Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wuoEQTtCjFP1cTlO26K17k6d_rU.roa
File: wuoEQTtCjFP1cTlO26K17k6d_rU.roa (raw, json)
Hash identifier: XkYdWOLS17wBkpLisKIrYLMyYnfPkQP5lA1Mr7LsdqY=
Subject key identifier: C2:EA:04:41:3B:42:8C:53:F5:71:39:4E:DB:A2:B5:EE:4E:9D:FE:B5
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 018BDEFCF4D874112DE111877C1B2D212D1C
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wuoEQTtCjFP1cTlO26K17k6d_rU.roa
Signing time: Fri 17 Nov 2023 20:33:21 +0000
ROA not before: Fri 17 Nov 2023 20:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43180
IP address blocks: 45.93.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:fc:f4:d8:74:11:2d:e1:11:87:7c:1b:2d:21:2d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Nov 17 20:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2ea04413b428c53f571394edba2b5ee4e9dfeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:86:1b:07:e7:cb:6b:85:36:06:56:d3:59:
dd:a1:cc:96:59:b9:5b:c4:7a:eb:58:d4:32:5b:cc:
78:95:51:f9:54:e3:f9:f1:55:34:5b:cd:77:8c:e5:
b7:10:cd:1a:cb:af:b1:3f:d6:3f:ba:29:2b:f6:2b:
1d:ef:35:e9:2d:a7:37:63:e5:59:d1:96:e5:b4:ca:
7e:58:7b:72:d3:9b:9d:b4:d4:b1:13:37:d9:ce:f3:
8f:b4:f8:fc:a4:f4:86:98:8d:5f:05:48:21:84:d3:
ac:8d:14:c4:52:e3:b2:83:9f:8e:bf:64:99:63:76:
bc:5d:51:56:97:b8:4d:46:09:28:f9:fc:fa:19:ef:
68:6c:2a:74:54:6c:97:20:28:e6:3f:47:e4:4b:cd:
f0:da:b6:02:e0:0c:2f:03:24:3c:b0:0f:ab:8d:cf:
c4:78:7c:d7:e0:17:57:0f:62:60:ff:93:74:78:60:
3b:56:69:7a:a1:ed:f8:3b:06:c8:e0:34:02:e5:0d:
70:54:fb:1e:49:bf:89:7b:16:46:7e:28:ea:b0:08:
42:2a:c9:fe:ba:55:1a:66:cb:69:e4:b4:7d:5a:22:
94:19:b9:a1:f4:98:55:5b:ed:f9:57:95:48:3a:4b:
9b:ed:10:20:f9:e2:09:dc:85:9e:c9:b0:69:ad:77:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EA:04:41:3B:42:8C:53:F5:71:39:4E:DB:A2:B5:EE:4E:9D:FE:B5
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wuoEQTtCjFP1cTlO26K17k6d_rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c3:f4:f0:f6:ef:bf:91:60:fe:87:0c:31:1d:72:6c:b1:50:
e4:36:b0:fd:54:86:52:a7:85:9f:bf:0a:b4:d0:ca:fe:26:2d:
47:86:0d:6f:86:e4:45:55:80:3b:42:25:b1:ba:de:d0:f5:69:
77:3a:b1:6d:09:fd:40:6f:bb:aa:d1:10:38:7d:d4:dc:31:f7:
5c:f9:70:2b:c0:18:c6:ff:f3:da:50:4e:e5:4d:07:c5:6f:d3:
0c:88:65:ad:b6:d2:b4:e9:11:72:4a:ea:ee:7e:0d:b2:41:db:
4d:f8:25:d0:6d:94:ae:76:3a:d1:73:9a:ce:c0:12:3b:88:d5:
af:2e:86:d7:0d:61:66:7c:18:17:1a:5f:8d:05:87:34:ed:d5:
e5:23:f7:26:7e:24:a4:cc:cb:f2:66:55:26:13:5f:8b:f3:02:
aa:19:e0:a5:5a:a6:18:52:23:d3:56:b5:c0:6b:6e:88:98:dc:
53:b9:ff:12:0a:28:36:36:bb:df:dd:93:84:5b:c7:92:d0:75:
b7:cc:b1:00:6a:c4:01:cf:4f:27:f9:3c:61:8b:f2:ae:7c:93:
f4:df:e8:b9:24:86:42:cb:e4:e7:cd:1c:7e:e0:4a:5e:89:d0:
a7:52:75:9d:c8:a8:11:fa:ff:4d:05:0e:db:d1:39:58:58:6e:
b0:db:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:38 2024 by rpki-client on console-ams.rpki-client.org