Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/wPnz3XXDQVii0MAHb4345sj6K7k.roa
File: wPnz3XXDQVii0MAHb4345sj6K7k.roa (raw, json)
Hash identifier: FyG8sy8YlPmp9Eo0gGaeRaGuJNTWczq8yobx6EZUlDE=
Subject key identifier: C0:F9:F3:DD:75:C3:41:58:A2:D0:C0:07:6F:8D:F8:E6:C8:FA:2B:B9
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CD30AC78A2370BDE8CF04D4871C6F9E76
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/wPnz3XXDQVii0MAHb4345sj6K7k.roa
Signing time: Thu 04 Jan 2024 05:55:48 +0000
ROA not before: Thu 04 Jan 2024 05:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.139.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 17:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:0a:c7:8a:23:70:bd:e8:cf:04:d4:87:1c:6f:9e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 4 05:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0f9f3dd75c34158a2d0c0076f8df8e6c8fa2bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:c5:ad:42:e2:81:35:d7:50:58:42:fd:d6:
2a:f7:b4:74:01:b0:8d:bb:42:75:f5:b6:cf:fb:80:
a4:72:47:fb:68:87:59:58:a1:96:6b:68:45:d6:7a:
8c:01:9f:75:d7:24:c5:74:0e:fd:b0:0e:bd:2d:d1:
72:79:cb:ef:ab:3c:78:65:6f:61:a7:73:a8:9c:d8:
10:e2:d9:52:9a:3e:6b:5c:84:5f:24:75:3f:34:22:
d8:c0:96:ec:3e:63:75:f3:54:e4:68:55:1e:00:61:
68:25:b4:ec:12:79:79:ed:5d:8d:5a:e8:66:30:31:
77:65:4c:57:6f:4f:bc:21:bf:5b:99:05:de:fb:09:
c9:63:45:73:5a:8c:fb:e6:14:29:01:4c:84:11:c9:
f9:08:61:5a:d0:a0:8a:81:76:4a:ca:74:14:3f:51:
d3:21:7f:31:fc:94:5c:f4:53:98:7e:12:b4:f0:a4:
18:8a:6e:04:0d:d2:a9:f5:65:a7:b5:ce:60:ca:5b:
b9:6c:32:65:41:f1:1a:be:5e:37:d7:19:0b:8f:e5:
62:68:37:4d:fe:ca:6a:c1:bd:21:66:5c:99:c6:4c:
33:eb:f7:f8:a9:9e:8d:c2:23:26:89:61:69:13:10:
15:b0:67:c9:8e:f0:1f:ba:78:77:4f:02:e9:4c:7c:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:F3:DD:75:C3:41:58:A2:D0:C0:07:6F:8D:F8:E6:C8:FA:2B:B9
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/wPnz3XXDQVii0MAHb4345sj6K7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ec:21:e7:bd:3a:dd:70:71:0e:3e:78:84:b5:88:3f:60:2c:
28:99:de:38:d1:27:31:b3:f6:23:ee:d9:21:53:5c:77:8a:54:
b1:9a:7f:5c:39:7c:97:4d:d7:d2:27:97:23:fb:0d:e9:10:7d:
3a:b8:fb:20:21:dc:25:61:20:05:9c:55:22:37:32:2e:45:25:
71:e8:9f:e0:af:6f:e9:d9:92:06:5a:48:af:66:96:77:e0:1d:
55:a1:81:82:55:ba:0b:46:02:58:5f:d8:a1:de:a7:9f:2b:0b:
ac:58:94:19:65:cf:21:83:45:de:82:1b:a1:2c:d8:76:08:5c:
ff:3e:ee:bc:71:f5:6c:20:62:0c:a9:3c:ed:c7:e0:3d:aa:c7:
a9:61:dd:89:e5:52:f0:30:b1:35:36:ec:78:93:06:29:af:0e:
e1:de:5a:c8:32:87:ec:50:b1:89:49:49:e9:c8:ae:84:12:66:
92:fd:d3:2c:a5:47:11:42:37:00:b9:6d:ce:4a:90:56:93:f3:
de:32:a7:ec:ed:da:f3:eb:75:e5:13:bd:5c:d3:25:f0:43:cc:
2c:0d:e6:1a:89:05:c6:ab:fa:e4:f5:ff:56:23:12:36:c3:6c:
f2:f4:53:df:d3:42:97:45:5c:c4:23:0b:5d:3c:67:0d:7c:4e:
21:5e:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 20:47:13 2024 by rpki-client on console-ams.rpki-client.org