Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/weOSLxZZHXMJit1jIV9Kmp3AZ8o.roa
File: weOSLxZZHXMJit1jIV9Kmp3AZ8o.roa (raw, json)
Hash identifier: 0NkpVEj5eOd304ziLv0YK/eFpO0rbHqbiMoAT5X1VWY=
Subject key identifier: C1:E3:92:2F:16:59:1D:73:09:8A:DD:63:21:5F:4A:9A:9D:C0:67:CA
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018AE17D4CD83061AD72DA40E10A989BC70A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/weOSLxZZHXMJit1jIV9Kmp3AZ8o.roa
Signing time: Fri 29 Sep 2023 15:09:59 +0000
ROA not before: Fri 29 Sep 2023 15:09:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.147.159.0/24 maxlen: 24
45.147.157.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:7d:4c:d8:30:61:ad:72:da:40:e1:0a:98:9b:c7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 29 15:09:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1e3922f16591d73098add63215f4a9a9dc067ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:16:d0:fb:a7:3b:47:20:ac:50:82:e8:f6:
db:95:26:b4:88:fb:60:08:d5:b5:5b:3b:a2:47:53:
58:16:2d:b1:04:11:60:1c:d0:82:d2:cf:a1:5b:ee:
bc:cf:7c:34:45:91:ae:f5:9a:dc:26:d4:cd:5d:b3:
67:f4:20:d8:52:46:a9:35:73:bc:5f:2b:1b:bd:51:
fa:cb:2c:e2:71:c3:2a:87:0b:54:37:80:5f:95:52:
35:19:16:62:1a:1e:a9:89:c1:0e:4a:70:03:03:91:
7e:77:ae:8c:d7:50:90:9f:50:2c:f1:b3:d6:f5:21:
7f:84:0b:14:50:18:a6:19:41:4e:77:8d:97:fa:79:
86:97:05:d2:71:e7:10:66:b6:7b:64:bc:c5:6b:c5:
5f:28:aa:a3:8c:cb:8f:fe:83:34:08:02:7f:67:81:
38:1b:8d:34:f1:44:29:38:73:3f:9e:6c:33:f2:f4:
c3:6f:27:11:aa:ee:68:b5:c3:57:a6:ad:47:aa:da:
ff:b5:3f:7f:3e:30:72:6c:4f:ba:be:d8:88:9e:f6:
5d:1b:88:f1:f7:27:50:8c:43:0a:a6:87:c8:2a:76:
5f:36:52:b6:12:cb:ab:8e:62:03:ee:fe:9b:3a:eb:
21:f1:76:90:ce:c8:b2:0b:95:6f:55:75:ee:77:e3:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:92:2F:16:59:1D:73:09:8A:DD:63:21:5F:4A:9A:9D:C0:67:CA
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/weOSLxZZHXMJit1jIV9Kmp3AZ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.157.0/24
45.147.159.0/24
92.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5e:fd:5b:57:23:88:1b:0d:b3:ac:98:1f:25:05:bc:f8:d4:
76:5b:01:38:17:ca:ec:95:b5:37:56:28:4b:9b:7b:0b:bc:da:
5e:41:3b:28:1e:3f:ad:18:75:5b:35:81:29:1d:02:b1:c1:0e:
04:55:c0:66:77:44:5d:17:06:4b:53:d0:a5:2c:9d:e6:b1:83:
38:65:40:9d:e9:b1:26:2c:d1:37:ac:dc:f1:b2:71:6a:6f:73:
5e:61:6a:82:11:80:f8:d2:14:40:b6:13:aa:ea:62:8c:8d:75:
5b:83:44:ce:14:5c:3b:ef:6b:81:71:db:43:9a:bd:e7:85:c3:
1c:a8:33:53:e9:24:6a:a8:34:7e:25:74:ec:37:9e:c4:49:bd:
47:f5:0f:0f:0a:39:76:51:be:dd:f9:10:60:42:c2:8c:49:5c:
05:0c:98:4e:55:4f:78:eb:cb:c4:e6:32:8e:39:89:a6:b5:8f:
b8:cf:bf:14:c9:67:f3:6f:09:41:de:e4:05:83:24:0d:2f:d3:
59:9b:ef:0c:e3:e0:ca:bd:2e:ad:91:cc:54:29:ff:c7:cd:8a:
77:9a:32:b5:a7:18:92:db:9c:92:ff:7e:78:4b:ca:e0:a6:3b:
7e:0d:92:ae:d1:af:25:89:db:00:b5:ad:7b:27:cb:f9:33:39:
97:de:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org