Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wqtlUcLioG-QVunPUpREcllbx-k.roa
File: wqtlUcLioG-QVunPUpREcllbx-k.roa (raw, json)
Hash identifier: xOlIlazBuKXqAYmmBPUk1pQCISXUW566r2xrTK56ruU=
Subject key identifier: C2:AB:65:51:C2:E2:A0:6F:90:56:E9:CF:52:94:44:72:59:5B:C7:E9
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018626BBD5545EF0F4D0B28DAC99F4CDA939
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wqtlUcLioG-QVunPUpREcllbx-k.roa
Signing time: Mon 06 Feb 2023 12:38:09 +0000
ROA not before: Mon 06 Feb 2023 12:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 45.143.98.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 19:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:bb:d5:54:5e:f0:f4:d0:b2:8d:ac:99:f4:cd:a9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Feb 6 12:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2ab6551c2e2a06f9056e9cf52944472595bc7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:92:6c:d2:47:d7:d9:a3:8e:93:52:f9:f4:
5c:44:0a:64:8d:10:b0:a0:09:e6:a1:4b:52:76:0b:
20:49:85:3e:ac:d1:9c:ae:4d:22:56:b6:65:df:d2:
3a:29:d5:33:69:39:3f:6b:4e:9b:b5:71:7c:cb:e1:
5f:3d:95:5e:d3:54:c4:86:ff:e2:99:8e:f6:7a:3f:
54:3f:c5:49:ae:f9:4a:4b:c5:1e:cf:5b:c7:21:10:
39:2f:f7:55:82:e7:cd:5e:63:a3:36:2e:ff:2c:77:
26:62:17:fe:e5:f8:be:d0:2e:66:bb:fd:00:5e:53:
cf:d6:b2:85:ae:e9:29:3d:02:9f:4d:62:3f:d0:f4:
91:db:3c:1a:01:04:b1:00:38:a0:4f:9c:d0:10:0e:
22:1e:fe:2e:36:81:a4:44:8f:3e:70:23:3b:d6:ec:
5f:9f:c1:ef:07:54:1a:ce:5c:15:f4:39:c5:88:6b:
08:cf:8c:bf:66:17:90:aa:11:cd:b4:46:59:0d:b7:
3e:b4:eb:39:da:4b:65:74:19:1d:34:f8:6e:05:43:
6c:fe:f0:2a:32:33:8f:20:b9:2f:58:58:3b:5c:33:
2d:29:7e:ad:a6:b5:ba:f5:d4:42:9c:bf:11:7b:e4:
a7:bd:b9:7c:d6:57:51:d0:43:8c:b7:c6:73:9c:95:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AB:65:51:C2:E2:A0:6F:90:56:E9:CF:52:94:44:72:59:5B:C7:E9
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wqtlUcLioG-QVunPUpREcllbx-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.98.0/24
185.148.241.0/24
185.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ba:d0:f4:83:d8:b7:db:54:bd:74:18:33:1e:3c:40:e6:3d:
8e:e2:79:d0:1f:66:bb:0c:3c:55:f3:b1:01:7f:a9:cf:e7:f2:
58:c0:48:d0:44:59:f1:6f:fd:f6:53:68:b9:fd:9d:1f:1e:4a:
a5:f6:33:97:08:df:71:dd:7a:b1:78:18:fa:6a:22:92:29:12:
99:8e:df:aa:35:42:14:b2:ae:5a:c7:57:52:79:84:a3:4c:35:
7b:30:57:cd:19:b3:e0:66:dc:f4:ce:9e:eb:5e:74:38:57:c2:
41:e5:c8:23:61:5f:29:89:d8:ee:e3:51:25:c1:06:d7:fd:be:
6b:c8:60:6c:62:e1:77:24:51:72:95:8d:cd:29:b2:1f:d0:d0:
04:ed:a1:df:42:ba:59:31:a4:92:d9:42:08:49:bb:5f:a6:1d:
d4:94:36:d8:cf:ac:71:2b:11:2b:c7:24:88:69:3c:95:fe:36:
e9:d9:11:91:3c:f7:c3:d0:82:8b:cb:bb:06:71:1a:5f:44:bc:
47:39:6c:e1:a0:db:d1:36:a1:ba:a8:90:49:ac:ec:27:16:ef:
de:38:3a:b7:b8:2e:e6:fc:3b:04:e6:31:82:2b:8d:eb:72:0e:
e4:8f:33:56:d2:2f:7e:ec:38:ca:79:7d:8a:c5:26:6c:16:50:
93:3f:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org