Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W0kJJVyfta49_tzwWrQF4RVqXmU.roa
File: W0kJJVyfta49_tzwWrQF4RVqXmU.roa (raw, json)
Hash identifier: fK2Ef1Ha7RIEwROXeocIk5SR0/HMZ7IHsqMo78ERJfs=
Subject key identifier: 5B:49:09:25:5C:9F:B5:AE:3D:FE:DC:F0:5A:B4:05:E1:15:6A:5E:65
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C80B1353CB9B239BC158B0BAE9EDAB2A1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W0kJJVyfta49_tzwWrQF4RVqXmU.roa
Signing time: Tue 19 Dec 2023 06:09:06 +0000
ROA not before: Tue 19 Dec 2023 06:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:b1:35:3c:b9:b2:39:bc:15:8b:0b:ae:9e:da:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 19 06:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b4909255c9fb5ae3dfedcf05ab405e1156a5e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:ad:fe:38:e7:12:e7:e7:6f:5d:20:35:cd:
d4:9c:93:b9:14:c9:2a:05:12:7c:66:91:d9:99:af:
6d:47:ee:96:a8:e1:dd:e8:b7:33:1b:9b:04:8f:e8:
6f:fa:d1:80:50:91:b7:02:56:70:73:b6:11:ae:03:
60:8d:5b:65:9c:73:e0:55:10:ac:d7:15:ca:c9:5b:
09:d0:9e:7b:49:c9:f5:04:4a:b2:9f:45:c1:21:4f:
0e:be:a0:0d:4a:50:7b:4c:d4:70:88:38:0f:c6:f8:
b1:8e:a8:8f:d9:eb:2a:bb:f0:72:78:14:83:5c:6b:
18:cd:ae:10:25:19:79:1f:61:91:3b:34:ca:06:a9:
49:6d:5a:ac:63:23:51:38:11:5e:bc:b9:72:5f:a6:
8b:22:8c:10:f4:f3:c2:62:eb:5b:01:01:c4:b9:c1:
08:b7:78:fa:ee:f1:67:9d:93:fc:a5:56:34:32:33:
ef:63:fc:e5:85:b6:a0:c2:0b:3e:47:f0:85:b2:4d:
ce:0b:d0:5d:6f:b1:4d:a5:5d:98:81:9e:b8:56:cf:
12:66:a1:31:f2:54:c7:52:57:b2:22:58:ac:75:d0:
48:52:15:b1:64:d2:ba:9b:83:f6:2c:e5:40:1e:18:
cc:8e:ab:12:13:b6:00:c0:1e:0c:33:26:6f:e4:4e:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:09:25:5C:9F:B5:AE:3D:FE:DC:F0:5A:B4:05:E1:15:6A:5E:65
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W0kJJVyfta49_tzwWrQF4RVqXmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ae:85:6b:4b:9f:96:ea:76:a0:c2:dc:dc:e3:98:e7:86:ad:
c4:b0:90:55:d7:18:60:4e:7a:49:30:73:db:7e:04:52:a0:d9:
cb:38:21:57:cc:1a:d5:cc:72:fa:5d:ab:67:10:3c:b4:58:2f:
e7:e6:51:86:88:b0:f6:e5:95:f1:19:22:9f:2d:49:a2:24:aa:
ee:1a:5c:6b:f9:61:3a:2e:8e:2d:51:75:21:63:02:e3:b1:b8:
e3:5c:06:8d:e3:0a:da:e2:fd:8e:d2:c7:8e:7e:12:75:62:a5:
80:45:26:12:2a:5b:a9:71:9d:b0:b5:54:d6:f8:73:4c:7b:27:
20:61:67:47:bf:bd:ba:9f:bf:79:67:6b:fa:bf:8e:90:37:0b:
be:68:1e:b3:e4:37:7e:98:de:42:7c:38:d7:b7:ee:27:c8:83:
c6:22:8b:a5:d1:c5:15:85:8b:23:8e:30:d7:0b:b5:24:68:96:
bc:3a:89:6a:a8:f2:17:b4:2b:80:14:df:67:ea:a5:b0:6a:58:
63:8a:54:53:87:c6:f1:35:49:b3:73:d7:01:82:15:8b:60:53:
64:eb:26:ab:ad:cc:e1:15:42:fa:b0:09:ea:46:04:f1:8a:93:
92:b5:b6:40:39:c4:cd:73:8f:a0:e7:e2:f5:3d:e6:c1:03:27:
58:02:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:45 2024 by rpki-client on console-fra.rpki-client.org