Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/wLEasSiRdO3FBeqhepVjNV3ISKI.roa
File: wLEasSiRdO3FBeqhepVjNV3ISKI.roa (raw, json)
Hash identifier: YNT7PZPHcL1HeBD2j0YrViFYuJWS6/qfv7cqNM+X2+0=
Subject key identifier: C0:B1:1A:B1:28:91:74:ED:C5:05:EA:A1:7A:95:63:35:5D:C8:48:A2
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 0186B74ECE687662B08753DF0C64E3DC67D8
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/wLEasSiRdO3FBeqhepVjNV3ISKI.roa
Signing time: Mon 06 Mar 2023 14:24:00 +0000
ROA not before: Mon 06 Mar 2023 14:24:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48886
IP address blocks: 45.91.68.0/24 maxlen: 24
45.91.68.0/22 maxlen: 22
45.91.69.0/24 maxlen: 24
194.69.16.0/24 maxlen: 24
194.69.16.0/20 maxlen: 20
194.69.18.0/24 maxlen: 24
194.69.24.0/24 maxlen: 24
194.69.20.0/24 maxlen: 24
194.69.19.0/24 maxlen: 24
194.69.22.0/24 maxlen: 24
194.69.30.0/24 maxlen: 24
194.69.31.0/24 maxlen: 24
194.69.27.0/24 maxlen: 24
194.69.26.0/24 maxlen: 24
194.69.29.0/24 maxlen: 24
194.69.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:4e:ce:68:76:62:b0:87:53:df:0c:64:e3:dc:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Mar 6 14:24:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b11ab1289174edc505eaa17a9563355dc848a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:24:0b:06:ef:35:f9:60:7a:11:82:a5:28:
bf:6c:c8:c2:a9:06:a1:d0:7b:a2:a0:d4:41:e6:9f:
c5:f2:e2:a1:d7:92:11:54:86:aa:0c:e7:43:a7:f1:
79:ca:0a:39:5a:8b:08:42:06:4f:be:8a:c7:f0:89:
cc:4f:0f:67:85:95:82:4f:80:85:10:5b:e2:d6:15:
28:d6:e6:ce:9b:ca:59:a0:af:f7:0c:e9:24:46:15:
d9:8b:10:3c:b5:e4:ef:19:bd:ce:05:df:cd:65:1e:
24:e7:91:2a:df:37:0b:fa:81:1c:fa:22:50:dd:49:
3b:d7:3b:a7:f4:16:92:ef:4b:43:0b:4f:fc:26:4f:
26:3c:f2:f3:1b:75:e2:d5:94:b8:07:80:d7:fa:50:
96:26:fd:49:95:23:fd:a5:5c:80:1f:9f:31:b7:ed:
a6:33:17:e9:6a:e5:a4:ba:94:64:76:f2:80:fc:80:
cc:d6:56:e0:1b:77:d2:55:7d:ca:c8:db:65:fe:40:
60:0b:15:80:37:09:09:74:bf:6a:e4:04:f9:60:72:
66:30:fc:e7:a9:a4:1e:9e:47:4b:a5:72:c3:f1:9b:
a6:d1:65:65:33:2f:9b:5c:1f:0c:33:f3:79:da:8d:
ab:9a:99:b8:04:f9:29:fb:fd:24:fe:8c:d4:83:fe:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:1A:B1:28:91:74:ED:C5:05:EA:A1:7A:95:63:35:5D:C8:48:A2
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/wLEasSiRdO3FBeqhepVjNV3ISKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.68.0/22
194.69.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:6a:bc:22:78:a9:cb:58:09:75:0c:33:22:4d:9a:c1:a5:83:
65:db:ad:a5:be:8c:23:3b:d1:e7:00:70:33:5a:31:a9:86:42:
5a:f9:1e:c5:51:13:97:06:71:76:de:61:ae:f4:70:17:51:1d:
ce:da:ce:b8:3a:a0:55:2d:43:2d:ac:14:8a:74:4e:e3:48:2a:
aa:ab:8c:aa:ad:c1:00:82:c2:69:45:aa:64:1b:ee:ec:fe:97:
42:c9:6b:37:54:9a:21:f5:57:b2:2c:39:8d:be:0b:78:3f:65:
dd:7b:47:42:0b:7e:01:4f:74:97:63:f1:d4:49:17:51:b4:38:
0e:3f:99:06:9f:b3:c8:87:49:4a:da:cf:31:46:44:9a:03:3d:
57:07:d3:4a:34:8e:69:4e:9b:53:fa:20:6b:c6:44:d5:df:7d:
af:56:51:5b:af:b8:01:4e:91:08:96:89:b2:d7:11:8e:8d:6a:
53:d6:3e:0f:e8:16:b2:a3:68:fb:c3:20:f3:cb:29:90:fd:36:
7b:86:bd:1e:1a:27:4f:db:15:69:d5:5b:e8:ea:3d:86:c2:ec:
01:1d:29:3a:bf:cc:6e:6c:b4:cf:85:1a:07:52:a0:42:7c:32:
a3:4b:47:95:67:6a:e1:de:23:1a:74:91:18:b5:dc:4d:d5:9d:
83:cd:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org