Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/YkckgEkDn4xmNJ-ACm10daX0N-I.roa
File: YkckgEkDn4xmNJ-ACm10daX0N-I.roa (raw, json)
Hash identifier: v2sAeWgkzbHWqU7mRdjRkpePVYu0Pt7O7NOrxdTU9Gw=
Subject key identifier: 62:47:24:80:49:03:9F:8C:66:34:9F:80:0A:6D:74:75:A5:F4:37:E2
Certificate issuer: /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial: 018DF9E5455BB192B9483957B308B3DBEDDD
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/YkckgEkDn4xmNJ-ACm10daX0N-I.roa
Signing time: Fri 01 Mar 2024 12:02:48 +0000
ROA not before: Fri 01 Mar 2024 12:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.89.128.0/22 maxlen: 22
2a0b:a200::/48 maxlen: 48
2a0b:a200:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Mar 2024 07:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:e5:45:5b:b1:92:b9:48:39:57:b3:08:b3:db:ed:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Validity
Not Before: Mar 1 12:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6247248049039f8c66349f800a6d7475a5f437e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:78:72:f6:73:cd:5e:fc:31:53:41:cc:6a:
25:65:9d:cb:05:32:53:3e:e9:68:5e:23:4a:99:96:
94:6c:7f:e3:bf:0d:61:dd:bf:9c:e3:88:4e:f8:9f:
aa:eb:d3:08:ad:a6:36:ea:f5:ca:32:27:19:a1:01:
19:5e:1a:0e:73:36:d3:f4:ea:00:91:cf:69:bc:be:
8f:f2:d9:33:6e:7f:30:62:7e:37:05:74:ab:46:4e:
7e:ee:2c:04:0f:d0:dc:48:80:ae:7d:13:09:2c:db:
46:9f:1d:d4:98:69:8b:92:78:ca:3b:78:65:3a:e8:
e7:17:69:e8:f8:28:f0:f0:12:95:44:a0:fb:cf:ba:
ad:4f:38:9b:bb:e4:31:4b:ef:0c:78:86:54:11:f0:
f8:74:50:b4:9b:d9:04:90:be:01:06:a2:ba:25:bf:
45:7e:9a:aa:ba:58:02:12:3d:5c:b8:bb:b5:43:66:
21:e2:55:f2:9e:e5:76:e7:9c:a8:00:1e:b2:1e:36:
80:79:d2:6a:b5:48:80:18:d9:45:5f:1b:71:6b:95:
ba:fe:02:15:bb:ed:22:e2:9f:6f:8e:2d:94:64:ec:
63:5c:a6:05:8f:f9:e9:0a:da:13:35:7f:fd:0f:ae:
20:fa:f2:cb:c4:c9:a8:83:90:34:b0:e2:7f:31:ef:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:47:24:80:49:03:9F:8C:66:34:9F:80:0A:6D:74:75:A5:F4:37:E2
X509v3 Authority Key Identifier:
keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/YkckgEkDn4xmNJ-ACm10daX0N-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.128.0/22
IPv6:
2a0b:a200::/47
Signature Algorithm: sha256WithRSAEncryption
95:2d:e9:79:55:b6:cb:59:6a:a7:ed:65:88:5b:a8:4b:22:39:
1a:79:b0:b3:0c:84:30:de:0a:40:3d:98:e7:56:8c:88:ce:c8:
50:50:94:5b:1c:bc:72:de:43:1e:8d:f5:57:e1:92:ff:22:d7:
31:1d:34:f5:d2:b7:fd:a4:0c:4d:60:b6:e0:e6:e9:00:0f:55:
3b:67:7e:22:ec:f9:77:5f:49:35:ea:42:b2:0b:18:c6:c1:67:
e6:39:5d:70:aa:50:f2:bb:00:68:40:91:d1:4b:46:f2:00:f3:
65:d9:a0:12:b1:d7:d8:c9:0e:36:85:a1:57:12:4b:39:aa:c4:
a6:92:eb:d1:87:41:6e:99:f1:f2:bd:a1:fd:97:e9:33:9c:b5:
43:e0:ec:7d:3a:c6:a9:62:8e:06:7c:92:a1:c3:41:35:46:66:
b3:76:66:f7:55:c4:82:e8:cf:c5:c7:28:8f:64:66:b6:3e:9c:
8a:db:dc:c3:70:5d:a5:b4:73:83:32:a2:0d:43:2d:0e:d3:46:
65:ca:0e:2e:39:ab:8e:6e:d9:af:26:f3:10:d2:b4:94:71:4a:
cf:e4:41:c5:99:c5:ff:26:bb:5b:e6:1e:90:61:b6:9a:b2:c8:
0f:d1:89:6a:0c:9c:fd:f4:8b:2e:d1:45:e2:6e:06:cf:94:75:
67:69:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 11:55:10 2024 by rpki-client on console-ams.rpki-client.org