Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sWDKUpHi6JccH2B_2W6L0Fhvgs0.roa
File: sWDKUpHi6JccH2B_2W6L0Fhvgs0.roa (raw, json)
Hash identifier: 6Ys5s5AZDEkpA9yt9hme+Z1oJGFHeOHb6JZ/5bNmOn0=
Subject key identifier: B1:60:CA:52:91:E2:E8:97:1C:1F:60:7F:D9:6E:8B:D0:58:6F:82:CD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018C39E54151CE105D2CBE959B828D850A1D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sWDKUpHi6JccH2B_2W6L0Fhvgs0.roa
Signing time: Tue 05 Dec 2023 12:12:54 +0000
ROA not before: Tue 05 Dec 2023 12:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 45.91.50.0/24 maxlen: 24
45.8.68.0/24 maxlen: 24
45.67.97.0/24 maxlen: 24
45.67.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:e5:41:51:ce:10:5d:2c:be:95:9b:82:8d:85:0a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 5 12:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b160ca5291e2e8971c1f607fd96e8bd0586f82cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:7c:dc:98:df:e1:d2:d0:cf:09:57:81:86:
92:90:f9:99:de:8c:13:b3:89:cc:f3:9c:ef:e8:e3:
c2:28:7f:ae:1b:bd:d6:70:e5:22:bf:73:f1:fc:57:
84:2b:36:0d:7a:35:e2:f1:40:11:a1:27:71:cc:fd:
a9:28:d7:87:1a:28:56:e9:15:58:af:a7:d4:97:00:
f1:e5:f2:f4:77:25:15:a3:6c:6e:50:18:07:c4:6d:
04:b0:c7:bd:ff:ce:db:53:93:f4:a2:41:63:19:0f:
bc:3c:17:06:cc:7f:b9:75:89:35:d0:78:d8:a9:51:
74:be:21:6a:c2:1a:ba:71:30:0f:99:74:f2:d2:73:
6b:80:aa:e7:0a:5b:95:ac:92:3a:eb:82:31:c7:73:
0b:31:9f:6b:13:b5:9d:29:e0:54:5c:c9:ad:f5:73:
ba:47:06:b1:f1:da:5f:f5:03:f5:9e:66:1f:20:b2:
1f:78:3a:14:5a:a5:46:b8:a0:ab:2c:fb:13:c9:b4:
d1:8c:d4:fa:5b:91:b8:eb:59:3c:d3:25:25:e1:26:
1a:4e:da:dd:78:77:54:61:ea:69:4f:0a:2a:12:b3:
9b:0d:5e:45:69:62:0c:34:7d:b1:f7:26:94:2a:fc:
c4:7d:b9:f5:62:53:24:b8:52:da:93:94:37:a7:e5:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:CA:52:91:E2:E8:97:1C:1F:60:7F:D9:6E:8B:D0:58:6F:82:CD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sWDKUpHi6JccH2B_2W6L0Fhvgs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.68.0/24
45.67.97.0/24
45.67.99.0/24
45.91.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ee:71:18:1f:ed:c4:a2:ed:e1:7d:ef:b3:51:3a:b3:ab:55:
a7:4c:ad:b4:2c:fd:60:56:5b:41:49:c0:6f:3b:d9:72:c6:9d:
8b:de:29:1e:38:ac:99:80:10:c9:50:fc:37:eb:39:30:62:4f:
98:27:e8:e8:83:59:0c:f3:e4:88:e9:80:4e:cc:61:f5:04:bf:
99:d8:b0:76:70:6b:72:7d:50:ec:06:16:9c:78:7a:2d:e5:c7:
b0:ea:65:e9:f9:1a:23:16:9f:3b:17:21:0b:02:9b:2a:29:9c:
c0:fe:5e:1e:96:c2:6b:86:4f:71:ad:e1:f8:71:11:45:b2:5d:
ae:ce:cf:57:97:e4:4c:6d:61:89:14:8c:58:65:c0:29:af:29:
55:92:13:7e:b0:d3:6a:5c:a1:a2:26:b5:65:41:4f:93:b7:1a:
92:3c:3e:1e:38:3f:11:c7:c2:b9:7f:4e:51:52:79:f2:49:75:
84:26:c1:6d:4b:de:4a:9f:54:58:41:83:46:56:45:35:de:f5:
70:bd:23:b0:82:a2:d4:10:5b:68:f0:e5:9a:8d:a5:7c:b8:ad:
3e:81:78:26:fd:83:e6:6c:7f:b9:0a:28:96:3c:03:57:5f:5b:
4b:26:20:c9:db:15:64:1b:98:ce:07:15:43:f7:ab:cb:ce:6c:
49:65:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org