Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wdW7Q6ZsdRtt1O6qt8Wst6ruGiY.roa
File: wdW7Q6ZsdRtt1O6qt8Wst6ruGiY.roa (raw, json)
Hash identifier: wBBqkpAKTkKvb99NnhyKF4p+6Ema3R/I4asyeZD5p7E=
Subject key identifier: C1:D5:BB:43:A6:6C:75:1B:6D:D4:EE:AA:B7:C5:AC:B7:AA:EE:1A:26
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 01866EBD012E805C718FA9C2F016873BC917
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wdW7Q6ZsdRtt1O6qt8Wst6ruGiY.roa
Signing time: Mon 20 Feb 2023 12:12:05 +0000
ROA not before: Mon 20 Feb 2023 12:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38972
IP address blocks: 80.251.154.0/24 maxlen: 24
80.251.144.0/21 maxlen: 21
46.254.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:bd:01:2e:80:5c:71:8f:a9:c2:f0:16:87:3b:c9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Feb 20 12:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1d5bb43a66c751b6dd4eeaab7c5acb7aaee1a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:58:98:0b:03:d9:2c:36:a8:f4:05:c7:d2:
1e:04:46:e2:90:bc:84:9c:61:9b:2b:3c:2a:e4:73:
8c:a3:e9:de:f8:b7:88:4b:2e:7a:c6:a8:c4:11:2e:
d6:1a:9e:cf:4c:87:ca:89:2b:35:63:5e:66:77:52:
d3:da:a4:10:7b:7e:d2:1f:9f:58:f5:bf:54:a4:7a:
d4:bb:45:da:97:dc:1e:b8:be:90:c8:45:16:3e:56:
46:d2:24:3a:06:b9:f0:ca:4a:3c:ce:33:d1:86:bb:
ee:e6:c5:b4:8c:64:39:8b:2c:c0:ef:09:f2:94:8f:
15:6f:ed:21:93:0c:60:1e:ba:1e:59:d0:66:0c:47:
7d:10:b2:65:08:71:86:14:72:b6:cc:11:2f:ee:15:
58:d7:01:0f:f0:9f:05:b0:2f:8a:4b:2b:91:ad:fa:
9d:df:4b:a5:0d:f1:d5:67:7e:d3:3c:d2:32:2f:04:
6b:53:69:13:9a:c5:3c:73:ee:ca:25:75:4e:7c:09:
82:eb:8d:7d:a8:0b:ed:81:04:35:84:e0:88:18:44:
06:c3:0f:88:5c:a3:de:eb:15:eb:55:94:9a:75:7c:
af:a3:5f:06:c7:cd:70:0c:a8:c9:ca:d4:2d:4c:02:
76:b8:27:3b:a3:ff:9b:f7:45:a7:43:9b:80:62:bd:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D5:BB:43:A6:6C:75:1B:6D:D4:EE:AA:B7:C5:AC:B7:AA:EE:1A:26
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wdW7Q6ZsdRtt1O6qt8Wst6ruGiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.24.0/22
80.251.144.0/21
80.251.154.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4d:b2:a0:18:6f:f6:76:7d:06:9f:20:e8:ec:2b:ea:e4:b3:
05:10:ed:ed:36:22:50:4b:a6:de:8f:89:64:0d:c0:f3:50:ff:
60:f0:7f:64:4e:92:9d:b3:d1:f2:c9:e2:eb:d4:8e:ec:49:88:
db:7d:7f:53:d5:98:33:ac:6d:24:b1:c5:5e:3b:b9:d8:ad:cc:
d2:e2:ad:e3:c4:cc:62:8c:37:bd:40:ff:22:fa:e7:b9:45:16:
42:05:ac:85:c8:a8:6b:18:1c:22:ad:fc:5a:3e:ba:bf:f0:4e:
ce:45:fb:0b:f6:53:30:ff:e4:8b:71:f5:b5:5c:30:a4:1b:3d:
1e:7c:ad:2a:8a:8f:f8:a8:db:d9:b2:84:40:0f:a9:0b:40:a9:
99:11:e5:92:2f:7d:8c:1d:cb:ca:7e:89:0d:dd:c7:cc:0b:68:
76:ce:73:f6:cf:0c:41:2f:69:25:d3:8a:d8:a2:7f:7c:62:d2:
e3:ae:74:8c:2d:f1:3f:7e:ab:56:63:fb:d0:62:d0:ba:a5:c0:
d0:c8:6c:81:76:ec:53:37:14:d2:c1:c4:e5:cf:c9:23:5e:79:
66:8f:a0:c9:6a:c3:dd:4d:d6:70:77:a0:d1:00:47:0f:5f:b1:
90:00:43:7f:87:91:38:2f:bd:b8:27:f4:17:ae:06:22:9d:dc:
bf:a0:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:05 2024 by rpki-client on console-fra.rpki-client.org