Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/WeSVfLPKjS07TairWX2brzEHlsc.roa
File: WeSVfLPKjS07TairWX2brzEHlsc.roa (raw, json)
Hash identifier: T70q9QHXcyuX6ZDhEOzVU3FMnDL1oMLmdaKTCPXDidA=
Subject key identifier: 59:E4:95:7C:B3:CA:8D:2D:3B:4D:A8:AB:59:7D:9B:AF:31:07:96:C7
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01856DCAC3AA11F09B6D0FFC7E96B276DE27
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/WeSVfLPKjS07TairWX2brzEHlsc.roa
Signing time: Sun 01 Jan 2023 14:44:42 +0000
ROA not before: Sun 01 Jan 2023 14:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 45.129.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:c3:aa:11:f0:9b:6d:0f:fc:7e:96:b2:76:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jan 1 14:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59e4957cb3ca8d2d3b4da8ab597d9baf310796c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:6c:e5:66:38:ca:06:38:44:d8:2a:c1:6a:
38:8d:91:b2:57:44:f2:eb:9b:99:41:74:04:61:4b:
ea:ca:67:37:ba:0d:4d:76:8e:4f:b8:6c:8f:77:ea:
ef:68:27:ba:a6:21:18:cf:ea:4d:5a:c4:50:8e:e2:
87:57:45:d0:7d:f1:c8:01:d6:6d:59:6c:a2:01:97:
d1:57:2b:99:85:0e:74:45:d7:9f:f1:70:00:35:4e:
a2:91:17:fc:4e:2b:0f:82:07:97:14:1d:f3:e1:08:
53:ff:f1:da:74:42:17:07:98:22:00:64:2b:21:7c:
9a:19:c8:ec:0d:b4:06:cf:a9:7b:c4:8a:6c:a0:ef:
8c:bf:30:cd:bd:38:19:78:6c:14:35:a1:a1:90:9d:
85:17:07:3f:33:c8:d2:f4:6e:e1:d2:85:d7:28:f9:
10:75:af:8d:0d:9a:f4:04:0c:37:1e:0d:ef:83:56:
ea:c0:ed:16:95:9f:89:a6:68:30:91:2c:41:c8:82:
07:0d:bb:d1:30:82:69:77:9a:2d:8f:db:9b:9c:9c:
f2:5a:eb:f9:8e:53:27:44:bf:b6:81:86:4e:45:e7:
52:d9:4a:63:f5:95:3f:61:08:74:9a:26:80:50:3c:
cf:57:a4:c2:cc:51:07:d1:c9:ea:48:e4:29:50:af:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:95:7C:B3:CA:8D:2D:3B:4D:A8:AB:59:7D:9B:AF:31:07:96:C7
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/WeSVfLPKjS07TairWX2brzEHlsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:b7:f5:ad:d3:f9:5f:ba:7c:4b:c7:f1:9b:9d:94:97:58:6e:
f7:3e:90:c7:f4:72:6c:87:ae:2f:ca:7a:4d:68:20:d0:eb:b8:
f8:c9:bd:41:68:c8:ff:81:61:74:0d:3e:56:9b:06:fa:7c:f7:
5e:fb:f8:0d:80:34:71:eb:60:c6:37:a8:68:a3:cd:fa:7c:f4:
d7:d0:e5:89:ac:7c:40:0e:08:a5:4f:a7:6b:b6:a4:26:d7:f5:
56:4d:b9:5f:69:07:38:1a:a4:65:43:cc:aa:a1:62:8d:0c:d7:
6f:a4:91:84:95:8c:c7:73:85:e6:bc:6e:a7:76:cc:e4:88:37:
35:8f:92:2c:8c:bf:60:cf:04:65:6f:98:9e:a5:22:c7:1d:05:
a8:ef:78:d3:61:a9:44:46:a1:37:54:76:35:df:d0:43:6c:68:
f3:ce:a9:9c:72:f0:dc:92:77:f6:92:b3:f2:b3:b7:17:b7:01:
03:03:8a:23:ad:9e:a6:ca:5d:d1:1a:3c:47:47:ed:7e:db:f0:
b7:6f:61:16:a9:d6:2f:9d:8d:b5:93:5b:89:df:21:29:63:69:
01:59:57:9f:16:aa:ca:9b:2b:48:f4:02:bb:e5:2d:79:e6:f3:
e0:c3:22:51:b8:08:ba:0a:1a:31:af:55:43:25:91:66:12:ed:
57:df:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 16:55:08 2023 by rpki-client on console-ams.rpki-client.org