Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/WKPoncSyNGJcIIBdEl4yDJB1W4g.roa
File: WKPoncSyNGJcIIBdEl4yDJB1W4g.roa (raw, json)
Hash identifier: 6HE2nBUgBUrWKYWnp2Z2Csl2y0PUaeEBZzr/7x4lpoI=
Subject key identifier: 58:A3:E8:9D:C4:B2:34:62:5C:20:80:5D:12:5E:32:0C:90:75:5B:88
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 01856F024C73BAD1DA35425B51F62D42908A
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/WKPoncSyNGJcIIBdEl4yDJB1W4g.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.159.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4c:73:ba:d1:da:35:42:5b:51:f6:2d:42:90:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58a3e89dc4b234625c20805d125e320c90755b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:af:a1:7e:03:05:26:8f:09:22:1d:08:c7:
14:e6:6e:40:50:84:16:5a:45:a0:30:5e:d5:6f:09:
5f:4e:3e:32:e5:64:5e:6f:c5:d7:36:df:24:6e:33:
06:ad:1c:de:3c:ef:7f:74:e6:d2:95:53:29:68:6e:
99:35:84:b7:7f:20:a2:2a:50:3f:3a:e3:2d:4d:92:
55:0f:b6:27:0d:d6:84:4d:c5:df:a1:ea:f2:53:32:
69:d9:12:16:3f:fb:62:14:08:2d:64:2a:77:85:f0:
02:2a:b9:ab:83:15:c6:48:cc:47:96:cc:6f:13:54:
4c:c2:0a:45:bf:f3:c7:56:84:f6:c1:52:19:b6:89:
ba:89:3c:e9:c0:1f:89:96:a9:8e:c0:05:f1:09:fe:
fa:f8:8c:ad:32:82:8d:29:23:f7:cf:bc:d2:3d:9c:
5b:63:54:4e:19:23:54:0c:b8:3a:de:e0:07:1e:b3:
f3:ad:fc:30:11:94:11:d7:8a:c7:fa:5d:75:22:ed:
67:92:da:19:3e:d3:1b:99:8a:69:c6:44:32:09:9a:
29:d4:c6:fc:5b:05:00:ca:a4:93:a4:a1:09:3c:86:
b0:4a:a2:76:25:8f:13:65:fd:3e:e0:41:b5:07:51:
ce:56:89:8b:0a:88:df:c5:32:75:1a:18:c6:29:89:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:E8:9D:C4:B2:34:62:5C:20:80:5D:12:5E:32:0C:90:75:5B:88
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/WKPoncSyNGJcIIBdEl4yDJB1W4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.224.0/22
Signature Algorithm: sha256WithRSAEncryption
46:42:1f:4c:09:e8:a9:80:79:ad:27:0a:72:7c:9c:0f:71:f1:
70:2e:bd:f8:64:b0:33:e8:f2:1a:17:8c:4a:87:ca:1f:38:a2:
d5:42:ef:76:7e:b5:80:a1:21:c0:46:85:d9:6e:35:ef:3b:a0:
5b:26:bc:7e:f4:e7:09:62:be:93:40:35:b8:06:ea:f2:24:bb:
b8:36:c5:ca:06:6e:4e:e1:62:9d:ac:e8:56:f7:7f:e0:28:ec:
92:8a:67:ea:ed:ea:83:f4:46:43:29:e9:c2:ab:57:ef:d9:0a:
84:5c:2a:0f:31:f0:20:2e:c5:d7:d6:a8:0b:cb:68:92:9f:91:
d6:32:e7:c1:ac:51:26:3f:2d:4d:e3:fc:7e:c4:88:a5:a5:8c:
e7:4d:7b:9e:e2:1d:68:0e:f4:ac:c2:cf:6f:99:1f:52:ed:a2:
91:5b:19:10:47:2d:0c:6d:8e:a1:8a:c5:80:67:94:1e:a0:e8:
ac:35:86:b9:bf:de:8d:11:09:7d:e7:34:71:5d:b4:b5:42:46:
26:07:96:1f:89:80:ee:1c:6d:c0:f0:fa:0e:f9:6c:86:ee:0d:
bb:ab:c4:b3:b1:19:d0:47:a7:7c:ae:4b:45:84:8a:39:3f:a9:
00:59:bf:f3:de:0a:9a:6b:c1:7e:0d:8b:67:f2:1b:84:95:0d:
fd:46:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:52 2024 by rpki-client on console-fra.rpki-client.org