Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ws3kICK6_FfSQHP1wUEvsmuhd_k.roa
File: ws3kICK6_FfSQHP1wUEvsmuhd_k.roa (raw, json)
Hash identifier: utSgjX/ZaZ77u5vpwLy9psF6fbDqLCsSyis4my4dcUQ=
Subject key identifier: C2:CD:E4:20:22:BA:FC:57:D2:40:73:F5:C1:41:2F:B2:6B:A1:77:F9
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 01856FA7172562F30F7881279E5780DAA628
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ws3kICK6_FfSQHP1wUEvsmuhd_k.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34854
IP address blocks: 45.92.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:17:25:62:f3:0f:78:81:27:9e:57:80:da:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2cde42022bafc57d24073f5c1412fb26ba177f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:01:59:68:f2:d3:5f:1c:82:f4:9a:9d:b6:
7b:58:3a:ef:14:c6:8b:60:07:53:5a:17:ec:5b:52:
90:ce:b6:ed:4b:7e:41:0e:61:19:ba:fd:67:f6:b8:
30:62:08:8c:05:c2:26:a5:4b:db:47:ab:40:c6:c8:
57:c3:bd:d3:ef:33:e3:27:1b:44:27:41:3c:de:1c:
ed:26:6d:ca:5c:15:65:72:f6:1c:69:0c:70:f9:9c:
55:34:0e:c3:dd:63:88:a3:1c:22:0c:04:e6:1b:b1:
fb:d0:29:32:9f:7a:89:47:d8:12:5d:6c:19:ba:59:
fd:44:fa:41:3e:5a:53:64:1e:8c:14:a8:e3:4e:bb:
d7:b7:7b:76:74:0b:20:7c:ec:9d:96:d1:13:d1:47:
09:38:66:8a:78:22:5f:af:eb:52:9d:0e:37:fa:41:
c0:a1:30:1e:02:d5:8e:5f:96:ee:67:b9:30:2a:15:
77:a6:6f:28:80:c6:5b:d0:41:c1:48:9b:ca:f2:1e:
1b:9b:c6:24:d9:f8:65:ac:4c:9c:b6:41:87:27:54:
ec:83:4f:8c:99:5e:be:cf:fa:2c:40:aa:03:fe:b3:
6a:3c:cf:e0:39:50:49:8d:d9:95:df:2c:24:8f:2a:
22:89:21:9b:8f:16:57:a3:ed:79:ea:84:0d:18:76:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CD:E4:20:22:BA:FC:57:D2:40:73:F5:C1:41:2F:B2:6B:A1:77:F9
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ws3kICK6_FfSQHP1wUEvsmuhd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.40.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d6:d2:d2:eb:c1:b9:6f:0f:81:20:e3:71:c3:21:25:71:f9:
2f:33:80:f9:34:be:f3:d2:c5:07:30:c2:b9:72:2d:c5:b1:64:
d0:9f:75:24:de:d3:b6:40:9c:87:4b:cd:c9:6e:7c:0c:15:fd:
e2:6e:2f:a9:18:4d:1a:82:11:db:e3:12:f8:61:77:04:de:25:
c7:22:23:28:df:2d:12:e6:6c:44:d9:51:81:fb:d5:c2:76:68:
34:23:e9:27:16:f1:7b:65:cf:43:a6:fc:a8:11:bb:44:eb:b8:
47:c2:28:c3:ef:8a:a7:c6:1c:66:e6:38:40:ea:41:c8:1e:dc:
3e:89:dd:c0:a9:3a:eb:82:be:da:87:a2:bc:4b:62:38:26:b3:
ba:26:3d:94:68:46:a6:39:f4:3d:95:08:5e:60:88:99:6d:c3:
ce:de:2f:4c:76:6d:8d:ae:5a:09:0e:89:1f:5c:a6:30:fb:43:
e4:17:98:52:54:e8:37:8b:57:0e:56:99:a8:62:a6:6e:6f:93:
36:e7:e3:16:fc:2d:c7:f8:cb:66:bc:f5:36:4b:d9:77:01:da:
65:b7:59:4e:fc:51:09:a4:a0:42:53:71:ff:2a:73:67:ea:c0:
98:c0:b9:da:e0:da:af:e3:14:61:8f:ce:04:c5:4c:8a:fb:13:
0a:32:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org