Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/WZrGgP9GTgEnSMYLzYsevw7cQAY.roa
File: WZrGgP9GTgEnSMYLzYsevw7cQAY.roa (raw, json)
Hash identifier: QZIPLC7fBe6atWcrErF+Wohrd+qiE8c2MpPJsftEc1c=
Subject key identifier: 59:9A:C6:80:FF:46:4E:01:27:48:C6:0B:CD:8B:1E:BF:0E:DC:40:06
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 01856D417727F0EEB0D3B7A12EBC036FE5D0
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/WZrGgP9GTgEnSMYLzYsevw7cQAY.roa
Signing time: Sun 01 Jan 2023 12:14:44 +0000
ROA not before: Sun 01 Jan 2023 12:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15695
IP address blocks: 45.93.87.0/24 maxlen: 24
2a00:cb8:353::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Mar 2023 01:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:77:27:f0:ee:b0:d3:b7:a1:2e:bc:03:6f:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jan 1 12:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=599ac680ff464e012748c60bcd8b1ebf0edc4006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:47:6c:62:2d:e7:42:c0:c5:08:eb:12:56:
91:88:42:9d:99:0d:02:02:13:4e:17:36:d0:b8:00:
bb:e3:72:46:f9:2d:6d:f9:3e:8d:35:1b:cb:62:fe:
24:e8:a8:a7:23:34:45:ab:3b:84:a1:85:ea:cf:9a:
6d:e0:bf:0a:75:f2:d3:eb:08:41:39:97:58:5e:cc:
d4:7d:3f:07:f6:63:86:90:71:3c:30:fe:3b:87:6d:
84:87:8a:d0:53:49:14:3c:92:be:6f:3a:bc:d5:6e:
61:ab:35:08:b0:0c:59:40:d2:52:b1:2e:a2:7a:cc:
91:a0:01:cd:ad:d9:3e:e2:b0:22:ae:7f:97:e6:c0:
5d:19:16:82:7e:9f:63:aa:01:0b:17:80:2a:c6:8c:
22:a4:6c:f0:19:0a:9d:67:34:ec:83:11:4c:12:2b:
fb:0f:3f:ca:a5:ea:c3:4a:6f:d0:a8:8f:1b:a9:a9:
d3:12:98:68:1c:99:78:e3:cf:eb:4b:78:9b:2a:06:
04:3d:9c:f3:2f:b6:32:21:57:e5:1b:09:0b:18:2d:
c5:6a:9a:19:85:53:78:9a:81:a4:f8:fb:87:d3:5b:
46:7b:3f:ca:8c:72:60:d5:0a:06:09:70:ea:81:ef:
1b:c6:5e:10:39:60:4d:ab:d2:2a:ff:93:d4:16:6a:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:C6:80:FF:46:4E:01:27:48:C6:0B:CD:8B:1E:BF:0E:DC:40:06
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/WZrGgP9GTgEnSMYLzYsevw7cQAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.87.0/24
IPv6:
2a00:cb8:353::/48
Signature Algorithm: sha256WithRSAEncryption
a1:eb:02:b7:bc:ae:c8:bc:d3:b6:93:b5:b3:80:08:d2:90:de:
0b:e7:14:5b:c6:0a:45:bf:a0:dc:84:88:7b:38:2e:00:91:ef:
88:6d:3f:93:22:6d:b5:ba:e6:26:5e:10:89:50:09:4f:b4:4e:
59:85:7b:9c:32:ae:65:38:7e:0c:be:ae:5a:43:bf:c9:6c:02:
d4:da:c4:fa:d1:b0:ab:5c:ba:8f:28:95:2f:9a:14:01:76:1a:
cc:d0:0c:70:fc:8e:ef:28:2d:13:6b:fe:f1:14:35:ad:5f:80:
45:83:e5:a8:32:9a:f8:f7:c8:50:a9:2a:08:80:8f:fd:fc:b3:
ee:34:56:a3:63:67:25:6f:be:75:28:b2:62:56:7e:30:ab:7c:
0a:57:9c:7f:7f:9d:9d:a1:39:4b:61:7c:ab:d3:b7:d2:79:cb:
3d:29:ed:89:c7:9b:24:cf:cb:54:d3:2b:b7:05:f3:e9:ea:ff:
17:78:fd:32:ad:8f:3c:7e:79:e3:06:31:b4:d5:f9:f5:5d:09:
12:c8:1e:ae:f2:06:04:9e:37:b9:e3:48:0d:1b:08:17:4e:31:
61:0e:ee:17:94:55:9e:b2:15:c8:a9:19:82:99:35:ce:eb:cb:
0a:21:a2:6d:7c:26:3d:e9:f8:4e:9a:63:df:a2:dc:ce:4a:49:
ab:21:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:14 2024 by rpki-client on console-fra.rpki-client.org