Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W-ElSI08pfm4v15oaUBeHZ3kvls.roa
File: W-ElSI08pfm4v15oaUBeHZ3kvls.roa (raw, json)
Hash identifier: fh3cq/Y0Rn7sGTgwoG+XBeYaOdSTNRV890kIe1JT+0w=
Subject key identifier: 5B:E1:25:48:8D:3C:A5:F9:B8:BF:5E:68:69:40:5E:1D:9D:E4:BE:5B
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 0189D530967C94C9F7A4D05B32D8636F24B8
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W-ElSI08pfm4v15oaUBeHZ3kvls.roa
Signing time: Tue 08 Aug 2023 12:47:58 +0000
ROA not before: Tue 08 Aug 2023 12:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59741
IP address blocks: 185.73.240.0/24 maxlen: 24
185.73.242.0/24 maxlen: 24
185.73.241.0/24 maxlen: 24
45.141.54.0/24 maxlen: 24
45.141.52.0/22 maxlen: 24
2a05:4740::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:30:96:7c:94:c9:f7:a4:d0:5b:32:d8:63:6f:24:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Aug 8 12:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5be125488d3ca5f9b8bf5e6869405e1d9de4be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:74:06:92:54:dd:91:f4:1f:9d:33:5d:29:
f2:f7:e9:87:27:6e:22:45:3d:74:1e:1e:96:a2:55:
a6:f9:41:80:d9:ea:db:a2:f4:94:b8:dd:06:fd:6d:
1a:e0:67:b2:1c:e5:d9:9b:b8:4a:ac:07:c7:d2:17:
d4:c0:41:41:48:f0:50:b6:5c:46:cc:7d:6b:28:70:
60:4b:f6:ed:64:db:04:0a:32:90:bd:33:4d:87:bd:
7a:e7:73:34:ec:82:f4:86:9d:69:b9:77:e2:4f:22:
41:21:29:f8:29:a6:80:44:fe:89:9d:8a:e1:04:23:
62:79:c9:5a:04:e8:c4:6d:3d:c2:da:72:e1:2c:d4:
9a:b4:fb:02:c5:50:cb:96:78:3b:c3:4a:03:7a:d7:
e9:ef:80:aa:8d:55:90:9a:6c:8a:64:e3:f1:74:3c:
ec:30:e5:05:00:b6:09:cf:cb:af:58:bf:9c:1a:8a:
0c:9d:8d:d1:68:18:d8:04:2a:1e:8e:8c:40:5e:97:
c2:ab:78:96:66:d6:d7:54:f1:58:5b:c1:04:dc:b0:
d2:c3:1b:03:63:5e:37:07:9d:e5:3c:64:f8:3a:b7:
4d:51:ff:3c:2c:7d:1d:17:2a:ef:3b:84:82:d4:6e:
ab:25:cd:af:13:d1:0e:92:36:c3:8e:e0:8a:6f:c2:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:25:48:8D:3C:A5:F9:B8:BF:5E:68:69:40:5E:1D:9D:E4:BE:5B
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W-ElSI08pfm4v15oaUBeHZ3kvls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.52.0/22
185.73.240.0-185.73.242.255
IPv6:
2a05:4740::/32
Signature Algorithm: sha256WithRSAEncryption
73:9b:11:9d:1a:7b:92:41:46:50:30:22:0d:cd:a3:44:23:4e:
0c:b2:c7:02:0d:9d:86:95:be:cd:57:ab:a4:9d:0e:4a:eb:ef:
98:e0:4b:d2:46:8c:d9:33:3a:2b:b5:3e:5a:3e:06:a8:e1:c4:
3d:5b:a1:6d:b9:0f:07:84:5b:3f:fe:f3:8a:3b:43:01:56:73:
b4:3e:21:93:57:77:80:56:90:d4:05:88:27:65:38:73:fd:c9:
29:6c:08:97:32:13:fc:fd:ed:bf:d1:de:e9:00:9c:6e:1e:0a:
de:3b:42:90:dd:87:85:aa:11:58:15:3f:d3:00:32:4e:5c:26:
9c:9b:27:dc:6c:e1:aa:1e:19:90:0d:e3:28:91:53:0d:b5:48:
e7:20:7d:f6:f4:0c:ac:79:c4:cc:1d:52:3a:11:50:f4:0d:31:
4d:e1:69:a5:fb:98:81:2d:3e:c0:03:61:69:ef:de:ce:45:37:
c8:80:82:9a:ba:a7:69:1f:b2:91:83:2a:2a:ba:ae:ba:4b:fd:
e1:2d:65:d9:5d:d6:c3:d0:0e:91:52:c8:fc:58:2f:56:c9:f1:
ae:36:47:45:3b:fa:19:57:0b:f0:29:ef:cf:3c:fa:42:0f:89:
99:d9:76:53:d5:68:8c:41:f6:98:31:20:c6:e9:7f:4a:23:95:
bf:70:96:0f
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 8 21:26:43 2023 by rpki-client on console-ams.rpki-client.org