Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/wEFUktODLdWaK3EcCChr2ujXJY8.roa
File: wEFUktODLdWaK3EcCChr2ujXJY8.roa (raw, json)
Hash identifier: kyX8+1N0QBnDXAvmPCVQPE9n+oYQQXUi10HuF2x4p28=
Subject key identifier: C0:41:54:92:D3:83:2D:D5:9A:2B:71:1C:08:28:6B:DA:E8:D7:25:8F
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0187FFABEA39AF4C7DADF34D5D94D9EEC1A5
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/wEFUktODLdWaK3EcCChr2ujXJY8.roa
Signing time: Tue 09 May 2023 08:41:09 +0000
ROA not before: Tue 09 May 2023 08:41:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 45.84.112.0/23 maxlen: 24
45.84.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 08:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:ab:ea:39:af:4c:7d:ad:f3:4d:5d:94:d9:ee:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: May 9 08:41:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0415492d3832dd59a2b711c08286bdae8d7258f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:a2:90:10:01:be:0e:b0:a5:e4:56:59:50:
c9:1f:d2:9e:88:bc:5f:82:cf:bc:fb:07:ae:da:82:
ad:24:8f:39:17:4e:7b:11:6b:6d:ca:2e:5c:5c:c8:
bf:60:04:28:b4:d8:d3:45:d9:39:6f:44:8d:42:d0:
50:8d:d6:d7:e8:2b:e9:51:11:1b:bf:de:e2:f8:e3:
14:63:64:f2:46:45:09:d6:00:18:5b:aa:a5:77:ca:
b9:5b:20:68:5e:c6:20:cc:c3:19:26:83:4a:3a:1e:
54:07:db:39:ff:e1:17:ea:8e:45:00:88:36:7f:d7:
ef:db:d3:92:70:12:6c:a0:0b:55:16:ec:bb:17:26:
b1:52:e3:27:d6:22:bf:72:65:23:81:b4:51:58:93:
ea:a4:36:50:62:0a:44:9c:01:d6:2b:f7:21:81:9e:
5e:80:a5:a1:c4:39:f0:b8:3d:6f:01:e3:9a:55:21:
6b:d4:e0:dd:eb:68:f9:0e:80:ea:2b:99:58:dd:a1:
4c:d9:79:21:22:a2:2b:1b:c8:48:14:41:e2:eb:8b:
9c:8b:aa:86:e1:65:eb:92:5a:94:d5:92:88:15:b3:
bb:18:5b:21:06:b5:58:f3:f6:62:d5:f7:ad:90:28:
62:7a:71:07:3f:e0:1f:3a:f0:fa:0c:87:dd:39:0e:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:54:92:D3:83:2D:D5:9A:2B:71:1C:08:28:6B:DA:E8:D7:25:8F
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/wEFUktODLdWaK3EcCChr2ujXJY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.112.0/22
Signature Algorithm: sha256WithRSAEncryption
87:d2:c9:32:d9:8b:ee:16:74:eb:92:27:75:70:d9:d0:64:24:
64:47:76:16:26:03:50:ea:f5:3f:4a:f8:be:33:6c:eb:34:74:
99:a8:fd:01:b4:9e:92:ea:20:2a:75:70:b1:48:ce:57:8e:40:
01:16:31:d1:07:a9:e5:b1:14:73:ab:99:44:71:01:33:2d:cb:
73:ba:1c:4a:8e:b3:b7:4b:76:6b:24:02:6a:9c:72:44:9d:bb:
2b:3c:d8:0d:fc:f0:18:fb:28:98:d4:eb:2a:8e:11:61:b9:5a:
59:3f:c3:5d:a2:e1:c6:ed:f1:05:4a:9d:ee:44:db:47:1c:8e:
96:dc:4d:c2:ab:9d:8b:4a:cb:cd:2b:76:17:4f:63:6a:8c:26:
ab:5d:bc:e0:be:8b:d3:1d:53:97:49:3e:c6:c4:c0:13:16:f3:
50:26:37:32:9a:a1:10:7e:d6:10:3e:73:9f:8c:f7:6d:a6:1d:
23:5b:29:cc:a5:a0:64:90:ba:93:14:78:de:f3:c9:47:19:2c:
74:7d:12:33:cf:e1:95:36:cd:6f:23:0b:04:7a:11:c1:42:37:
84:80:38:76:2a:5c:f4:27:2c:f4:21:6a:1c:6b:cc:bd:ba:3e:
27:f2:33:6b:49:eb:7d:7e:02:0b:60:57:9f:47:a1:14:45:74:
44:7d:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org