Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/WdwTzUzfkz2T-PtyVL8hXed-Gy4.roa
File: WdwTzUzfkz2T-PtyVL8hXed-Gy4.roa (raw, json)
Hash identifier: Pg4Td1vWrGz6ISk6mHDYYa0Q3cng73ZGcBrj4p6oPZA=
Subject key identifier: 59:DC:13:CD:4C:DF:93:3D:93:F8:FB:72:54:BF:21:5D:E7:7E:1B:2E
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 0185720C74F24F69A89930F8DE7E74858D3D
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/WdwTzUzfkz2T-PtyVL8hXed-Gy4.roa
Signing time: Mon 02 Jan 2023 10:34:57 +0000
ROA not before: Mon 02 Jan 2023 10:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200023
IP address blocks: 194.176.127.0/24 maxlen: 24
45.82.184.0/22 maxlen: 22
2a0e:7180::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:74:f2:4f:69:a8:99:30:f8:de:7e:74:85:8d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Jan 2 10:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59dc13cd4cdf933d93f8fb7254bf215de77e1b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:f7:09:49:91:15:ad:25:35:93:59:43:7e:
24:c5:10:01:4b:c7:fb:a3:15:59:89:22:80:46:55:
4d:8a:18:11:ed:c5:20:c5:97:90:4f:10:9e:66:0c:
c0:7f:b8:33:15:04:96:83:e8:c3:76:94:39:55:69:
37:0c:8d:9c:f6:12:91:36:ad:ca:9e:61:86:04:74:
0a:84:a1:33:f3:50:f3:34:aa:48:95:17:b6:a2:1d:
68:6e:44:dd:db:8f:d7:67:70:a8:28:fa:0e:a5:ed:
d5:19:21:2f:6c:73:ca:cc:d5:5c:fa:b4:37:17:17:
9e:97:67:54:9c:79:4a:aa:dd:bc:86:6a:25:7a:bc:
61:e1:7c:3b:a5:ea:5c:6e:1c:88:38:d1:87:f0:fd:
b2:8c:5d:86:1b:fc:27:a0:c0:58:87:5d:a1:82:ae:
e2:58:90:1c:1f:d6:93:a7:bc:20:75:4d:ab:1c:46:
ae:48:da:06:6f:42:d5:96:34:42:95:e4:50:8b:7e:
d9:cc:fa:fd:73:3c:e3:9f:1a:e7:62:ae:ab:10:a6:
f6:74:3b:b6:9a:0a:ae:39:9c:3b:a2:b6:c3:7f:0a:
8e:36:6a:8e:58:92:14:e6:5d:69:18:bf:8a:40:35:
6c:37:41:6d:de:fc:17:1c:f3:92:f2:99:88:bd:f2:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:13:CD:4C:DF:93:3D:93:F8:FB:72:54:BF:21:5D:E7:7E:1B:2E
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/WdwTzUzfkz2T-PtyVL8hXed-Gy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.184.0/22
194.176.127.0/24
IPv6:
2a0e:7180::/29
Signature Algorithm: sha256WithRSAEncryption
bf:61:bc:ea:30:ce:17:49:0d:a2:ee:d5:d7:c8:3a:bc:f1:0f:
a8:1f:25:ae:9f:7b:15:45:cc:99:72:9e:2f:77:ca:14:75:f4:
ca:cf:3e:92:83:89:77:32:3c:03:45:a8:ab:fe:2a:f5:7b:70:
b6:f1:6d:3b:c3:82:bc:40:4f:4f:1f:b6:94:e7:3e:d3:65:1e:
16:89:a2:ff:89:3c:5b:f9:b6:da:83:57:f9:7a:2d:22:67:83:
fc:2c:f9:d9:d8:e7:2f:a4:97:df:cb:ce:1b:7b:45:0a:99:03:
4e:9c:db:74:2d:72:c4:d3:6d:84:7d:aa:8f:45:b6:f2:c6:5e:
fa:87:f7:6a:73:35:8d:cb:84:7a:3e:f3:b0:43:ea:dd:0c:55:
78:65:57:89:2d:f0:65:a0:b3:fb:d1:42:64:e7:91:f6:79:e5:
c3:f8:01:70:56:76:6b:ba:97:68:34:51:7a:f8:ff:c8:87:93:
ea:a9:4d:a1:0d:37:79:d3:d0:1e:45:88:4a:83:8e:05:63:b6:
30:f5:3a:c8:b4:f6:cf:ac:48:47:0d:10:6e:04:48:59:f2:c7:
0c:30:0f:d0:4b:a2:24:0e:2d:5d:56:c3:ed:d3:bd:e5:e5:32:
d2:65:be:53:07:7c:f1:18:ee:74:44:80:49:91:a7:89:ab:a3:
dd:56:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org