Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/Wan7WPEBwQPFHif6eXrbdLmFEfs.roa
File: Wan7WPEBwQPFHif6eXrbdLmFEfs.roa (raw, json)
Hash identifier: X0dailIl0hfxiOhraMa7FL8dtPfVTs5+ACRzloa62S0=
Subject key identifier: 59:A9:FB:58:F1:01:C1:03:C5:1E:27:FA:79:7A:DB:74:B9:85:11:FB
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0190DC8DCCC86BA3A7844F7CB076D9CE309A
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/Wan7WPEBwQPFHif6eXrbdLmFEfs.roa
Signing time: Mon 22 Jul 2024 22:26:38 +0000
ROA not before: Mon 22 Jul 2024 22:26:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.158.125.0/24 maxlen: 24
45.158.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 07:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dc:8d:cc:c8:6b:a3:a7:84:4f:7c:b0:76:d9:ce:30:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Jul 22 22:26:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a9fb58f101c103c51e27fa797adb74b98511fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:f7:f5:71:93:17:b0:0e:28:50:27:98:9f:
53:ea:18:e0:7f:eb:dd:79:18:41:fb:26:e4:cc:b2:
2a:f4:32:75:fe:5b:d8:78:8b:aa:d7:69:90:79:38:
b2:c6:27:9a:55:e2:c6:f9:5b:1b:cd:4d:28:28:58:
0c:3c:1e:a5:21:b1:d1:44:1f:29:2e:c6:84:02:62:
95:ff:84:34:53:dd:db:61:b2:da:17:da:a0:fa:61:
22:c8:a3:2b:00:d9:97:18:ad:8b:2e:b4:25:39:47:
19:f6:03:11:0b:16:23:63:35:df:0e:b0:d0:20:bf:
2a:db:3a:92:9a:63:94:9a:ef:d0:21:35:c5:52:1a:
d6:ee:b9:86:dc:70:a4:f9:42:0e:79:97:cb:7b:59:
24:21:82:6e:b9:5e:bc:80:9c:97:02:f3:89:64:46:
04:9d:2c:66:3a:ee:ca:b6:5d:e3:ec:ad:5e:fe:c5:
e1:54:f4:f2:c5:14:37:8d:c7:c9:b0:fd:3b:c8:45:
00:66:d5:df:f4:e4:8f:84:3d:88:2e:76:e9:a6:38:
e8:1d:68:a7:14:39:4c:c2:46:ca:19:04:97:78:29:
6b:01:bb:b6:11:8f:ab:ea:c3:e4:a5:42:18:ea:55:
68:d8:24:b6:75:bd:92:f7:3c:ab:fd:c5:f6:bf:e9:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:FB:58:F1:01:C1:03:C5:1E:27:FA:79:7A:DB:74:B9:85:11:FB
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/Wan7WPEBwQPFHif6eXrbdLmFEfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.125.0/24
45.158.127.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0e:f7:36:42:eb:13:d2:65:56:50:52:a8:dc:2f:a9:4d:f8:
09:fb:cf:c6:a9:69:4d:91:b5:e7:6e:02:d9:80:c1:f6:e7:62:
18:bc:f3:bf:cc:10:d6:54:22:dd:c2:1d:e2:ee:e2:1c:cb:46:
15:f6:c3:53:c5:13:51:67:93:76:f7:03:b1:9e:bd:6f:98:c7:
82:62:dc:25:cc:2d:51:4c:27:8a:d4:49:88:0d:69:fa:28:03:
34:aa:9d:14:01:1e:60:1f:35:75:f9:ba:e8:14:ec:5f:af:e0:
36:b4:5c:1b:24:77:09:d1:15:e6:84:c3:af:7a:3f:07:d1:b8:
41:c8:ae:5f:07:5e:5c:b6:44:2b:2e:63:33:02:77:50:e1:0e:
c2:82:cd:ec:b7:2c:1d:1d:ef:70:03:48:9a:8f:3d:dd:27:4c:
3c:eb:e6:3f:2f:ea:12:cd:e4:fe:69:ff:9b:78:56:0d:e3:f9:
83:da:a4:07:33:0e:9d:21:92:a1:e2:c4:b3:a9:30:d2:58:4e:
10:ca:5f:aa:11:85:47:ff:45:d3:42:91:74:f6:73:04:98:5a:
e9:f5:78:4f:07:f6:d3:85:f1:3a:61:5b:85:61:59:1a:00:e2:
c2:19:60:25:9b:13:0e:71:10:4e:67:0a:ac:c4:1c:c9:33:b8:
fe:a7:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 10:10:08 2024 by rpki-client on console-fra.rpki-client.org