Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/wUxoqWdBCA_XArF4qRbFfy0VqlA.roa
File: wUxoqWdBCA_XArF4qRbFfy0VqlA.roa (raw, json)
Hash identifier: KZFo9UsSqikcL8S4tzBzl2tvvVfum375A2nFnUFg/gw=
Subject key identifier: C1:4C:68:A9:67:41:08:0F:D7:02:B1:78:A9:16:C5:7F:2D:15:AA:50
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187108E813008E888449777D29978764593
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/wUxoqWdBCA_XArF4qRbFfy0VqlA.roa
Signing time: Thu 23 Mar 2023 22:19:47 +0000
ROA not before: Thu 23 Mar 2023 22:19:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 194.180.232.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/22 maxlen: 24
45.147.8.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Mar 2023 21:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:8e:81:30:08:e8:88:44:97:77:d2:99:78:76:45:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:19:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14c68a96741080fd702b178a916c57f2d15aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:af:48:dc:54:68:b7:7a:70:2e:23:07:43:
01:f2:c8:d4:47:d9:03:eb:63:02:ed:23:31:95:ff:
6f:a7:1f:0a:d1:23:19:9a:43:36:0f:40:6f:f1:ee:
39:da:0b:8c:93:82:73:b7:b4:41:b9:f2:3d:1b:5b:
e4:89:f2:54:82:33:96:c1:c5:9d:1e:36:81:5d:5e:
60:b2:09:25:04:e8:30:c4:29:4b:b9:87:f5:87:05:
17:b8:41:0a:85:ca:69:83:cf:18:29:32:ca:c3:84:
7b:aa:e1:33:f9:5f:1c:f2:f9:a2:3c:c7:1f:eb:e9:
1f:d8:4a:a1:45:2b:0a:26:cc:85:fe:c8:b8:d9:0b:
93:28:fa:74:e1:db:4c:df:d0:1e:ba:ea:66:e4:a4:
af:bf:93:33:56:60:64:9f:74:7e:1a:d9:85:fd:de:
b4:05:84:9d:7b:b1:1b:60:5b:6a:5d:cb:5e:25:e5:
d7:c8:41:10:16:00:17:f3:88:51:a3:27:04:ce:a5:
f1:7d:33:87:94:4d:b1:ec:8b:99:ea:08:1c:0e:a8:
6a:33:d8:fd:39:6c:5a:8e:41:b2:ed:c0:fc:45:f1:
df:4d:80:61:e8:f2:33:ca:46:82:37:97:2a:29:40:
8b:87:27:40:e0:0a:06:37:e1:e3:1f:ac:38:e1:9f:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4C:68:A9:67:41:08:0F:D7:02:B1:78:A9:16:C5:7F:2D:15:AA:50
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/wUxoqWdBCA_XArF4qRbFfy0VqlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
194.180.232.0/23
194.180.236.0/23
Signature Algorithm: sha256WithRSAEncryption
25:0b:32:86:0a:f9:98:d2:1d:25:86:66:49:b4:19:d9:72:06:
57:22:8d:26:81:dd:0a:24:aa:8b:41:51:d3:21:36:36:39:5f:
b1:c2:48:4b:90:0f:a3:7f:76:d4:42:20:dd:c3:de:04:6d:38:
53:b0:8b:05:0a:65:20:1c:23:2f:dc:c8:a8:c9:57:2d:51:a5:
58:05:1d:d0:ae:41:a9:cf:de:0d:c0:53:f5:94:73:8b:7f:98:
31:16:e7:a8:08:c9:32:9a:3c:dc:b7:78:67:55:c4:68:2b:9a:
46:f9:9f:50:6b:70:29:7e:09:b4:d9:7b:d4:3d:06:4b:b2:2a:
72:16:87:79:82:4a:5b:0f:0f:39:97:3c:8e:0f:5f:df:a1:28:
3a:d2:f3:68:be:b4:d1:c4:5c:82:94:1a:2a:4e:c3:98:d8:18:
3d:f1:8b:bb:0e:26:8c:59:96:91:a2:11:3e:2a:b6:5e:3b:e9:
58:ab:53:c2:0d:57:fb:a8:d3:cd:ed:8f:4c:29:22:90:8d:37:
49:8a:be:48:9d:ed:50:c1:32:78:c2:64:af:cf:4d:ac:a3:fc:
16:af:78:ad:1e:9f:6f:12:2f:72:e6:b9:c3:a0:3d:8c:cb:5e:
12:fd:2c:8f:df:d5:8c:c0:c5:15:6c:f3:85:64:0b:d2:27:a5:
c8:a4:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org