Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/Wsnx2YHwnxChG05N1TMq6rZziGk.roa
File: Wsnx2YHwnxChG05N1TMq6rZziGk.roa (raw, json)
Hash identifier: qyVG+7EZXHBdb6Gui/DnL3ch+Ds+pab1OQvKxGybCFg=
Subject key identifier: 5A:C9:F1:D9:81:F0:9F:10:A1:1B:4E:4D:D5:33:2A:EA:B6:73:88:69
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 01856E78F87462F94B78F89207EFB49DEAF3
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/Wsnx2YHwnxChG05N1TMq6rZziGk.roa
Signing time: Sun 01 Jan 2023 17:54:59 +0000
ROA not before: Sun 01 Jan 2023 17:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25160
IP address blocks: 45.88.112.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:f8:74:62:f9:4b:78:f8:92:07:ef:b4:9d:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: Jan 1 17:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac9f1d981f09f10a11b4e4dd5332aeab6738869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:47:cc:48:fe:ee:08:e0:2a:da:37:43:29:
1c:ac:a0:f6:f6:bf:e9:1c:06:99:8d:80:a2:23:fd:
07:2f:0a:b8:36:d0:6e:61:df:40:61:e4:6f:03:12:
97:88:29:cb:60:f4:bc:68:c9:27:85:2d:a8:dc:33:
61:e7:4b:36:6d:92:1f:da:79:18:1a:6a:3f:f4:a9:
21:69:2e:93:63:be:2a:0d:2c:9a:33:d3:9f:9e:a4:
c0:6c:d4:04:99:15:5c:59:74:4f:74:e9:ad:b4:71:
93:b3:d0:06:a8:2e:49:59:9a:89:72:24:3b:df:3c:
a8:fd:d0:c4:fc:a4:4c:9b:7f:58:e9:c1:09:25:de:
e2:9d:68:8e:cc:c3:ec:a6:4e:e3:ca:9e:3e:9a:21:
8f:39:9e:6b:21:92:98:f8:30:8a:a1:17:1d:c5:ac:
9a:a5:0a:94:3e:72:20:7c:dd:b9:84:98:74:48:7d:
90:71:e2:58:b7:98:84:70:e7:31:26:95:bc:55:88:
44:0b:19:5d:de:42:31:71:1b:84:f8:74:f6:4e:8b:
df:59:a3:22:53:bb:81:20:50:34:b9:93:a2:e7:c5:
55:86:1a:84:54:f5:df:a1:59:eb:8e:59:d2:2e:10:
c5:6e:4a:81:39:9f:1f:09:63:1e:d9:30:53:3f:0b:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:F1:D9:81:F0:9F:10:A1:1B:4E:4D:D5:33:2A:EA:B6:73:88:69
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/Wsnx2YHwnxChG05N1TMq6rZziGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.112.0/22
Signature Algorithm: sha256WithRSAEncryption
60:ab:56:5a:a9:15:7b:52:ce:b6:81:ad:48:ee:45:58:df:d6:
9a:64:0d:05:d4:c4:f4:ad:22:2f:31:2b:47:ff:31:f8:3c:84:
bc:c1:d7:33:f9:33:81:99:a8:0a:1b:3f:df:9d:0d:ee:d2:e5:
25:1f:d2:bf:ef:e2:23:86:9e:e1:5b:54:eb:51:f9:5b:46:56:
85:d9:45:5a:25:85:e4:de:0b:76:ac:f2:4c:57:e6:36:5d:bc:
c0:74:08:d2:49:a3:68:e2:69:25:2b:b8:66:58:86:18:04:b1:
ae:fd:22:8a:1f:15:4d:30:9e:2b:28:d7:2c:23:45:b3:a5:6b:
17:34:ac:dd:bf:f7:d3:7e:5a:ba:db:16:94:43:e0:02:7b:5d:
41:98:31:8d:a6:59:71:65:2f:92:92:7b:56:ae:97:9e:50:db:
6d:bb:b2:3c:77:18:f2:a7:44:c8:c2:20:c6:b8:d8:d4:28:01:
cf:28:03:79:ef:e7:1f:54:97:f9:92:78:e6:29:8e:df:b1:c5:
ab:23:c8:60:b5:e1:0e:38:59:8a:14:65:ef:c9:7f:8f:95:a5:
a8:e7:b1:87:0d:f1:1f:6e:aa:10:16:62:00:66:68:81:34:e9:
b2:ff:44:fa:e9:6c:2d:79:5c:73:ee:e9:50:a4:2a:7d:da:62:
ee:07:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:34 2024 by rpki-client on console-ams.rpki-client.org