Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/W1T4q19JA19bkht1h0bwcvUNIoE.roa
File: W1T4q19JA19bkht1h0bwcvUNIoE.roa (raw, json)
Hash identifier: 8fUfk0r/HDL5IlD529OCs0Yp1P6JX4Hod7DRqORsUDY=
Subject key identifier: 5B:54:F8:AB:5F:49:03:5F:5B:92:1B:75:87:46:F0:72:F5:0D:22:81
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018AF52C064B00628E1A3117247634AEF0D2
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/W1T4q19JA19bkht1h0bwcvUNIoE.roa
Signing time: Tue 03 Oct 2023 10:53:37 +0000
ROA not before: Tue 03 Oct 2023 10:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:2c:06:4b:00:62:8e:1a:31:17:24:76:34:ae:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Oct 3 10:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b54f8ab5f49035f5b921b758746f072f50d2281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:8a:0e:24:e6:9c:d4:df:6d:63:91:b5:43:
10:a5:10:c3:8d:d4:61:9d:47:ce:b7:d1:4f:a5:d0:
a2:39:72:7a:bb:8f:68:59:69:81:31:c2:54:88:3a:
88:08:26:65:3a:ee:2d:b5:78:4c:d7:54:aa:5e:80:
c4:b2:ea:33:b2:be:7c:25:81:39:ad:f7:b5:ec:d1:
86:06:13:2d:4b:6e:46:fd:cb:81:98:34:ad:c3:b6:
83:42:66:5c:8a:21:44:b4:dc:4c:5f:c0:32:06:24:
6d:d3:9b:57:b9:be:f1:3a:ee:8b:0f:17:81:d9:32:
cc:37:6b:50:7c:a6:f3:db:05:ff:ed:c1:6b:c1:4f:
8c:be:a2:c6:94:32:7f:cb:98:50:8f:58:1f:7c:52:
5f:ed:8e:29:04:1c:59:ad:18:bb:32:ea:c2:1e:bd:
5a:cb:4e:ed:b6:01:4e:32:3c:1d:b9:6e:5f:2d:aa:
31:fb:b0:cd:79:52:b7:0a:ad:b4:86:3d:6d:8d:66:
88:df:a9:b0:ea:41:8f:53:60:3e:e7:9f:44:e9:e0:
02:51:70:82:01:18:3c:81:f4:be:a4:a8:94:90:ad:
01:74:64:5b:71:e6:29:24:7d:d1:98:b5:ab:09:d2:
52:52:f9:c1:fb:34:e8:d3:ce:a9:24:29:f0:6f:a7:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:F8:AB:5F:49:03:5F:5B:92:1B:75:87:46:F0:72:F5:0D:22:81
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/W1T4q19JA19bkht1h0bwcvUNIoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.78.0/23
94.137.90.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:33:e9:ec:49:51:48:ae:07:5a:86:0b:9e:cf:c4:ee:2c:20:
0a:50:49:0c:78:67:b8:00:29:53:69:9e:4f:2a:0f:ee:9c:4d:
50:d9:76:ae:ed:16:ac:f2:46:97:8c:55:51:a8:cb:7c:65:b7:
47:36:6b:37:57:37:e8:c4:4b:57:7a:64:4c:cc:2d:8a:f5:8e:
7b:eb:f5:bf:26:51:76:7b:5a:45:68:ba:90:6c:ef:01:f6:9b:
4a:4d:f3:a7:74:ae:10:13:c6:c2:c6:fb:66:95:4f:f1:4f:b8:
3a:df:4a:69:72:37:a2:e0:28:17:54:a7:8a:31:e8:db:14:64:
86:f4:69:1e:84:4c:e6:02:4a:75:e8:09:3c:ea:95:1a:a2:07:
fd:af:b7:44:77:17:71:24:70:9a:e0:de:9a:02:7a:91:5e:11:
5b:e3:c9:fa:2e:ca:56:0f:03:91:83:28:b1:9a:7a:b7:0d:f9:
de:8d:2a:08:09:2c:95:86:8d:01:6c:88:3b:2d:09:93:16:30:
b9:ca:00:c0:8e:0b:84:33:de:a8:40:78:dd:23:1d:c7:70:fb:
ea:4b:c1:24:03:e9:1d:cb:d8:d6:8b:65:3a:af:4e:87:89:7d:
10:ad:bd:ca:e9:99:68:cb:37:f2:e5:bd:10:96:c8:85:28:bc:
fe:02:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:33 2024 by rpki-client on console-fra.rpki-client.org