Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_PWSraxbg2HrqzV__vfkUXTkiTA.roa
File: _PWSraxbg2HrqzV__vfkUXTkiTA.roa (raw, json)
Hash identifier: HXb1jhKAlTMmKfVkeP3ZjOdhA1rswY4WwvNnl51e5fQ=
Subject key identifier: FC:F5:92:AD:AC:5B:83:61:EB:AB:35:7F:FE:F7:E4:51:74:E4:89:30
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE75C317494F0BB69127C29DDD9844
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_PWSraxbg2HrqzV__vfkUXTkiTA.roa
Signing time: Mon 02 Jan 2023 09:44:42 +0000
ROA not before: Mon 02 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.93.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:75:c3:17:49:4f:0b:b6:91:27:c2:9d:dd:98:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcf592adac5b8361ebab357ffef7e45174e48930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:2b:bd:37:36:4a:e9:81:dc:e5:1c:c2:6f:
7a:e3:91:60:ea:7e:1f:e5:ff:3e:ef:28:e6:1b:86:
e9:9b:7d:b0:99:f2:aa:f1:17:1e:91:ac:35:96:68:
6d:52:90:27:75:cb:c6:31:10:1b:2b:57:63:eb:b4:
27:5d:2d:52:fc:1d:73:85:29:c5:4f:43:7e:8c:d5:
20:6c:9e:3d:4e:65:16:a5:ea:f7:84:48:c1:c8:80:
df:94:13:47:15:15:e5:86:f1:07:c3:db:72:9b:cf:
8f:93:44:7c:03:7d:bc:aa:68:74:09:47:78:e0:4a:
11:9c:f5:bc:0c:48:db:df:0f:31:bc:80:d9:04:d1:
8c:9b:12:eb:bf:51:b0:ca:48:85:8d:94:29:fb:f3:
41:74:aa:0a:7c:c3:21:02:e0:6a:5f:17:ac:de:66:
70:4b:b3:70:6a:bc:db:52:fd:78:ee:cb:a1:e2:c4:
a1:38:c0:ee:26:0b:41:e8:36:23:4c:2e:1d:26:00:
46:d4:ae:9b:8f:b1:1c:0d:13:71:73:12:1b:6d:c1:
8e:e0:24:83:d7:4c:03:90:34:b4:e1:62:16:65:78:
8f:ad:4d:59:78:7c:f7:44:af:90:dc:1d:f1:90:73:
8c:a5:67:e4:20:66:d7:ff:99:02:45:32:99:0d:00:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:92:AD:AC:5B:83:61:EB:AB:35:7F:FE:F7:E4:51:74:E4:89:30
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_PWSraxbg2HrqzV__vfkUXTkiTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.16.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cb:d3:9e:fc:23:23:2c:5d:cc:f9:81:96:d2:01:5a:1e:14:
9b:0f:2f:76:cc:dd:e6:b7:00:2b:cd:b5:e4:8f:8e:ca:bc:ac:
80:7a:00:bb:9f:d2:f1:fd:05:f6:a8:24:a7:8a:cb:b2:79:f6:
86:32:f1:ae:5a:6c:48:ea:9b:12:65:8f:82:5a:3f:d1:10:ca:
fb:22:f6:ea:1b:c1:f6:ae:21:5c:ef:c8:48:ba:dd:32:4a:d1:
23:0d:f3:86:74:bd:c3:d0:19:0f:95:90:00:84:97:23:38:e2:
58:b2:ad:04:14:2f:36:3a:63:4f:74:5d:e6:70:bf:ac:de:3d:
70:b2:ae:02:95:06:cc:de:dc:12:63:60:91:d4:45:eb:a3:12:
5b:ad:30:23:6a:22:ad:fc:3f:db:b9:91:63:e0:e9:63:a0:00:
ab:41:f9:3d:19:d2:eb:3f:c6:ce:e0:af:4f:ea:cd:6f:67:90:
dd:01:1d:0b:66:1f:7f:5b:b1:cd:80:2e:b7:73:7d:77:75:cc:
9c:d1:98:5c:60:8d:95:c3:d5:0f:8a:56:93:f1:fc:82:98:83:
74:69:a8:9c:00:57:4c:96:73:3a:a8:9b:20:8a:10:12:c0:94:
31:97:f5:f6:60:1c:f6:07:f4:a9:2e:1f:dc:7f:a6:03:55:2b:
97:c3:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org