Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/YWKCsBrg6BMbg45PKdSxmypvjRE.roa
File: YWKCsBrg6BMbg45PKdSxmypvjRE.roa (raw, json)
Hash identifier: Ucdo6RtydNXphcfCgJ7PzTBCoP9dzvcGb/vM1bLxl1Y=
Subject key identifier: 61:62:82:B0:1A:E0:E8:13:1B:83:8E:4F:29:D4:B1:9B:2A:6F:8D:11
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 01856C65CABC694BFF7432102C6A8CE47A1C
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/YWKCsBrg6BMbg45PKdSxmypvjRE.roa
Signing time: Sun 01 Jan 2023 08:14:48 +0000
ROA not before: Sun 01 Jan 2023 08:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50474
IP address blocks: 45.143.168.0/24 maxlen: 24
45.143.169.0/24 maxlen: 24
45.143.170.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:ca:bc:69:4b:ff:74:32:10:2c:6a:8c:e4:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Jan 1 08:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=616282b01ae0e8131b838e4f29d4b19b2a6f8d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:14:71:c4:d5:36:b1:68:a5:d2:dd:d0:3f:
14:1b:28:02:8f:a6:a1:55:3f:48:24:b7:5f:01:d3:
31:e1:82:95:09:73:24:eb:d5:16:c8:f5:bb:a3:a5:
8e:8f:57:db:5e:1a:2a:4a:b4:28:ed:fa:95:9b:f5:
74:a7:1b:78:db:15:61:e6:f4:2f:a8:29:e4:eb:fc:
35:b6:45:79:38:8d:5d:3f:ae:88:f8:85:eb:ff:5f:
3f:16:ad:1a:53:8c:79:e5:da:ae:43:5b:b2:87:e4:
a7:f7:4c:29:4a:c4:dd:3c:2a:72:52:f0:04:39:21:
0a:c2:31:fd:91:73:7c:fe:8f:56:8c:6a:75:e0:78:
bf:d9:81:fa:a7:39:17:b9:fd:9f:a9:f5:7a:1c:4e:
cd:3c:56:a8:08:75:27:71:a8:06:fb:ba:67:2c:07:
51:27:cf:49:0b:fe:10:2b:ac:3e:79:9c:b3:22:63:
d6:3b:85:e0:b8:23:53:2f:6f:7e:59:ff:8f:3c:89:
2c:31:cf:0e:1b:d0:7d:b3:4c:5d:12:99:aa:a0:c7:
78:3c:4a:6f:79:20:dd:14:04:4d:72:81:58:41:d7:
2c:42:05:e4:6e:ee:19:d4:a0:1f:cc:c7:5b:aa:ef:
fc:c3:88:9e:3f:c2:09:79:72:2a:92:7c:84:02:87:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:62:82:B0:1A:E0:E8:13:1B:83:8E:4F:29:D4:B1:9B:2A:6F:8D:11
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/YWKCsBrg6BMbg45PKdSxmypvjRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:5e:f6:5a:fb:3d:72:f6:06:d1:47:d4:5b:b9:76:5e:35:ad:
80:fa:ff:8d:2b:fb:44:b4:90:6a:e3:ad:20:33:e8:13:61:b9:
76:24:32:c7:98:b3:17:fa:f4:02:2b:71:56:d3:b9:94:4d:6f:
fc:57:a5:8a:06:8c:6b:da:2f:83:7b:12:29:23:22:1b:0a:f2:
1d:22:96:b4:17:d2:31:d4:0d:38:9d:46:b1:8c:61:aa:5d:57:
5d:4a:9b:08:f5:6e:67:ce:be:66:16:24:94:8f:da:58:c0:cb:
85:0d:15:ed:8c:17:e0:25:42:92:05:b7:8f:c8:0a:26:6d:0a:
5e:80:d2:2c:51:15:c8:d4:3f:91:38:b7:06:c9:79:14:6a:83:
ce:4b:bf:b1:53:5d:35:d3:2b:7a:3a:df:a4:a7:93:bb:cd:44:
41:20:76:9e:ad:95:97:e4:8c:df:44:7d:4d:3b:81:1d:94:7b:
16:a4:26:1b:f5:aa:17:33:16:dd:7d:a0:02:08:19:df:40:a0:
2a:a1:4f:42:69:24:cf:f9:84:70:e5:39:e8:3d:02:b4:44:81:
fd:f0:ff:fd:03:17:3e:ad:55:ee:66:f4:56:88:95:90:8a:2f:
5c:1c:fe:43:9a:47:0c:45:37:ea:6e:5d:0c:78:83:0f:82:0d:
10:1e:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:51 2024 by rpki-client on console-fra.rpki-client.org