Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/iWuTCPr9JeIEoIfP_nw9Nx1zG-w.roa
File: iWuTCPr9JeIEoIfP_nw9Nx1zG-w.roa (raw, json)
Hash identifier: 4ZqYOQV/VITxYF7n1fIL7HJtYXqWM7VraC7mFbqp8eQ=
Subject key identifier: 89:6B:93:08:FA:FD:25:E2:04:A0:87:CF:FE:7C:3D:37:1D:73:1B:EC
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 01887793FC034D4AA67CCC611BC358C6C6CB
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/iWuTCPr9JeIEoIfP_nw9Nx1zG-w.roa
Signing time: Thu 01 Jun 2023 15:29:26 +0000
ROA not before: Thu 01 Jun 2023 15:29:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 91.202.188.0/22 maxlen: 24
45.10.4.0/22 maxlen: 24
45.141.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:93:fc:03:4d:4a:a6:7c:cc:61:1b:c3:58:c6:c6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Jun 1 15:29:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=896b9308fafd25e204a087cffe7c3d371d731bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:6e:94:1e:9f:47:ad:5e:99:c0:6c:42:a3:
35:9c:7e:b4:66:7b:2f:ae:3b:29:a1:46:75:59:6c:
05:48:4d:91:13:d4:6c:bb:e6:1b:86:99:9b:cb:4f:
57:bd:f1:9b:0f:17:5a:66:6b:64:ee:48:05:b3:b8:
76:57:e6:75:19:e9:45:14:61:ca:be:0c:94:a8:6a:
8f:03:b6:30:47:92:d7:bc:1b:ba:c5:36:93:40:07:
06:a2:fe:9f:df:30:b4:40:f6:9a:e4:ca:d0:22:97:
a6:a2:d3:c1:91:eb:0d:11:64:1f:64:77:e1:71:80:
01:4f:c7:6c:21:de:46:86:12:d3:52:e4:5e:0b:80:
cf:c4:e9:c0:eb:88:6e:e8:ca:09:a1:e0:f5:2a:3b:
84:9b:f7:4c:2b:60:bf:f5:c4:d7:e3:d9:de:9b:7e:
73:13:66:bc:b5:03:3f:72:14:7e:bc:8c:4d:15:16:
71:a5:6a:b2:34:bb:ef:a6:da:55:19:3a:98:10:09:
0f:ea:16:e7:ac:0c:dd:49:45:48:a0:c8:95:35:0a:
91:b8:cb:74:5c:a6:45:fd:0e:9b:80:d6:3b:32:1f:
04:9c:b9:13:e6:40:d4:08:cf:ca:90:1e:6a:76:b5:
e9:f7:f3:09:99:f6:4a:c8:6c:1c:bd:58:a1:44:72:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:93:08:FA:FD:25:E2:04:A0:87:CF:FE:7C:3D:37:1D:73:1B:EC
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/iWuTCPr9JeIEoIfP_nw9Nx1zG-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.4.0/22
45.141.64.0/22
91.202.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:c3:fb:15:c9:25:7f:94:1c:c5:bc:55:d8:47:0a:b3:64:70:
4e:95:d4:c3:8d:e3:c7:15:cb:2c:2e:69:1a:43:a3:b4:df:23:
bd:85:34:0d:9e:28:57:bd:09:e1:9f:ad:82:64:e2:2f:e4:83:
be:d3:b6:10:82:b7:0a:11:59:19:32:34:61:f7:a0:76:77:78:
49:93:7c:2e:9a:ff:1e:24:4c:60:5a:94:2d:68:82:44:5f:4d:
98:0f:d8:3d:ae:d9:50:fd:ad:77:5e:e6:43:dc:75:6c:2f:7b:
b8:6d:b8:27:6e:e0:7d:77:76:98:33:fc:1d:ec:9c:6d:7c:8e:
10:0b:9a:ec:a8:2e:14:79:c0:97:a0:1b:d1:51:90:f2:62:de:
b6:f7:47:94:09:79:be:47:59:e6:ab:27:28:9f:ce:32:aa:fe:
b5:f1:e0:f8:97:07:dd:6c:8c:fe:d5:ad:33:9a:92:01:4d:bd:
bc:da:24:7b:5d:ab:01:45:cb:cb:7d:61:9c:f3:66:1a:38:ed:
57:d9:8e:ff:42:f1:28:8d:6c:f9:dc:d4:28:f5:6f:c2:6a:58:
b1:5c:6e:40:b4:11:72:a2:ee:c0:1a:42:93:95:e0:d7:be:66:
64:c4:25:33:85:5c:4d:9e:34:b1:8c:2d:a1:0e:61:16:70:db:
41:8f:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:16 2024 by rpki-client on console-fra.rpki-client.org