Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WlSNdOsMKmGxKCYwpsUdPjrgKW8.roa
File: WlSNdOsMKmGxKCYwpsUdPjrgKW8.roa (raw, json)
Hash identifier: kiF5FQ+APBDOcfO94JsQyRexp5p9xQu0gR35zIJFEl4=
Subject key identifier: 5A:54:8D:74:EB:0C:2A:61:B1:28:26:30:A6:C5:1D:3E:3A:E0:29:6F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B71BC6D42DAE4226970A85ABCD9226ACD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WlSNdOsMKmGxKCYwpsUdPjrgKW8.roa
Signing time: Fri 27 Oct 2023 15:24:16 +0000
ROA not before: Fri 27 Oct 2023 15:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 45.88.12.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 05:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:bc:6d:42:da:e4:22:69:70:a8:5a:bc:d9:22:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 27 15:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a548d74eb0c2a61b1282630a6c51d3e3ae0296f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:06:34:1b:4b:fa:84:94:86:24:bc:a4:27:
c3:f2:67:17:62:d9:e7:ae:80:f0:07:39:53:4c:7b:
c9:96:3b:ce:09:de:b4:d7:91:06:7c:56:2b:76:12:
c4:70:9b:91:9b:58:8e:20:66:eb:f2:66:39:df:b3:
aa:e6:d6:d5:83:17:15:2d:a2:77:3b:63:d6:a4:a8:
a4:ad:a7:f2:2c:ab:b0:11:a6:a0:16:c8:1c:82:af:
21:64:e5:1b:2e:88:be:c3:6f:0e:0a:91:ff:6e:2a:
71:cc:3e:be:75:9d:85:f7:9d:15:b6:f3:c4:6f:f5:
dc:88:da:3c:4c:d5:69:ec:dd:53:6b:7d:37:18:d0:
93:7a:9a:10:1f:d9:93:b0:6a:49:ca:c7:a0:69:ca:
7e:88:6e:d9:42:2e:df:5c:25:db:99:3f:94:0a:ca:
90:ce:1f:a9:35:bd:83:f1:f8:ed:7c:70:46:ee:21:
97:2c:b5:2a:3d:24:3b:2d:3c:9c:cf:f4:50:d7:e4:
12:56:4f:2f:41:2e:88:c5:2e:0f:6a:c9:08:fb:db:
be:0d:b3:c9:72:45:1f:5a:cf:a4:49:c6:cf:15:c7:
77:f1:3a:ad:59:4c:bc:b6:1a:1f:16:db:d1:12:8c:
03:33:20:8e:67:ae:e0:08:90:e8:4a:12:61:fe:e3:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:8D:74:EB:0C:2A:61:B1:28:26:30:A6:C5:1D:3E:3A:E0:29:6F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WlSNdOsMKmGxKCYwpsUdPjrgKW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
89.35.129.0/24
89.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
54:74:15:a7:09:5c:b1:7d:c8:c3:42:a8:26:ad:a6:28:5d:8f:
73:66:2a:00:e9:66:8d:62:99:53:7f:71:23:da:f0:85:04:6b:
a0:4a:18:71:48:5f:a9:20:e8:a6:d2:92:78:0a:e9:87:36:91:
28:e8:c9:a6:df:a5:f2:9f:9c:42:86:d9:62:12:14:d4:42:eb:
c5:ed:0e:a9:07:85:53:37:30:9c:a8:10:79:42:3f:6f:51:46:
e6:2a:b4:ee:90:4f:c0:e2:ba:1e:39:e9:14:54:74:98:90:0a:
0c:d6:31:f7:6b:d6:5d:07:55:92:53:0a:db:30:c5:f2:42:35:
17:dc:5f:ce:f6:74:b1:9b:1b:22:a0:e7:f7:98:fd:fc:d4:d8:
2d:86:99:57:75:15:6d:03:2f:fd:d1:25:83:ff:d3:74:2c:28:
29:78:f5:a3:70:af:c1:16:70:aa:14:98:da:18:04:a5:a2:2d:
18:9e:0b:95:ca:53:c0:1a:c1:f9:73:da:85:3d:13:42:7b:4d:
b2:65:54:c8:1d:58:1e:96:38:a8:4a:c2:57:27:33:b1:ee:0d:
c6:93:5a:56:b6:b5:94:a6:48:8c:c2:32:2e:bc:6e:63:ab:ac:
64:ef:da:6a:17:fd:92:61:c1:ea:67:b2:4e:97:64:2d:10:15:
91:fb:a2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org