Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/W2SePN1C0mqthPP_K62p1S26PlY.roa
File: W2SePN1C0mqthPP_K62p1S26PlY.roa (raw, json)
Hash identifier: LG2S76UJrDdavamUbuy9NJfr0+OLzCIrA6MnBI6kss8=
Subject key identifier: 5B:64:9E:3C:DD:42:D2:6A:AD:84:F3:FF:2B:AD:A9:D5:2D:BA:3E:56
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018C8DCF3E09D7D334EBD9F7ACFC113CA1A0
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/W2SePN1C0mqthPP_K62p1S26PlY.roa
Signing time: Thu 21 Dec 2023 19:16:58 +0000
ROA not before: Thu 21 Dec 2023 19:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 45.80.168.0/22 maxlen: 22
45.83.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:cf:3e:09:d7:d3:34:eb:d9:f7:ac:fc:11:3c:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Dec 21 19:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b649e3cdd42d26aad84f3ff2bada9d52dba3e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:51:b2:75:02:47:05:2a:87:84:38:cf:21:
05:7f:d6:07:8c:df:ab:46:60:6e:71:06:e0:92:7e:
e6:c0:a8:55:35:98:58:08:93:d3:ac:4f:82:11:56:
6f:05:32:b7:ee:ee:a9:4f:95:8b:79:6b:37:18:13:
d1:43:15:18:42:ec:40:b0:38:ab:09:b4:69:90:d7:
e8:66:3c:ce:d7:e5:1c:1a:17:24:f4:b4:e9:da:26:
9e:e4:69:6a:5c:cc:a5:3e:8f:8e:54:d8:1d:9f:47:
bb:a3:ee:8a:51:32:61:b1:93:96:45:d2:a0:f3:14:
65:f4:5a:b4:2f:a9:75:3f:e5:5d:ad:e6:30:d8:4a:
11:05:fd:9c:ef:77:83:49:0b:34:cf:24:01:d1:d1:
19:ff:25:fb:35:43:d6:7b:05:12:91:c6:09:39:e8:
4c:62:87:68:50:67:38:3a:17:5a:3e:34:76:6c:70:
b4:78:cf:98:14:79:02:d8:41:8d:1c:5d:a5:77:c8:
38:ad:7c:5b:49:e4:83:20:c6:99:00:25:08:47:6c:
f9:ea:82:7b:f8:c4:51:7e:3a:9b:d8:d1:71:99:43:
7c:23:26:f0:40:0a:bb:0c:b5:97:f5:c4:40:41:6d:
28:9f:51:8d:99:e4:d8:2c:14:55:42:bd:35:77:35:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:9E:3C:DD:42:D2:6A:AD:84:F3:FF:2B:AD:A9:D5:2D:BA:3E:56
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/W2SePN1C0mqthPP_K62p1S26PlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.168.0/22
45.83.4.0/22
Signature Algorithm: sha256WithRSAEncryption
84:7b:85:60:23:c4:d8:6c:80:0c:b0:24:d0:45:47:9e:39:38:
e8:fd:f5:ea:01:5e:96:6c:11:06:0f:6a:95:86:a6:11:1c:80:
63:92:b2:a6:d6:23:e0:9b:51:04:f9:89:2a:12:e1:61:36:38:
1f:40:de:fc:1d:76:f8:36:72:81:c3:9e:c6:40:30:7d:e9:02:
22:89:c1:46:71:cb:f8:bf:fc:89:64:db:f2:84:c3:b5:7a:d6:
0f:db:dc:9e:cf:d9:85:65:4e:07:bb:37:05:e5:a4:cd:d2:73:
47:b9:c6:85:6e:f4:29:22:6a:02:ad:9f:ff:dd:ce:00:56:c8:
da:b8:41:82:56:15:21:ac:e2:c3:1a:9a:98:9b:4c:57:0e:06:
57:03:9e:3a:5f:b6:2b:c8:7e:61:eb:9a:aa:cf:ab:75:1d:4a:
3b:76:b5:32:f9:b3:9d:b0:21:8c:a4:f6:f2:fa:73:13:4e:6f:
7a:00:f9:59:c7:20:48:0b:98:48:c4:f4:68:5d:e4:26:bc:e2:
93:5e:f6:70:15:b4:bc:1d:e1:ef:2a:4b:c3:15:6e:b1:21:ab:
14:37:41:bd:bf:43:01:31:69:cf:6a:0e:2e:36:7f:72:9d:1e:
90:2c:71:cc:48:b9:d7:0a:a7:8d:4c:7b:25:65:36:be:61:d2:
62:5f:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org