Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/wHijYjZMOXDm5-WRO_v3YiWSX1M.roa
File: wHijYjZMOXDm5-WRO_v3YiWSX1M.roa (raw, json)
Hash identifier: lDU7W5DH3XLMa/ShK3WO/tvpk0z1UDyZ5dCII34Y5OU=
Subject key identifier: C0:78:A3:62:36:4C:39:70:E6:E7:E5:91:3B:FB:F7:62:25:92:5F:53
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0185719558BD64E78A521E44A498CD4E309B
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/wHijYjZMOXDm5-WRO_v3YiWSX1M.roa
Signing time: Mon 02 Jan 2023 08:24:50 +0000
ROA not before: Mon 02 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1101
IP address blocks: 145.208.0.0/13 maxlen: 13
145.220.0.0/16 maxlen: 16
145.111.0.0/16 maxlen: 16
145.192.0.0/12 maxlen: 12
145.216.0.0/15 maxlen: 15
145.99.0.0/16 maxlen: 16
145.102.4.0/23 maxlen: 23
2001:67c:6ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:58:bd:64:e7:8a:52:1e:44:a4:98:cd:4e:30:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c078a362364c3970e6e7e5913bfbf76225925f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:51:59:3d:36:60:89:54:64:8e:f1:13:66:
ed:ef:e7:f1:03:fb:b8:81:d2:da:ac:ab:31:f1:d1:
49:e8:5c:47:74:5b:0a:19:ff:a0:d7:f0:fd:79:0c:
ce:98:fe:d3:88:e6:98:6a:49:57:4d:d5:70:20:7f:
1d:39:29:47:61:63:1a:07:4a:7c:43:c6:ed:61:0e:
48:65:00:d8:a5:a6:2c:3c:fe:67:6d:ec:6a:65:9c:
93:4d:b2:fd:1b:76:48:59:e9:b3:45:1a:f2:d2:1d:
8c:d9:98:44:a1:34:14:57:85:93:29:7a:06:a1:3f:
50:44:54:c4:29:f5:fa:39:56:a8:51:b6:69:58:86:
21:fc:71:b3:87:ef:15:0e:ac:93:3b:50:6d:1b:61:
88:c1:b3:a5:05:97:09:23:48:f4:33:99:7d:4a:e0:
d9:66:1e:eb:8b:04:f9:b9:98:84:11:63:56:b8:4b:
55:83:d7:03:6e:b9:1a:46:1a:d6:32:a6:e2:38:7b:
5b:a5:9a:77:1c:40:fd:36:17:cb:68:68:9e:df:32:
f5:c4:e9:1f:10:28:cd:7c:82:86:a8:d4:f7:86:42:
ee:ff:e4:91:c5:95:ac:f8:b1:bc:2a:d5:3b:07:32:
eb:11:c9:3e:92:6f:14:59:36:71:92:ea:40:a2:c4:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:A3:62:36:4C:39:70:E6:E7:E5:91:3B:FB:F7:62:25:92:5F:53
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/wHijYjZMOXDm5-WRO_v3YiWSX1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.99.0.0/16
145.102.4.0/23
145.111.0.0/16
145.192.0.0-145.217.255.255
145.220.0.0/16
IPv6:
2001:67c:6ec::/48
Signature Algorithm: sha256WithRSAEncryption
61:24:61:86:b9:6a:9f:fa:94:73:5a:77:af:5f:23:cf:33:0b:
86:f1:aa:f5:ff:96:d9:bd:1b:dc:5a:fd:7d:27:6b:3f:c3:d5:
fa:bf:e5:59:ce:91:e4:6d:da:b3:4c:3d:5c:5a:2d:24:24:1b:
e2:1d:9b:cd:57:a6:87:be:3d:21:7d:fa:1a:00:80:8a:ca:0e:
44:63:52:56:6e:d4:89:a4:8b:0d:5b:f3:72:6b:e0:3e:66:fc:
84:91:50:bc:dd:a6:58:24:f0:9e:89:1b:e5:08:15:8e:e4:34:
20:2d:6c:5f:42:1f:ee:36:66:b7:e8:91:d3:c3:62:a5:a7:d9:
5f:31:d2:27:56:72:9a:a6:48:d6:c5:61:72:55:1a:09:23:6a:
df:dd:86:e5:5e:81:be:d8:ed:ca:9b:41:32:c6:d4:fb:a9:ab:
5c:ce:57:20:90:43:aa:da:a7:76:e3:5b:58:44:22:8d:76:e7:
f4:3b:d4:5b:4e:e9:2f:94:17:9d:c4:6a:15:ed:11:f1:02:6c:
29:8d:f6:2c:69:6e:c1:cd:d5:b1:d1:dc:20:57:c1:8c:9e:fa:
16:25:95:ee:79:78:d0:ac:df:77:82:b3:37:c4:88:c1:6a:64:
63:8f:a8:3e:d3:5b:25:15:a6:e6:38:24:4c:36:df:bb:99:81:
b5:38:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org