Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WEQjLL2EmsyxRh11hDXR-G4SD-E.roa
File: WEQjLL2EmsyxRh11hDXR-G4SD-E.roa (raw, json)
Hash identifier: SI2aNLtLUMCQvRTbWO0wTKqggjoCPvrv7LgbKhljpH8=
Subject key identifier: 58:44:23:2C:BD:84:9A:CC:B1:46:1D:75:84:35:D1:F8:6E:12:0F:E1
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01896553B61CA4A601EEB58292139855B449
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WEQjLL2EmsyxRh11hDXR-G4SD-E.roa
Signing time: Mon 17 Jul 2023 19:28:52 +0000
ROA not before: Mon 17 Jul 2023 19:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 193.142.253.0/24 maxlen: 24
195.245.102.0/24 maxlen: 24
45.149.133.0/24 maxlen: 24
45.146.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:53:b6:1c:a4:a6:01:ee:b5:82:92:13:98:55:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 17 19:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5844232cbd849accb1461d758435d1f86e120fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:e0:4b:21:a0:09:a0:e2:12:c2:7b:8f:7a:
a8:67:70:45:80:68:1b:37:27:d5:5e:83:b1:3f:c5:
a9:95:e7:18:2a:90:a6:0f:11:1d:b8:08:35:8e:ea:
92:20:1a:eb:8d:ad:c3:ce:11:9c:c3:af:7e:34:c6:
b7:98:92:19:7a:d3:1b:ea:c6:fd:3c:8e:7d:43:ec:
c6:a4:8e:8d:8b:0a:f4:b2:87:98:f9:12:d0:72:95:
20:85:98:8a:70:65:76:f2:25:ed:f8:82:bb:18:42:
68:1b:fd:8e:04:39:8f:d0:cd:0e:37:f0:6f:7e:42:
a6:67:5f:8e:8f:06:95:97:c4:c3:37:dd:42:2f:ee:
79:95:03:90:3b:9e:4b:da:fc:e2:9a:94:c5:d8:2f:
84:91:1d:e8:89:3b:96:90:55:f1:50:94:6a:57:b3:
5a:39:93:6f:8e:98:0c:49:1d:02:c6:7b:35:3d:db:
5a:2f:0d:b0:2f:59:d1:05:68:01:01:c5:46:f1:04:
34:5e:84:33:56:2d:49:2a:f0:e1:3a:69:27:32:be:
fe:c7:04:fb:44:e4:cd:dc:f2:51:99:fa:eb:c1:64:
d1:ff:c9:a0:aa:03:b2:8b:a6:96:bb:67:6c:4a:5b:
e0:8b:2c:e5:58:d6:62:36:b2:d1:22:0e:89:df:7f:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:23:2C:BD:84:9A:CC:B1:46:1D:75:84:35:D1:F8:6E:12:0F:E1
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WEQjLL2EmsyxRh11hDXR-G4SD-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.170.0/24
45.149.133.0/24
193.142.253.0/24
195.245.102.0/24
Signature Algorithm: sha256WithRSAEncryption
09:07:a2:47:fa:55:61:53:d1:bb:3f:63:3e:8e:e7:fc:07:e4:
55:9a:38:c1:42:be:b1:c7:16:41:22:11:15:ac:33:ab:24:16:
33:20:29:15:d0:ce:c6:07:08:32:4b:cf:f8:e5:fb:6e:4e:6c:
ce:43:34:a9:ee:c8:59:11:be:7a:84:7c:3e:7c:75:61:6b:f8:
03:4d:7f:03:a0:e4:60:fe:73:f8:82:1d:f1:ce:b9:9e:29:1a:
df:65:9b:ec:0e:c0:11:de:da:51:3c:f3:d7:e5:0d:8d:1d:f0:
b8:39:7b:40:e9:6f:ea:e7:47:b0:a8:69:8b:4a:e2:fd:92:6f:
b4:6a:99:28:fe:89:6d:2a:5d:9a:31:bd:88:3a:08:04:af:2f:
67:87:83:15:04:de:b2:67:00:53:ef:e9:a7:f0:1b:7a:0d:ee:
ec:57:fd:bf:23:e9:7d:e1:c3:d8:90:2e:43:7a:49:fc:45:e6:
68:24:11:e1:1e:c1:4a:f4:ad:b2:1d:f2:17:04:c1:49:54:30:
02:f0:34:a9:e8:ec:03:60:6c:6b:a2:5d:52:03:41:95:7c:fa:
75:37:7e:bb:10:de:79:ea:16:3e:9c:78:c4:3b:cc:bb:c3:3e:
26:76:ef:7f:cb:92:07:8e:b0:a1:52:38:87:2e:e4:06:cb:6c:
c3:4f:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org