Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/W7xEr-CsnJBq7ZekcYY-VV9QAhg.roa
File: W7xEr-CsnJBq7ZekcYY-VV9QAhg.roa (raw, json)
Hash identifier: eMp2pGinbHQz+qQliCmdoPVx008566YFC/JSniqqmVg=
Subject key identifier: 5B:BC:44:AF:E0:AC:9C:90:6A:ED:97:A4:71:86:3E:55:5F:50:02:18
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 01857115103C76CCBEA91B7370FB03AB071F
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/W7xEr-CsnJBq7ZekcYY-VV9QAhg.roa
Signing time: Mon 02 Jan 2023 06:04:43 +0000
ROA not before: Mon 02 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50019
IP address blocks: 45.131.197.0/24 maxlen: 24
45.131.198.0/24 maxlen: 24
45.131.199.0/24 maxlen: 24
45.131.196.0/24 maxlen: 24
185.128.113.0/24 maxlen: 24
185.128.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:10:3c:76:cc:be:a9:1b:73:70:fb:03:ab:07:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Jan 2 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bbc44afe0ac9c906aed97a471863e555f500218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:1d:8c:ec:1f:ef:73:e4:f0:8d:10:07:96:
7f:71:a8:1e:70:91:2e:21:48:ff:cd:9c:db:28:90:
06:a9:6c:d1:a2:d7:15:89:94:2f:f1:f9:38:c8:93:
3c:8b:51:46:f5:4f:61:5e:57:f1:c0:66:b5:e8:b9:
44:5b:d1:f1:d6:71:30:f6:13:7e:20:55:17:0c:f3:
8d:48:0c:d1:27:9b:2b:e3:ec:8a:fe:e7:48:f5:92:
ae:1f:f0:e6:99:7f:52:33:f8:d0:33:a8:e3:ac:c1:
b0:37:ef:b7:03:96:bb:18:81:99:5f:ac:86:ec:ad:
79:80:ed:91:5c:29:b8:c6:02:27:39:37:e3:a7:13:
02:1f:8d:4d:3e:71:eb:c5:6d:84:36:80:e1:d8:57:
48:90:59:a7:b8:37:bc:9b:2a:d5:45:7f:a1:d5:bd:
ad:19:b8:7c:17:99:75:ee:39:24:73:b1:98:14:07:
43:70:12:59:aa:e9:ec:6c:40:fc:b7:7b:02:be:85:
1d:fb:8e:24:9f:c5:ee:ec:b1:66:79:e0:7e:95:18:
59:56:11:20:ba:cf:01:e2:02:13:67:cd:8f:90:3d:
96:47:e8:80:81:6d:51:7c:67:ec:ca:e1:f6:32:9d:
c9:6c:44:8d:b9:46:8b:18:db:e3:6f:a4:c9:56:a8:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:44:AF:E0:AC:9C:90:6A:ED:97:A4:71:86:3E:55:5F:50:02:18
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/W7xEr-CsnJBq7ZekcYY-VV9QAhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.196.0/22
185.128.113.0-185.128.114.255
Signature Algorithm: sha256WithRSAEncryption
93:ec:b1:b7:30:29:9b:c6:33:cc:8e:4d:72:c1:79:2f:05:d8:
0d:53:f6:4a:7a:f6:a4:bc:86:08:97:7e:49:cc:a1:24:0f:a3:
57:2d:0e:f2:83:15:92:88:35:8e:92:4b:92:e0:cd:bd:cc:c7:
36:f2:17:bb:3b:8b:11:ae:9d:5f:33:a2:b7:04:85:fa:f3:44:
60:52:d5:29:61:93:00:15:2d:65:9a:7a:fc:6c:a6:4d:71:69:
0d:9f:ad:a3:93:96:ae:00:14:9f:8d:46:50:f4:f0:dd:ec:5b:
4b:7b:19:b9:5c:f4:b4:83:60:ad:c7:5c:2d:a6:7f:36:ea:6d:
1a:3b:80:b2:b4:2f:5c:1e:af:a9:9a:d9:c3:12:37:2c:19:22:
56:1a:2a:7b:94:60:63:ac:ab:71:fe:24:1f:b1:d7:38:5e:ee:
1c:87:1f:e0:4c:b0:a0:cf:6e:0b:6a:56:e0:fe:fb:16:e1:dc:
eb:3c:78:50:a2:43:1c:26:50:11:43:05:b0:99:13:fc:de:43:
88:ba:27:7b:83:49:b0:97:d4:1d:4c:d4:29:f8:fa:3d:3e:09:
d7:9a:38:40:e2:06:a2:92:0f:82:be:72:ae:10:c1:33:95:2a:
6d:ac:e2:70:39:39:c4:b4:44:c2:64:c4:aa:db:42:fe:b2:f4:
3f:c6:17:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 30 15:59:31 2023 by rpki-client on console-fra.rpki-client.org