Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/wKUSwNb2agAnpog2mbeKjZS8U18.roa
File: wKUSwNb2agAnpog2mbeKjZS8U18.roa (raw, json)
Hash identifier: Bq72C5KB9cFaR/SHRsthPz/f62PT1p+UnBzY9SzDFDc=
Subject key identifier: C0:A5:12:C0:D6:F6:6A:00:27:A6:88:36:99:B7:8A:8D:94:BC:53:5F
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018CC3B6F3BF39D74756179B964856C9709B
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/wKUSwNb2agAnpog2mbeKjZS8U18.roa
Signing time: Mon 01 Jan 2024 06:29:56 +0000
ROA not before: Mon 01 Jan 2024 06:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200181
IP address blocks: 45.159.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 30 May 2024 10:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f3:bf:39:d7:47:56:17:9b:96:48:56:c9:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 1 06:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0a512c0d6f66a0027a6883699b78a8d94bc535f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:50:ce:37:b4:51:ca:bc:e3:95:32:c9:dc:
38:54:49:83:f5:b5:81:24:f9:76:d6:84:bc:3e:96:
ce:f0:d1:df:4b:2c:b3:e3:fa:fc:c1:3f:8b:8c:71:
15:e7:c4:94:36:d4:52:25:11:ab:82:00:a8:d0:f2:
93:30:63:66:dc:f1:c6:d3:19:a1:f3:4c:a7:9a:34:
12:a3:02:33:96:31:b5:3e:60:18:0c:04:47:4b:62:
4b:1d:ef:c0:25:b3:f1:64:ad:25:c0:12:c9:98:15:
91:4c:90:50:9d:57:f2:0f:7f:d0:af:eb:fd:12:0b:
d7:0f:73:da:84:e8:76:09:e1:33:63:c6:3c:d0:38:
72:55:ed:13:f7:8d:5c:01:db:73:81:4c:d5:5d:80:
c1:ba:87:a4:fb:74:4d:1c:b7:bc:0b:d5:5e:22:e9:
53:98:0c:cb:5f:19:ea:f9:38:dc:8f:e2:26:ea:32:
e3:87:60:22:55:ab:73:b1:da:d4:31:df:97:76:a3:
75:57:75:f9:85:a3:8f:3d:9a:0f:d2:e3:85:7b:a5:
7d:36:80:cd:c0:15:5f:c6:23:30:0a:2a:86:4d:53:
f0:3b:7b:54:a6:e5:9c:e8:10:0a:f2:64:f2:12:1f:
84:9f:9e:a4:6d:95:a9:45:67:4c:81:90:ac:ad:ca:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:12:C0:D6:F6:6A:00:27:A6:88:36:99:B7:8A:8D:94:BC:53:5F
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/wKUSwNb2agAnpog2mbeKjZS8U18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
29:10:13:3e:e8:f6:36:48:49:2f:eb:41:09:4a:3a:32:61:9d:
ea:f5:26:e2:e3:8f:cc:43:b1:fc:d1:e1:dc:c4:4d:9e:64:cb:
3d:a7:20:ed:22:3b:16:02:ff:94:87:74:3a:c2:a8:b4:4e:5c:
21:b6:08:ec:05:d3:b6:5a:19:49:10:88:1a:9d:bb:18:29:73:
43:6b:a4:d9:01:99:14:c6:01:c4:26:01:31:00:b2:b2:19:35:
22:22:36:69:34:97:ff:c0:6b:6e:44:b4:89:ee:58:51:c4:9c:
76:67:22:55:29:72:65:9b:7a:db:24:62:5f:37:72:e6:82:66:
70:36:ae:0b:18:21:d1:94:1c:5e:39:92:23:43:75:c5:01:a8:
53:83:6b:68:00:31:37:77:7a:87:54:bb:52:70:ac:bd:b2:80:
46:79:c4:40:03:38:cc:db:0e:65:99:31:c2:16:5d:86:be:74:
e9:52:df:ac:7b:9c:9a:c6:96:c1:fd:2f:e0:37:fe:70:8b:7e:
66:b1:03:c9:f0:ba:01:9b:03:fc:28:16:11:ff:05:8d:a0:34:
cc:fd:2b:3e:f5:3d:55:6e:e6:dc:9e:49:af:63:5e:5c:78:22:
47:38:df:8d:94:e0:57:3d:bd:e4:00:19:4a:aa:15:20:c7:c3:
ba:c4:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 13:19:03 2024 by rpki-client on console-fra.rpki-client.org