Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/Rwz099Q8WYHpEDP5XD-C0Xr9r10.roa
File: Rwz099Q8WYHpEDP5XD-C0Xr9r10.roa (raw, json)
Hash identifier: W7cFkZpgKw090qtLpl34ieCHeV4ZUEqgSahBBRYl6vQ=
Subject key identifier: 47:0C:F4:F7:D4:3C:59:81:E9:10:33:F9:5C:3F:82:D1:7A:FD:AF:5D
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 018572DA376F0BBDC6A0BDF6F1F0A82F9991
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/Rwz099Q8WYHpEDP5XD-C0Xr9r10.roa
Signing time: Mon 02 Jan 2023 14:19:41 +0000
ROA not before: Mon 02 Jan 2023 14:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 45.91.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Apr 2023 12:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:da:37:6f:0b:bd:c6:a0:bd:f6:f1:f0:a8:2f:99:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Jan 2 14:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=470cf4f7d43c5981e91033f95c3f82d17afdaf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d9:d3:03:40:a6:d3:cd:58:bb:11:d5:ac:b3:
f4:eb:61:de:1d:7a:3e:1f:07:1d:75:f9:ad:b6:e4:
f6:07:9d:c7:ef:6e:d8:be:bb:73:44:56:5c:f7:b1:
fe:ba:04:e5:e3:fa:73:af:62:ae:ca:83:5b:ee:58:
7d:2b:42:c6:7f:d5:ea:bc:fb:db:a9:1f:c8:7f:72:
4d:4d:3a:94:37:e7:8c:47:bb:ce:31:ca:ca:a7:ca:
44:3c:08:13:80:2e:83:e1:94:c7:37:6a:8b:28:14:
ad:ba:fc:87:7e:5a:36:80:54:49:42:19:f4:97:84:
23:4f:86:0f:58:f7:37:21:6e:05:af:28:89:b6:cf:
c1:48:0f:e9:2b:c4:9a:b1:89:f2:4b:66:50:1c:76:
ce:52:fc:69:bd:81:d7:d9:6d:b0:76:27:c5:46:24:
e0:e0:2e:2d:5c:ea:7c:35:03:7e:8c:1f:17:62:bf:
3b:e1:ec:03:4f:b4:93:94:de:d1:66:22:76:8b:d6:
91:c5:97:f1:49:73:dd:0c:cc:31:77:e3:cf:16:9b:
7e:38:63:c4:76:e6:95:a2:d7:e2:83:17:54:e4:cf:
72:72:1c:16:99:d1:9c:ed:71:af:0c:a1:ad:e9:ce:
39:1a:1c:c1:49:86:0e:90:d7:10:6b:72:8f:fb:86:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:F4:F7:D4:3C:59:81:E9:10:33:F9:5C:3F:82:D1:7A:FD:AF:5D
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/Rwz099Q8WYHpEDP5XD-C0Xr9r10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8b:c3:fd:0b:5d:86:70:b7:1c:4e:23:a0:0b:16:25:16:b3:
d3:d7:af:ae:dc:21:01:bf:e3:9c:0b:6f:8a:96:4a:9f:50:9d:
d9:b6:3c:b1:89:bc:59:cc:82:1b:fe:d9:87:70:e2:a7:0b:41:
1e:a2:8e:17:58:9f:10:92:49:f0:b6:4f:c9:08:1e:4b:14:d5:
35:5a:fb:2e:35:5f:4f:bb:6a:47:99:5b:a5:14:14:9b:e6:0e:
4c:af:3c:d5:65:63:1a:00:d3:21:4b:13:62:83:61:3c:5e:3a:
9e:b3:38:1f:12:6f:a7:9d:ff:5b:95:62:b8:9d:8e:24:14:ed:
cd:18:12:c8:21:8e:34:18:49:55:94:a3:fa:b3:b5:17:7f:01:
13:73:38:64:4e:99:ab:26:8b:b1:bc:28:86:58:28:7f:71:b9:
b6:62:7a:d6:20:6f:93:10:20:d9:7d:e3:46:48:e3:2d:6f:9c:
a7:80:af:87:63:14:12:e9:0e:51:16:21:d4:f3:80:95:40:15:
40:14:3d:00:b6:4d:31:62:3a:54:ca:2b:0f:89:af:2b:d5:2f:
eb:c7:e7:15:08:f0:43:0b:e1:d3:ce:a4:54:f2:df:1e:a8:fa:
9c:65:bd:a6:3f:d7:fa:9b:fd:77:12:f1:29:f8:8f:48:43:1f:
6d:45:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org