Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kWAWL6p6jN-TMG1F4Ryr9WKrJ2E.roa
File: kWAWL6p6jN-TMG1F4Ryr9WKrJ2E.roa (raw, json)
Hash identifier: FrNdC1pK43nmUxojJmW1ksR8KiDHGg4MYKs3Pl3vO5I=
Subject key identifier: 91:60:16:2F:AA:7A:8C:DF:93:30:6D:45:E1:1C:AB:F5:62:AB:27:61
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CB05C4E329BF1BF22A8E7100B93B63B40
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kWAWL6p6jN-TMG1F4Ryr9WKrJ2E.roa
Signing time: Thu 28 Dec 2023 12:18:08 +0000
ROA not before: Thu 28 Dec 2023 12:18:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a06:de01:400::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:5c:4e:32:9b:f1:bf:22:a8:e7:10:0b:93:b6:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 28 12:18:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9160162faa7a8cdf93306d45e11cabf562ab2761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:3b:04:27:83:dc:9b:ef:1c:11:47:70:89:
84:a7:f0:4a:c9:c4:ff:26:4d:bd:d3:b5:e4:5a:c0:
65:c5:fc:83:96:80:5f:63:69:e0:42:84:61:d5:73:
0b:1a:ea:b7:a2:ce:4c:44:28:9e:be:94:90:1d:b7:
94:83:40:a6:b2:8c:b8:26:11:e3:ee:6e:c8:f4:7a:
35:fa:50:12:91:cb:a4:f9:4f:73:fb:f7:37:9f:66:
1c:1f:0f:ad:69:31:bf:7f:e8:9a:e9:81:91:8d:5f:
70:8b:24:3d:17:81:38:9b:01:2a:80:be:58:00:e0:
39:1a:43:ba:54:2d:c1:42:ee:a3:78:59:67:e0:6a:
36:25:12:b1:13:6e:db:18:9d:d5:8d:57:67:b5:a8:
e5:7e:7a:7a:13:d0:9b:94:e4:50:3d:ae:00:e2:fd:
e2:be:9d:11:ab:e4:49:cc:e6:84:2f:d6:5f:71:a5:
ab:71:e2:f3:77:0e:22:6d:82:cf:d4:3e:04:04:c8:
d6:a9:18:82:66:81:c2:69:5b:88:fc:1f:4e:b5:47:
63:54:3a:61:4c:cf:38:1d:b9:f7:d4:48:08:c4:47:
90:c9:51:1e:0f:a5:55:23:e9:e5:d4:8b:ca:f4:e4:
0c:9e:62:c9:e2:bb:46:ba:4a:9a:b6:13:73:65:e9:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:60:16:2F:AA:7A:8C:DF:93:30:6D:45:E1:1C:AB:F5:62:AB:27:61
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kWAWL6p6jN-TMG1F4Ryr9WKrJ2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a06:de01:400::/48
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
2f:f1:c1:cc:4f:14:7f:f0:dd:3f:9f:3c:38:c6:66:9b:cb:26:
a8:ea:71:f4:5d:00:0e:89:fa:c5:99:e6:aa:28:cf:eb:f4:64:
a9:33:7f:e7:e3:e2:34:b0:5e:82:9b:db:5b:a6:27:41:8c:07:
9c:23:d1:09:e0:a6:a3:a4:2e:ec:c0:bc:29:9f:f0:4f:3f:48:
d3:3c:23:1a:11:51:c4:ed:50:dd:40:48:32:8b:87:43:a7:4b:
07:33:76:5f:86:2b:38:95:23:38:b8:d9:a4:52:e3:b7:97:13:
61:82:0f:01:89:a2:5a:49:35:e4:11:ce:a3:fa:ff:36:18:d0:
eb:e5:6a:d8:6f:6c:b6:be:ff:2e:c0:f0:5c:64:b2:8e:5c:c1:
e0:dd:9a:cd:83:a6:3c:f1:60:71:8d:15:34:29:a2:9c:79:97:
01:7d:62:ea:da:c4:d8:86:81:ff:c4:e2:19:2f:d8:17:9f:be:
27:60:cc:f0:90:4d:16:9d:c8:b5:d2:ba:a6:49:cd:e2:b7:fb:
22:23:27:7e:9b:21:c9:67:50:d8:26:08:65:07:5d:70:00:b8:
3d:e9:cb:d5:1f:e7:38:78:75:ec:0c:a4:27:2c:bc:f7:47:06:
d6:db:68:a7:23:9e:12:79:61:96:23:17:d3:dc:b3:78:4d:14:
42:f8:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org