Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KWukXlAJ8_0eiDh_8rZqtKFWk1g.roa
File: KWukXlAJ8_0eiDh_8rZqtKFWk1g.roa (raw, json)
Hash identifier: 9rFD7eLTZRmUSGtXE5XERvGRajw9jNnGkhTMFP2LI84=
Subject key identifier: 29:6B:A4:5E:50:09:F3:FD:1E:88:38:7F:F2:B6:6A:B4:A1:56:93:58
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186DACA02E5045718C71E10FB684E0EDF72
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KWukXlAJ8_0eiDh_8rZqtKFWk1g.roa
Signing time: Mon 13 Mar 2023 11:45:17 +0000
ROA not before: Mon 13 Mar 2023 11:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 45.90.16.0/24 maxlen: 24
185.126.83.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 08:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ca:02:e5:04:57:18:c7:1e:10:fb:68:4e:0e:df:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 13 11:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=296ba45e5009f3fd1e88387ff2b66ab4a1569358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e2:b7:0d:29:38:29:7f:66:f9:26:85:b4:3d:
98:50:97:70:20:31:0d:c3:0b:97:e6:94:76:57:7f:
e0:a5:3d:55:72:04:c4:4d:db:aa:78:f3:e9:82:ae:
3d:fb:86:44:43:8a:c7:c7:9b:c0:36:86:f7:9a:50:
f6:2c:d9:a4:bb:19:66:3d:d4:70:c1:e1:3f:c3:45:
91:0a:87:fb:cc:e0:ef:77:22:8e:d8:4f:1c:1f:f6:
5f:83:f8:29:4f:2b:ba:2d:c1:16:c5:26:3b:25:64:
c6:e3:a0:9a:12:8f:1f:dd:0e:f8:f9:0c:e4:20:61:
0a:e3:ee:e9:4c:75:4e:f6:6f:f9:32:ae:e9:65:f0:
48:7a:d1:41:31:4f:52:ef:44:1c:ea:32:3f:b9:a8:
73:2f:09:9a:24:17:05:22:77:3d:2a:16:11:e3:2b:
51:14:48:6e:76:5b:e4:fa:2c:58:e4:51:a7:6b:49:
29:5e:9a:89:03:a4:f7:f8:c8:5f:50:82:bd:0e:68:
59:6a:e9:07:6b:78:42:bf:ea:83:29:7b:3d:32:db:
b3:23:ac:17:43:5f:f1:71:80:a4:b7:35:6e:c0:73:
36:86:2d:3a:5e:bc:ff:d4:33:95:cf:4a:89:0a:11:
85:e1:96:85:db:25:ca:3e:bd:e1:5a:8b:eb:6d:8a:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:A4:5E:50:09:F3:FD:1E:88:38:7F:F2:B6:6A:B4:A1:56:93:58
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KWukXlAJ8_0eiDh_8rZqtKFWk1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.131.134.0/24
185.126.83.0/24
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e2:b3:5f:1d:04:56:26:0c:c3:8f:4e:ae:07:01:23:91:d7:
f9:06:f5:02:a1:24:ad:0a:d2:f7:7f:39:0e:09:de:06:d1:10:
42:ad:04:04:68:20:7b:da:3e:16:15:fd:2f:4b:57:08:49:92:
22:a2:a6:47:ce:6a:de:aa:54:fb:ad:e4:90:8f:44:5b:50:81:
71:5e:90:52:13:8d:4a:89:26:20:c7:48:65:80:a4:14:b2:ad:
9e:8d:b5:4f:9b:a5:dc:6f:05:99:af:cd:26:63:2d:af:ec:57:
5a:2b:24:f5:f9:2a:e9:b6:97:60:ab:f0:db:73:25:00:e7:a4:
20:02:55:18:a1:9f:d5:67:89:34:b3:55:fb:fe:17:38:db:58:
8e:82:e3:09:a9:c5:49:54:b9:ae:c9:5e:47:d3:dc:d3:c6:04:
c9:24:ea:85:f8:3e:de:d9:8e:1f:9c:9c:13:bb:1e:0a:54:1c:
14:1b:8a:5a:ab:dd:9f:a9:06:6b:7f:42:48:71:db:fb:d5:b2:
cd:43:70:20:32:da:65:0f:64:98:21:ea:1d:e4:07:c6:18:a8:
7c:2e:10:fa:60:3f:97:41:d7:10:ec:11:d7:65:d7:0f:96:d3:
18:0e:c7:81:8d:36:39:4c:06:9a:43:2b:22:84:40:2d:7c:02:
03:75:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org