Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/_wuITHhb5RKv_hYpcUkZOGqqvYc.roa
File: _wuITHhb5RKv_hYpcUkZOGqqvYc.roa (raw, json)
Hash identifier: oV9O9ynCxQO7f08tfh4szwdihDDyCKbvA01/OzDSsW0=
Subject key identifier: FF:0B:88:4C:78:5B:E5:12:AF:FE:16:29:71:49:19:38:6A:AA:BD:87
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 018B71104F1D022F30228BA01F4C3E1EE937
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/_wuITHhb5RKv_hYpcUkZOGqqvYc.roa
Signing time: Fri 27 Oct 2023 12:16:16 +0000
ROA not before: Fri 27 Oct 2023 12:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 45.153.19.0/24 maxlen: 24
45.153.18.0/24 maxlen: 24
45.153.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 07 Nov 2023 08:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:10:4f:1d:02:2f:30:22:8b:a0:1f:4c:3e:1e:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Oct 27 12:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff0b884c785be512affe1629714919386aaabd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:34:15:36:7e:62:3a:66:cd:55:91:54:7a:
91:03:c0:47:d7:70:29:67:1b:84:64:52:76:f6:c1:
53:63:e4:cf:2d:a9:49:d3:f9:ad:95:96:48:36:86:
e6:e3:61:4b:c9:85:aa:71:a6:6b:2d:5b:d7:02:ee:
bc:3c:3d:4d:18:08:b9:e3:2f:10:fd:ed:55:17:83:
27:31:0d:58:c3:05:f8:5e:14:8d:7f:3d:de:28:b9:
c4:cc:54:aa:78:e9:d0:85:b3:ce:52:38:a7:05:fd:
0c:3f:86:5e:6d:26:79:48:cb:9a:df:39:17:66:2e:
2c:54:3e:3f:fc:cf:f3:58:7f:fc:3f:b4:1a:16:7a:
c0:0d:c9:61:49:3f:80:c7:b9:e1:8f:8c:f6:14:a1:
d3:ea:e2:8e:0f:83:d1:0d:85:58:83:6c:ff:b8:b4:
44:b5:b2:d2:e6:f4:4f:20:25:33:8a:0d:0c:22:00:
3f:d0:c6:93:64:b0:98:74:cc:b2:f5:60:17:ec:38:
65:6c:b4:37:63:7a:23:61:c1:a3:b8:79:9c:61:35:
2f:11:1f:08:30:a4:2c:6a:29:e9:ac:23:32:58:01:
2b:76:02:1c:49:37:8c:99:12:a7:e6:21:c4:d9:f9:
2f:14:39:57:a2:1f:e8:6e:25:c2:57:03:52:e9:0c:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:88:4C:78:5B:E5:12:AF:FE:16:29:71:49:19:38:6A:AA:BD:87
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/_wuITHhb5RKv_hYpcUkZOGqqvYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.18.0/23
Signature Algorithm: sha256WithRSAEncryption
08:b6:b3:c2:78:0b:cc:2f:2f:e4:b2:89:d9:9f:77:7a:a6:06:
f4:61:ab:fa:cb:d1:dc:90:58:62:b0:6e:10:fc:39:cd:5f:30:
a4:dd:0c:47:47:8a:b2:db:cf:b2:9f:4b:77:80:de:f6:e3:48:
80:fa:c3:e2:e7:3a:34:cc:0b:a1:fc:5c:19:43:ad:a2:55:51:
af:d9:94:a5:66:7c:2a:2f:52:7d:c7:a9:ef:a5:cc:2b:3c:07:
0b:5d:2f:6f:24:9a:69:b3:05:d5:83:17:a1:dd:5b:5c:21:99:
28:08:0a:33:55:10:3e:34:26:1a:69:d3:de:28:30:83:4f:d3:
36:58:8d:db:8a:44:6b:9a:f3:48:d6:57:79:f1:b8:45:29:a4:
2d:44:b7:3c:6d:46:ea:a4:54:1f:c2:20:c7:12:45:2f:ac:49:
61:32:55:ae:c0:9b:97:10:35:80:14:b1:51:90:63:0b:7e:3d:
fe:c4:e1:3d:b9:a3:b8:bf:d6:a9:c4:55:fa:2d:80:18:3f:04:
74:33:6c:2a:9b:97:60:d0:33:ce:44:a9:3a:b0:f2:d8:b6:2e:
1b:d4:a7:cb:75:1b:5e:d1:e3:3c:39:21:b7:b0:94:2b:40:11:
01:6a:4e:6c:47:89:75:22:d5:c0:91:16:84:8e:8f:8a:80:56:
ad:fd:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:52 2024 by rpki-client on console-fra.rpki-client.org