Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w2M_UFuTLaMdsOi_zDtHwiRXA1E.roa
File: w2M_UFuTLaMdsOi_zDtHwiRXA1E.roa (raw, json)
Hash identifier: u+RA6SDZP7I3d7JOIK9XpRmoXOaNArWWPemV9Xxusuw=
Subject key identifier: C3:63:3F:50:5B:93:2D:A3:1D:B0:E8:BF:CC:3B:47:C2:24:57:03:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4C2B3A1FF46C003D0DD9505EF7705DF1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w2M_UFuTLaMdsOi_zDtHwiRXA1E.roa
Signing time: Thu 31 Aug 2023 15:16:55 +0000
ROA not before: Thu 31 Aug 2023 15:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.110.0/24 maxlen: 24
195.178.111.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 06:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:2b:3a:1f:f4:6c:00:3d:0d:d9:50:5e:f7:70:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 31 15:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3633f505b932da31db0e8bfcc3b47c224570351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:07:4e:dc:49:10:7a:1e:c4:d6:0e:7b:e6:
be:6d:14:fb:04:90:fa:ec:2c:80:7c:b7:21:9a:b2:
b8:02:d6:bf:7a:69:52:6a:8e:35:24:5b:0b:d5:fa:
c0:bc:95:4f:9e:8a:f7:ea:17:75:6c:28:71:4f:5d:
b9:65:9b:13:c6:a8:b1:3b:1f:97:49:f3:90:e0:fb:
75:f9:f9:50:c9:8f:2e:c4:24:57:74:6c:5b:0a:6b:
07:39:3d:ef:69:d9:18:df:a0:f8:bf:a6:bc:a5:ea:
7a:e2:a0:81:40:92:39:2c:f1:6f:48:7f:00:a7:0b:
b6:b1:fb:45:c9:e2:16:43:4b:ae:f5:33:a6:27:6a:
a6:fd:0c:81:ee:a6:e3:db:5e:5d:b6:82:fc:0e:c9:
97:29:84:d4:a4:81:a8:2c:31:42:ba:eb:79:55:73:
8b:a6:25:8f:f1:ef:6e:83:7f:99:4f:fb:77:b9:90:
b1:d0:ec:f5:3b:2c:22:bd:c1:2e:40:70:ef:99:db:
32:9d:b5:19:89:4c:5b:93:4f:5e:78:18:93:63:98:
e4:19:fd:e3:d5:38:93:aa:8f:96:43:e1:dc:96:d0:
7e:b6:da:6e:45:95:95:f2:91:df:88:40:34:55:25:
45:19:20:08:3e:e6:19:30:4e:71:3e:17:73:31:f9:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:3F:50:5B:93:2D:A3:1D:B0:E8:BF:CC:3B:47:C2:24:57:03:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w2M_UFuTLaMdsOi_zDtHwiRXA1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
193.37.47.0/24
195.178.110.0/23
Signature Algorithm: sha256WithRSAEncryption
48:f7:5e:45:b5:86:f7:62:bc:45:56:7e:18:c0:0a:9e:47:c6:
6a:e2:6e:30:7c:f8:93:58:9e:0b:ed:fe:37:ca:27:e3:f0:4b:
d7:c8:94:66:f6:82:be:f3:65:8d:a5:89:b3:e0:b3:25:04:aa:
92:7f:f9:08:f8:b0:1a:b0:6e:65:db:86:97:21:70:ca:79:39:
19:72:81:56:54:6f:07:33:a0:cc:55:af:63:69:9f:af:37:13:
3c:98:d7:58:33:6e:64:64:c2:2d:99:cf:70:9a:e8:38:cc:4a:
ed:1c:3d:7c:88:a2:1b:0d:75:53:b9:c9:de:d2:d6:1f:3f:06:
03:52:0a:1f:e3:29:09:64:dc:f7:1f:f4:18:98:47:29:aa:6b:
02:cd:0d:5a:67:94:e3:07:d6:49:20:5d:a8:b5:7d:63:41:5e:
d8:cf:d2:2b:c9:ea:37:ee:17:dd:48:b7:52:51:8b:cf:53:af:
a8:5d:03:34:ee:ca:08:05:17:65:72:fc:1c:6a:06:a3:e4:c2:
f4:9a:2c:7c:39:f3:f6:8c:78:e4:90:9b:53:56:ac:f3:14:a7:
31:14:62:cf:3e:5e:6e:33:9f:f6:b3:90:33:e3:68:3a:da:7e:
88:e2:e3:61:3d:b7:76:9c:32:b0:5e:a9:d2:67:bb:a4:0c:6f:
2f:b1:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:46 2024 by rpki-client on console-ams.rpki-client.org