Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/WTrfufz5cOpB3DUAytDbrcwIDPA.roa
File: WTrfufz5cOpB3DUAytDbrcwIDPA.roa (raw, json)
Hash identifier: D7o0Ua4ifn8Rz223uvL9rpetDjGMbnXqXCJObK10XzI=
Subject key identifier: 59:3A:DF:B9:FC:F9:70:EA:41:DC:35:00:CA:D0:DB:AD:CC:08:0C:F0
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 01856C014F11377AA8ED68BEFAABF48C30D2
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/WTrfufz5cOpB3DUAytDbrcwIDPA.roa
Signing time: Sun 01 Jan 2023 06:25:03 +0000
ROA not before: Sun 01 Jan 2023 06:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 45.92.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:4f:11:37:7a:a8:ed:68:be:fa:ab:f4:8c:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 1 06:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593adfb9fcf970ea41dc3500cad0dbadcc080cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:ec:ef:9a:29:e4:cc:7e:88:42:c4:45:60:
13:80:f1:3c:c8:eb:66:85:e2:5e:1e:38:53:81:54:
4f:b6:cc:8f:88:8c:44:b8:df:46:6c:55:90:ee:91:
6d:49:dc:e6:d8:24:79:6d:a5:55:a4:5a:5c:93:3a:
dd:03:d8:29:94:dc:cb:dd:c7:ba:5d:0b:4e:1e:0c:
a6:87:26:3c:fa:77:34:a8:61:c2:6c:e9:54:10:50:
00:9a:e2:98:e9:68:74:30:89:2f:13:de:e2:6f:23:
34:12:e7:78:5f:65:3b:f5:e1:26:38:31:79:86:68:
7a:95:e3:90:fb:1e:d2:d1:ef:4e:03:73:a2:f2:ea:
4b:2b:93:85:03:1f:46:76:ff:13:77:d2:be:90:37:
1a:41:24:40:db:51:df:fa:62:cf:a4:ce:32:68:48:
a6:a0:fb:9e:98:5b:5f:48:3e:b6:12:b6:bd:6c:1b:
4f:b5:3c:da:16:d3:3c:94:41:ec:9c:8b:a9:a0:d2:
aa:e7:91:7d:d1:85:70:7b:41:15:b8:cd:d9:2a:71:
61:69:a1:cd:6a:46:9d:c9:9e:ba:5b:9f:2a:20:c9:
46:cc:e5:1e:ea:7e:f2:7f:bb:8a:8d:d4:cd:13:5b:
36:62:8c:27:0a:22:80:04:b4:86:96:3c:5d:6f:0d:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:DF:B9:FC:F9:70:EA:41:DC:35:00:CA:D0:DB:AD:CC:08:0C:F0
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/WTrfufz5cOpB3DUAytDbrcwIDPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8c:93:d8:32:ca:32:75:b5:e4:66:01:aa:15:ce:f4:8f:f3:
f4:5e:63:76:11:a4:ad:56:34:24:22:77:d4:4f:df:26:74:76:
5e:f9:e3:5b:43:96:2c:84:84:cb:2c:0a:ab:5e:e5:57:e4:a6:
04:ab:62:43:06:23:31:91:c1:b4:f2:6d:3f:d1:93:21:d3:35:
8c:11:fb:54:8e:ee:22:2d:7f:ab:07:4e:94:1a:e0:32:71:ac:
8a:f5:d8:48:be:6c:e3:d6:60:c3:77:8d:11:62:6e:17:8b:13:
f5:eb:3e:24:25:b0:d2:18:d5:ea:cc:03:26:bc:46:0b:07:6d:
a7:e9:ae:d7:ab:77:46:47:3b:60:0e:76:d2:ca:c3:f0:e9:76:
ab:6c:d1:b2:b3:d5:b1:a0:25:49:32:33:45:82:b2:d6:7f:bd:
0d:7a:df:d6:57:ba:53:58:bb:5f:c3:cf:05:e3:39:e9:98:fc:
38:21:2b:4e:63:b3:c1:db:4c:21:88:d6:45:6e:c1:0b:76:6d:
ad:e0:3f:9f:c7:6c:38:d0:f3:38:cd:7a:56:75:7d:94:4d:9e:
06:4d:fb:eb:63:33:50:e4:db:3f:86:cd:bf:3a:7c:b1:9a:c4:
df:38:4e:02:76:0c:9b:f1:8a:43:5a:74:fc:66:61:91:db:f9:
4c:32:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org