90:91:87:46:2c:25:34:dd:37:9c:1f:f2:27:
f0:b6:1e:90:10:08:3c:5c:c3:a9:81:04:3a:1f:cf:
51:f3:24:fa:10:6c:e7:f6:45:83:68:d9:f1:d4:99:
25:be:8c:ef:2d:57:ed:fc:93:b8:09:45:56:f6:5c:
db:fe:87:1e:60:51:40:bc:a1:f8:a2:eb:63:7e:cd:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:FA:CE:D0:1B:C8:64:17:5F:8B:2B:DC:04:B4:D5:B4:37:7E:ED
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/WIf6ztAbyGQXX4sr3AS01bQ3fu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
Signature Algorithm: sha256WithRSAEncryption
17:be:d4:85:05:60:e0:a3:ec:79:32:c7:31:e6:9e:a6:d2:5b:
99:41:08:9c:c5:68:84:4c:e3:7b:49:8c:19:51:3c:6a:fa:e3:
4c:f3:f2:6a:e8:f8:1e:99:16:56:59:74:a1:e9:28:9c:32:cc:
7b:1b:eb:cf:61:27:98:35:b9:c0:b6:32:3e:c6:83:95:83:d6:
a4:a7:bb:35:99:ec:bd:15:55:01:76:8d:48:3d:d8:43:ad:ff:
35:bc:2c:98:91:a1:b1:ce:1d:e9:42:9b:13:5b:8b:fb:2d:dd:
c2:d7:22:ec:b4:b3:d6:5e:16:88:87:a8:41:47:6f:40:a6:92:
c8:52:b2:53:62:f3:5b:7f:e2:1b:d7:b7:ad:cb:ab:ca:d9:c2:
c3:0d:b6:c3:e5:91:77:c5:c0:47:e5:25:9c:bd:27:4d:cd:d1:
6a:c8:2e:ef:0b:26:61:4c:a6:83:ed:49:b1:50:13:55:fd:a7:
31:9b:0e:5f:9d:11:a4:10:7a:74:3a:3e:9f:da:78:51:d4:9e:
bc:0b:4f:fa:45:53:64:b7:6f:b1:7a:9e:16:a2:49:59:f5:b9:
53:a0:eb:10:7c:09:1b:97:e9:b3:57:eb:4f:b5:6f:9d:f5:e5:
62:71:50:97:24:75:f3:07:27:c5:c3:51:2d:4b:a4:7d:7b:f4:
b0:b1:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org