Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/WAYkABrCBtfdqMUfYisI3R-hRJE.roa
File: WAYkABrCBtfdqMUfYisI3R-hRJE.roa (raw, json)
Hash identifier: 70Xnr2tz58dkx+SlyrHrlZtN8WwIE6GBRuZs65iMwi0=
Subject key identifier: 58:06:24:00:1A:C2:06:D7:DD:A8:C5:1F:62:2B:08:DD:1F:A1:44:91
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 018737F5425976BB060AA0DA46F4260466BE
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/WAYkABrCBtfdqMUfYisI3R-hRJE.roa
Signing time: Fri 31 Mar 2023 13:57:12 +0000
ROA not before: Fri 31 Mar 2023 13:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 45.150.244.0/22 maxlen: 24
185.248.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:f5:42:59:76:bb:06:0a:a0:da:46:f4:26:04:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Mar 31 13:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=580624001ac206d7dda8c51f622b08dd1fa14491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:43:38:75:21:d2:9f:f1:73:9f:a5:72:76:73:
e7:f7:d8:8e:83:0b:6b:c6:74:d6:87:f1:b2:c6:11:
9b:18:6f:54:ee:3c:1c:50:20:d7:69:a7:3d:28:e3:
43:17:c6:2a:c1:4d:28:97:34:30:04:6a:b3:89:71:
b3:68:be:7d:0f:a3:5a:8a:98:89:93:3a:a3:31:bb:
74:f2:6e:cb:20:a8:49:43:98:f2:a3:3d:d2:73:1b:
c3:42:73:d7:64:97:a4:2a:e4:96:36:a7:81:43:fc:
ba:cf:6c:70:f7:0d:83:f8:fc:78:6f:24:db:d9:2d:
9e:9d:f8:27:d9:de:a8:7e:c6:7e:91:3d:e7:18:3c:
37:c4:15:c6:9c:5d:fd:1b:4e:63:93:c3:e0:27:ab:
ae:32:a9:7a:c6:1a:00:b8:52:55:67:3a:94:93:2a:
00:d9:01:bf:ac:6d:00:41:8b:de:0d:ef:06:dd:6a:
a9:2c:27:68:44:1a:3b:06:b7:5a:1e:6d:13:9c:4f:
70:e6:86:6c:ba:61:99:90:27:c5:66:85:05:03:46:
b6:fd:93:84:16:bf:2e:9a:2d:c3:76:d3:93:0c:64:
92:c7:03:95:aa:53:22:cc:02:69:15:ee:2e:77:15:
b0:1e:f4:9a:1a:e3:42:3f:f6:53:48:67:99:de:89:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:24:00:1A:C2:06:D7:DD:A8:C5:1F:62:2B:08:DD:1F:A1:44:91
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/WAYkABrCBtfdqMUfYisI3R-hRJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.244.0/22
185.248.236.0/22
Signature Algorithm: sha256WithRSAEncryption
48:a1:e3:f5:48:b6:41:97:72:d7:45:60:49:74:79:25:5c:61:
bf:ed:6c:05:e7:58:4e:81:a7:f0:4b:79:76:e4:b3:db:4a:04:
c6:ce:eb:63:8d:8c:0b:ee:e4:89:d0:ab:3f:b0:34:05:0c:a0:
ed:3b:7e:b8:d3:f0:e4:d2:99:65:02:4c:fd:ce:68:40:a3:d9:
0b:63:1a:c7:56:bd:03:ac:34:d6:67:94:33:18:26:aa:a8:04:
b3:dc:29:31:5d:24:43:c2:f4:22:c5:e6:87:09:a4:56:be:a9:
87:2c:b6:9c:11:a3:00:4e:18:a4:63:01:78:22:bb:78:2d:aa:
11:b7:d9:be:b2:55:04:9c:15:1b:78:23:c2:28:e7:e0:21:bd:
cc:69:ac:e3:db:ce:4c:45:42:04:10:f6:49:fd:38:a6:b3:2d:
f9:ae:98:12:75:89:9c:f2:03:eb:29:d2:cf:84:38:e4:db:f1:
00:67:ba:e1:18:d8:c1:b3:80:97:96:cd:e8:dc:52:6c:10:6e:
fc:5e:0b:39:c2:1a:cd:84:d1:be:06:5a:07:4c:aa:a7:ae:7b:
3a:b5:14:dd:6e:f6:70:55:9c:1b:85:12:48:63:ec:f4:50:6d:
c4:00:6f:c1:98:6f:d0:ae:d1:fe:25:72:d8:89:99:c9:5d:a0:
d0:93:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 09:01:00 2023 by rpki-client on console-fra.rpki-client.org