Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/wEU4So89-n2tOvgyPuUygU132j8.roa
File: wEU4So89-n2tOvgyPuUygU132j8.roa (raw, json)
Hash identifier: i/SoCMwMhGHKCyjEvaA3Lf6sGXiJuurPlWVHRA9PQ9U=
Subject key identifier: C0:45:38:4A:8F:3D:FA:7D:AD:3A:F8:32:3E:E5:32:81:4D:77:DA:3F
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 0185F2FA54146618075A8B108E8AD99F1FA3
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/wEU4So89-n2tOvgyPuUygU132j8.roa
Signing time: Fri 27 Jan 2023 11:26:09 +0000
ROA not before: Fri 27 Jan 2023 11:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 45.129.90.0/24 maxlen: 24
45.129.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:fa:54:14:66:18:07:5a:8b:10:8e:8a:d9:9f:1f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 27 11:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c045384a8f3dfa7dad3af8323ee532814d77da3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:6d:2f:35:46:f9:6c:f6:39:a0:f2:de:70:
5c:7d:d0:97:fa:36:33:28:7e:78:69:55:27:22:6d:
60:0c:d7:f8:46:ad:5d:a6:56:d1:36:05:e9:18:35:
eb:6b:f4:5e:86:9d:1d:3c:f8:7d:d9:2b:fd:73:6d:
e9:3d:10:4d:7e:0e:04:e5:63:86:7a:e6:f6:ca:1e:
b6:d6:94:14:a8:74:a8:25:91:35:79:9d:ac:4f:ee:
b7:09:39:ed:a7:ee:4f:b7:0a:27:23:5f:62:47:a5:
62:29:72:ad:29:4c:87:90:f6:6f:84:5d:91:de:60:
32:26:3e:eb:ea:da:e0:89:0a:db:87:94:96:65:86:
21:7e:e0:90:51:74:80:3e:80:61:57:6b:b8:e6:c3:
95:43:59:a5:3e:8b:8f:b1:8e:ba:f0:d9:1d:26:a3:
1a:48:a2:5c:b7:01:36:09:1c:94:d9:1e:e4:3a:a5:
28:3d:ce:17:4e:19:58:5d:ad:67:4e:f3:dd:e6:3a:
b0:71:42:47:0b:2a:a6:5a:4d:2e:b3:18:09:e4:4f:
38:ae:62:3e:7b:35:5c:03:88:8d:0f:ae:87:a0:e4:
fc:4c:ff:96:b5:54:24:82:99:21:d2:ff:70:81:32:
e5:64:af:fc:f6:b0:cf:5c:e3:ab:26:fc:5d:04:3a:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:38:4A:8F:3D:FA:7D:AD:3A:F8:32:3E:E5:32:81:4D:77:DA:3F
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/wEU4So89-n2tOvgyPuUygU132j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.88.0/24
45.129.90.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c0:a8:2d:87:dc:1b:69:77:38:d0:f7:11:33:75:46:c8:43:
70:fd:b3:f7:85:88:e8:2a:6f:9d:3b:95:86:d1:95:1b:0f:3a:
86:8c:f3:a3:9c:d2:9b:9a:02:e3:65:74:f3:7c:2c:bd:a5:16:
09:9e:9c:e5:6a:f9:60:5c:10:f7:16:6a:40:4d:29:f8:ee:f2:
ef:5c:56:98:2c:3f:38:2e:75:41:ef:4d:63:b2:2e:41:da:0b:
a7:43:0e:83:88:6d:e8:93:c8:b8:d2:11:c6:08:c5:d8:48:9e:
56:12:86:88:e9:37:11:18:e0:cf:cc:08:3d:58:1f:7f:60:da:
a6:5f:ef:cb:88:ce:2d:6c:8f:9f:f6:a6:b3:b9:81:0a:ef:6d:
6a:bd:81:b5:ac:d3:05:9b:9c:f8:1c:09:c2:73:16:e7:2a:bd:
bb:20:82:1e:6a:41:2b:77:54:ab:96:d5:50:a8:27:b6:0b:33:
cf:cb:88:0b:60:7e:64:c4:de:6c:19:20:2a:bd:95:42:b1:05:
31:eb:8f:80:2a:8d:b9:d3:b1:06:27:8a:60:3d:c3:63:ff:9a:
50:a3:5f:4b:0d:3f:1b:9f:39:09:ee:8e:67:ad:82:b7:49:16:
5b:c2:2b:25:b3:f6:a7:9f:32:68:13:b8:06:2c:c6:e7:33:21:
29:95:9e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:31 2024 by rpki-client on console-ams.rpki-client.org