Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/_Tw6l_bFEWlwJKPjhAhoxdpJZQg.roa
File: _Tw6l_bFEWlwJKPjhAhoxdpJZQg.roa (raw, json)
Hash identifier: KNtNmQDGI3gFPmay9gnbIqwoFsMvMJ/+kBiZsiNejp8=
Subject key identifier: FD:3C:3A:97:F6:C5:11:69:70:24:A3:E3:84:08:68:C5:DA:49:65:08
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 01880B26C1ECF4FF74B3120AF2F38159F5EF
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/_Tw6l_bFEWlwJKPjhAhoxdpJZQg.roa
Signing time: Thu 11 May 2023 14:11:09 +0000
ROA not before: Thu 11 May 2023 14:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6282
IP address blocks: 45.158.200.0/23 maxlen: 24
45.158.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:26:c1:ec:f4:ff:74:b3:12:0a:f2:f3:81:59:f5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: May 11 14:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd3c3a97f6c511697024a3e3840868c5da496508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:71:1e:ab:a4:17:4f:41:23:99:01:28:d6:
74:da:56:f1:5a:4c:0c:76:e5:b4:da:12:da:30:9d:
60:5b:32:90:41:8d:83:41:98:47:3c:5d:f5:4e:ad:
51:46:f2:60:cf:4b:bb:87:34:1b:74:48:2b:6f:b7:
cf:e7:18:7d:5e:6e:76:b0:2d:92:2c:19:56:68:2b:
95:5c:6b:b8:1a:63:95:c3:c8:fc:f8:31:81:94:6e:
9d:26:4a:73:b4:45:9c:2e:b0:e3:29:fc:e1:57:01:
6e:44:3f:3c:f6:ba:30:3f:55:6b:fb:1f:ba:14:19:
0e:aa:97:d7:7f:40:a8:b3:91:7f:af:70:11:18:d9:
98:25:91:2f:41:76:34:b9:98:19:92:c6:28:57:e2:
3f:c6:5f:d3:13:7d:cf:fc:90:d1:95:f8:f1:fe:d0:
42:60:09:ea:9f:33:8b:83:1a:60:4b:55:ec:04:7e:
54:51:8c:d8:55:26:17:ea:c0:71:b9:53:b3:75:22:
5c:6f:4b:48:f1:0d:3a:7a:10:e4:70:2e:15:02:2b:
ef:e8:20:a3:cf:70:6e:58:13:6d:3f:5e:19:e7:bf:
ff:97:e8:c2:f6:77:62:b8:0e:2e:f6:64:63:de:eb:
97:5f:7a:af:09:6b:2a:ab:3e:5e:3d:14:93:dc:78:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3C:3A:97:F6:C5:11:69:70:24:A3:E3:84:08:68:C5:DA:49:65:08
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/_Tw6l_bFEWlwJKPjhAhoxdpJZQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.200.0/22
Signature Algorithm: sha256WithRSAEncryption
00:c6:65:0d:c1:5d:f1:86:2d:7c:40:f0:a2:ef:d8:02:63:27:
cb:ba:8b:79:33:3b:da:4a:bf:a6:f6:bb:34:e5:c7:29:16:82:
0c:97:c2:b6:1a:e8:d2:01:e9:7a:6a:79:78:1b:8f:78:6a:ad:
95:38:20:3e:c7:2b:c3:e5:4a:9c:c2:1d:3a:2a:0c:de:03:5f:
44:88:2a:10:83:a6:72:c9:60:f3:af:95:0f:fb:b4:cf:6e:b2:
f3:79:5f:2c:0c:ae:8c:11:38:d0:d7:a5:55:47:e2:df:45:c0:
27:35:96:fb:c8:3f:45:5f:9b:a9:17:db:9b:9e:73:a2:5d:35:
5b:59:ba:0b:d8:6f:75:7d:4c:ce:8e:02:fb:8a:1f:a5:9b:d5:
cb:b5:c2:01:7b:e9:73:ab:19:0a:4b:d3:6e:f2:08:c1:00:9c:
0f:91:9b:bd:46:a6:00:82:76:d1:29:58:32:01:45:41:dc:c0:
33:21:50:a4:22:ab:3f:91:a5:ba:99:18:83:83:52:9c:4e:03:
f6:10:9a:fd:5e:78:28:60:58:cf:86:65:18:26:54:d3:91:16:
bd:c4:ac:f9:fd:ce:f4:32:f7:b8:f4:82:74:ae:51:38:94:5c:
81:50:6a:8c:67:41:c9:88:b3:7d:b9:a2:74:14:65:e0:d6:2a:
b1:ac:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:48 2024 by rpki-client on console-ams.rpki-client.org