Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WeJA0-2S9BjpOATFt4eSJZx3_8o.roa
File: WeJA0-2S9BjpOATFt4eSJZx3_8o.roa (raw, json)
Hash identifier: mp1T8mYtv/mAYQiSNNq8r23NGob1seZ35+oubiz6O24=
Subject key identifier: 59:E2:40:D3:ED:92:F4:18:E9:38:04:C5:B7:87:92:25:9C:77:FF:CA
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E790679275378F7513A489407FE18DC
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WeJA0-2S9BjpOATFt4eSJZx3_8o.roa
Signing time: Sun 01 Jan 2023 17:55:03 +0000
ROA not before: Sun 01 Jan 2023 17:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27323
IP address blocks: 45.14.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:06:79:27:53:78:f7:51:3a:48:94:07:fe:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59e240d3ed92f418e93804c5b78792259c77ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:a6:f5:54:31:70:d9:4a:55:7a:9d:37:8b:
d5:11:12:2d:f2:13:3c:f3:70:d9:a6:d6:a5:9e:e2:
32:ee:29:b1:a4:88:9e:45:33:3a:01:6c:3a:d5:94:
53:53:6b:07:db:a5:76:95:9d:7a:81:07:07:c0:49:
38:f1:f0:7d:74:19:48:aa:c0:93:f2:9e:53:e4:88:
e6:7d:90:ca:f1:cc:0e:13:b0:ac:0c:51:5e:fe:63:
15:5d:98:e1:89:a1:52:c2:34:4f:f9:eb:df:a1:27:
f8:3e:a9:99:c9:b7:0b:57:b0:aa:b8:35:98:f5:cc:
67:ac:58:ff:7d:7d:24:ec:57:ca:9c:b8:65:39:5d:
59:4d:6f:71:c7:90:4f:e0:a8:fb:10:fa:a8:ca:1c:
12:18:8a:f9:22:3f:c2:1f:03:96:af:4d:36:42:5b:
87:2e:7b:fb:e8:30:82:ba:91:33:b8:5b:b0:60:fb:
53:65:6b:49:fd:a1:fd:19:d4:8d:61:cd:6a:22:55:
ea:c6:40:cf:83:1e:59:84:ee:89:3f:5f:e4:6b:67:
c5:a3:5a:26:ce:84:49:ad:43:07:25:2c:f9:7e:e3:
28:9a:88:ac:72:44:a4:6d:0e:3b:01:61:95:4a:ae:
63:85:66:2f:09:6f:8e:d7:0c:58:af:ac:ae:5c:1e:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:40:D3:ED:92:F4:18:E9:38:04:C5:B7:87:92:25:9C:77:FF:CA
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WeJA0-2S9BjpOATFt4eSJZx3_8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.115.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b8:4e:b1:db:38:57:e5:e2:03:a0:c4:35:73:b2:23:fe:26:
a1:8e:6d:20:f0:d9:bd:ab:4b:4f:22:62:21:0d:de:05:ee:e3:
60:4e:8c:4f:c6:d2:07:d0:aa:6a:9c:c1:ff:66:bd:0b:be:39:
e3:2c:c8:b8:87:71:76:eb:0d:3c:03:88:4a:ec:09:cd:4c:c1:
c2:10:a5:da:77:d4:1f:93:fc:3f:b9:d7:18:05:75:46:e5:d7:
ce:3b:56:7f:0c:21:cb:21:a5:f7:eb:5c:72:e7:b4:02:26:df:
c4:76:cb:7c:5b:f5:a8:8d:c7:c0:23:d7:5f:81:3c:a8:58:e3:
1a:e2:f5:98:fd:41:40:fb:45:aa:fb:e4:af:c0:5b:bf:48:de:
5a:19:e2:87:4d:74:c0:8a:d9:84:e5:21:f3:bd:72:a9:23:48:
dd:4c:cd:7b:17:86:c1:7e:ec:74:d1:25:21:17:b5:35:23:d2:
04:f3:a0:84:d4:b8:64:ec:40:c6:19:44:58:3d:ad:9f:6e:3a:
8a:e5:e6:f5:e9:9b:27:bd:a7:47:2f:54:66:56:92:e6:0d:2d:
6b:16:1b:5a:10:43:c9:9c:6e:1c:f5:8b:16:9f:c4:9b:1c:d8:
1d:4a:be:f2:b9:08:db:e1:5a:eb:56:5a:11:63:1f:43:ce:a0:
b2:d7:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:08 2024 by rpki-client on console-ams.rpki-client.org