Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/wQZvJfCiefka8t1xN38Ux_poSC4.roa
File: wQZvJfCiefka8t1xN38Ux_poSC4.roa (raw, json)
Hash identifier: H8G0xx+fGJIHwG3QbZq6co3fWQMbZ6jMJdxZtgzMYUk=
Subject key identifier: C1:06:6F:25:F0:A2:79:F9:1A:F2:DD:71:37:7F:14:C7:FA:68:48:2E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0192206788C42208A7D184ABE272DC3047FD
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/wQZvJfCiefka8t1xN38Ux_poSC4.roa
Signing time: Mon 23 Sep 2024 19:41:49 +0000
ROA not before: Mon 23 Sep 2024 19:41:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 45.129.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 09:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:20:67:88:c4:22:08:a7:d1:84:ab:e2:72:dc:30:47:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 23 19:41:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1066f25f0a279f91af2dd71377f14c7fa68482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:6b:48:54:64:74:a4:91:c5:fd:36:8e:bd:
bf:11:28:a3:f5:3e:be:a2:ca:97:b6:8f:95:89:3d:
8f:1c:60:a0:b8:6c:de:bb:37:dc:54:22:cd:98:d2:
f3:bc:e9:40:ec:f4:48:fe:3b:4c:12:fd:86:51:f0:
b1:5a:a0:5b:7b:08:aa:d4:4b:88:4f:29:43:33:0c:
18:47:26:63:bb:9a:6b:2d:26:45:ac:f5:7a:58:d3:
fa:8a:6a:59:a2:6c:0a:b8:f9:88:60:64:8e:ce:e7:
45:98:ec:37:fb:dc:50:76:6e:64:7e:ba:f5:11:62:
89:e7:53:71:a6:f3:2a:f3:f6:4a:9f:9f:7a:32:17:
75:c4:8c:e4:f0:2b:98:92:34:26:35:7b:f6:ac:f0:
39:4f:a4:62:87:0d:e9:71:6e:c6:03:36:71:e3:76:
b0:f0:b6:5c:be:d6:38:6c:1d:a7:f7:29:e3:d5:19:
a0:70:91:f8:43:6b:cf:02:0e:ab:10:0e:24:b0:2f:
ae:c4:21:0a:66:ab:e3:dd:d1:53:a7:7e:cb:5f:29:
c7:0f:72:ca:e9:51:dd:f0:ab:dd:20:7a:08:3e:43:
94:fc:85:1f:68:b1:32:a3:e1:6d:e6:cb:f2:3c:78:
44:a8:da:ed:91:4e:d8:26:33:c3:1b:fe:e7:83:47:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:6F:25:F0:A2:79:F9:1A:F2:DD:71:37:7F:14:C7:FA:68:48:2E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/wQZvJfCiefka8t1xN38Ux_poSC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ef:13:84:8e:78:b5:03:1d:41:fc:4e:ef:30:91:2b:bc:5c:
a1:ea:f9:e0:fd:b3:5c:59:49:93:3a:3a:bf:fd:13:39:eb:b2:
5a:6e:0a:21:d5:54:8d:d8:83:fb:fb:04:bb:a2:96:45:17:f0:
ea:69:24:18:30:06:da:6e:40:b5:65:a8:e5:14:84:90:c6:0a:
8f:b2:7a:0c:83:aa:88:7d:21:e2:75:5e:58:9a:a8:a7:49:63:
15:4d:40:53:51:26:0a:86:e4:55:1f:70:40:2d:1a:70:cd:61:
4f:b8:e3:0b:3d:68:10:82:6d:aa:0f:3b:72:e0:81:da:c6:4b:
55:2b:65:ff:5d:bf:61:f7:73:71:67:f3:b8:95:c5:9e:72:71:
b2:f3:40:f0:d3:08:d1:76:9c:f4:a6:27:59:ab:34:c7:a8:75:
49:4c:f2:4c:29:c9:7a:08:7b:97:a6:ec:2a:04:4f:cb:61:47:
70:a4:10:4b:df:a0:45:e9:9c:7d:6e:2e:8a:08:fe:93:17:81:
96:c5:b8:e1:c1:5b:e3:fe:f1:2c:f9:52:0f:40:26:3b:da:35:
a8:8b:7e:9b:ae:b3:77:fb:f7:1a:55:88:05:5c:ee:00:ce:c7:
45:a7:38:63:cf:8e:ae:33:6c:63:3b:b0:86:39:10:a6:8b:6a:
3a:52:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 10:41:53 2024 by rpki-client on console-fra.rpki-client.org