Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/wfkPfk1Eh-e8J7hKcKcru5eo9bE.roa
File: wfkPfk1Eh-e8J7hKcKcru5eo9bE.roa (raw, json)
Hash identifier: xxYVIF2OxTj5RQrcIBuxyxcaK1CqgOX85166SydLoUY=
Subject key identifier: C1:F9:0F:7E:4D:44:87:E7:BC:27:B8:4A:70:A7:2B:BB:97:A8:F5:B1
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 01879D63E210E12F25CBD1AA747421E5FC7A
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/wfkPfk1Eh-e8J7hKcKcru5eo9bE.roa
Signing time: Thu 20 Apr 2023 06:39:41 +0000
ROA not before: Thu 20 Apr 2023 06:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198895
IP address blocks: 45.140.133.0/24 maxlen: 24
46.229.242.0/24 maxlen: 24
2a13:2580::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Jul 2023 16:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:63:e2:10:e1:2f:25:cb:d1:aa:74:74:21:e5:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Apr 20 06:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f90f7e4d4487e7bc27b84a70a72bbb97a8f5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:08:3e:f7:78:ae:a7:4f:7c:53:3f:6d:f0:
03:70:13:a0:c7:a9:47:d4:67:37:83:6b:88:6f:85:
e5:0b:ed:e8:ff:5e:dc:d8:fe:59:73:17:48:32:53:
da:6a:0b:a6:19:a2:10:3b:c3:84:36:a7:4d:3b:22:
68:6f:5b:b4:49:aa:ac:0d:39:f2:f7:a6:9d:40:e1:
49:f6:a8:c5:ef:88:6b:3d:67:aa:09:14:ea:97:40:
8c:05:7c:30:74:d2:ef:e6:d4:d4:7b:b1:6c:dd:6c:
d1:e5:fd:4d:40:65:8e:da:b4:0c:45:5d:8e:53:97:
6f:e0:e5:b7:c0:52:81:26:ad:95:62:45:fb:4b:78:
8e:d9:ba:81:df:a5:5b:b5:c3:e8:9e:02:e8:65:74:
81:dc:1d:11:a9:86:da:e3:a9:57:c1:62:82:6c:04:
da:8e:7b:6a:82:5c:e7:7c:15:5d:d0:d9:96:8e:34:
70:ab:6e:87:61:ba:43:36:f0:ad:af:dd:7f:0b:59:
a7:04:d4:fb:22:d6:3c:db:67:f2:04:bb:6b:fe:45:
b2:40:db:24:7e:b6:02:69:d6:42:18:3b:7d:84:35:
03:74:5e:39:7b:b4:6f:0d:3c:4c:8e:e2:ad:c8:42:
17:a7:d1:e8:ed:1d:c1:97:c9:d1:fb:7a:9f:87:d4:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:0F:7E:4D:44:87:E7:BC:27:B8:4A:70:A7:2B:BB:97:A8:F5:B1
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/wfkPfk1Eh-e8J7hKcKcru5eo9bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.133.0/24
46.229.242.0/24
IPv6:
2a13:2580::/29
Signature Algorithm: sha256WithRSAEncryption
1f:40:da:0c:49:6c:c8:63:66:e1:28:d7:23:18:53:7a:05:f3:
f5:ac:86:73:ec:d5:34:75:29:23:72:0b:2a:60:3e:08:6e:27:
92:c6:f4:3f:9b:31:08:2c:f3:ba:4e:95:23:f8:dc:c4:69:8a:
9d:db:61:e3:78:26:bd:f3:f4:b4:56:de:b4:1e:fa:59:fe:64:
80:06:7f:18:75:32:27:11:19:80:92:6a:f3:a8:39:c6:ad:ab:
c2:7d:39:3c:cc:36:38:91:50:b2:4a:a1:e2:32:44:e8:d4:7a:
38:52:2a:b3:69:86:e4:a6:9c:41:c2:1c:12:20:17:0e:f9:ef:
51:87:20:3a:3b:17:6c:c6:6f:d7:8e:09:86:30:95:92:11:f6:
c3:c4:10:de:15:9b:ce:cf:43:d0:78:9d:42:00:a2:1d:f2:3d:
22:0a:d2:81:bd:0f:43:20:1a:4e:6f:fb:cd:de:1f:b0:a6:9b:
60:a1:82:e6:31:93:6f:30:d2:d1:81:65:49:c7:c0:13:e2:82:
7a:07:e1:74:ed:35:bc:d5:b2:f6:69:9b:28:41:31:2a:7c:1f:
49:3f:df:47:87:44:85:31:15:19:1d:f8:48:53:27:e1:a0:07:
44:dc:68:ce:fc:66:82:9f:11:a2:58:2c:83:64:5b:b6:db:f6:
38:71:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org