Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/wsJwqRS8dVm1gvduYWmo4a582XA.roa
File: wsJwqRS8dVm1gvduYWmo4a582XA.roa (raw, json)
Hash identifier: rqmJuqLO85ckXsYXPkmwvNVwnyy2SZADzZQ2zWUzBI0=
Subject key identifier: C2:C2:70:A9:14:BC:75:59:B5:82:F7:6E:61:69:A8:E1:AE:7C:D9:70
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0186EB843E549D33A97FABF1B2A60E7C1128
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/wsJwqRS8dVm1gvduYWmo4a582XA.roa
Signing time: Thu 16 Mar 2023 17:42:37 +0000
ROA not before: Thu 16 Mar 2023 17:42:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45027
IP address blocks: 45.147.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 26 Mar 2023 14:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:84:3e:54:9d:33:a9:7f:ab:f1:b2:a6:0e:7c:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Mar 16 17:42:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c270a914bc7559b582f76e6169a8e1ae7cd970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:c2:7d:02:ad:ac:79:0b:d4:cf:8c:56:0f:
9e:e1:5f:99:4f:82:5a:3b:85:0d:5b:09:c2:f5:84:
3e:9c:b0:31:c3:91:28:05:c5:ae:ec:0d:2c:51:63:
27:19:35:9d:d4:e5:98:a1:56:90:ad:9a:fe:33:cf:
80:de:23:0e:9c:86:11:69:e2:f8:93:0e:4b:27:75:
6e:a1:ff:0e:62:07:ec:11:c4:d3:90:6e:16:d1:74:
2a:69:00:ee:44:f0:1c:53:13:eb:4b:6f:ce:d4:49:
c7:ac:2e:99:aa:7c:b5:7f:82:4d:b2:ad:f9:ca:71:
84:60:1c:51:b3:c9:03:64:60:d2:53:43:4e:dd:dd:
0f:56:7a:f6:e7:55:1a:1e:85:b5:d8:db:44:ce:b3:
19:d3:5d:9e:51:1a:34:67:e0:c4:73:cf:58:67:11:
f8:02:92:98:20:06:fd:3b:f4:76:81:a8:c1:d4:8d:
89:35:00:f6:3d:76:4d:be:9c:cd:61:a3:dd:4e:32:
ed:b7:3c:a8:ab:d8:8d:e7:03:ae:d2:d8:46:2d:bc:
41:35:de:cd:70:69:c6:a8:8a:3c:ce:3f:20:70:4f:
8e:bd:df:2c:ea:9d:21:f3:62:d8:f9:5c:f7:29:39:
36:fb:23:3a:3a:af:e9:a5:5d:b2:64:9c:af:0b:8f:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:70:A9:14:BC:75:59:B5:82:F7:6E:61:69:A8:E1:AE:7C:D9:70
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/wsJwqRS8dVm1gvduYWmo4a582XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.148.0/22
Signature Algorithm: sha256WithRSAEncryption
41:bc:22:1c:81:9e:2f:be:44:d8:02:f6:e4:08:c3:17:b4:c4:
d9:bb:c2:c8:93:3c:93:ad:51:0f:33:cf:90:64:f4:2f:2b:3c:
df:99:c8:58:e3:9b:35:cf:9f:41:1d:b8:64:3e:61:89:08:58:
8f:e2:dd:03:fb:24:66:7b:65:98:e9:38:c7:bc:b9:90:53:c4:
85:a1:dd:4e:f6:37:85:d2:52:91:27:31:4d:86:6e:f5:15:bf:
1d:c2:be:c2:4d:6b:dc:57:34:59:59:af:74:e0:3a:7f:90:a5:
60:0d:91:54:de:e3:00:f1:48:cf:e8:98:00:72:54:da:11:b6:
e3:9e:1b:b1:ac:d4:fc:7a:2b:8a:b5:83:3c:34:5b:e3:b1:8f:
d6:10:2d:98:e2:bb:9a:3f:72:eb:0e:86:99:68:07:5f:dc:1b:
fb:e9:62:95:43:81:52:1d:c3:cd:de:e4:f6:54:a4:7c:67:64:
b0:12:fa:00:c0:da:3a:54:c8:86:a5:d6:3b:a8:58:04:c3:f7:
62:24:32:fb:d9:9e:69:d8:e6:6e:19:bb:2f:4f:a4:d1:fa:51:
c6:f2:23:4f:91:20:71:9c:ba:11:49:32:9e:1b:e5:b9:36:49:
7a:64:21:9d:7a:91:a7:32:8f:68:03:ac:eb:0d:35:2d:31:e8:
a7:67:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org