Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/WQTW1qkJ8jqAkW7LnRIyf-mBVSQ.roa
File: WQTW1qkJ8jqAkW7LnRIyf-mBVSQ.roa (raw, json)
Hash identifier: ayqNZtRof3B5XRZjMbxxpZW1hnZsNZsTmasCraYSdKA=
Subject key identifier: 59:04:D6:D6:A9:09:F2:3A:80:91:6E:CB:9D:12:32:7F:E9:81:55:24
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 018C8DCF3CE5B8D2129CB163EF4E71B02931
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/WQTW1qkJ8jqAkW7LnRIyf-mBVSQ.roa
Signing time: Thu 21 Dec 2023 19:16:58 +0000
ROA not before: Thu 21 Dec 2023 19:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201838
IP address blocks: 45.92.232.0/22 maxlen: 24
45.147.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:cf:3c:e5:b8:d2:12:9c:b1:63:ef:4e:71:b0:29:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Dec 21 19:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5904d6d6a909f23a80916ecb9d12327fe9815524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:c1:2a:d6:b1:7d:4d:6e:01:32:12:91:e2:
f0:d6:80:5a:9e:81:02:61:e0:b7:a0:c2:8f:97:5c:
ca:4d:00:72:88:b3:97:c4:34:ef:fd:f0:5a:2f:67:
55:5e:70:b3:cd:3f:e4:67:3d:cd:ff:bb:47:c4:1c:
4c:08:43:3d:eb:a7:42:c1:e2:99:bf:47:45:16:26:
d6:f6:bb:e5:fc:2a:52:ee:7f:91:1f:95:60:a8:82:
e6:45:8e:ce:5a:fd:f2:89:dd:85:1c:1a:b6:06:bd:
84:55:86:95:07:dd:65:16:8f:c1:58:64:4d:dc:14:
c5:ac:8c:7f:f1:bc:0f:dc:6c:e0:4b:40:71:02:1b:
aa:b0:26:33:48:ea:ab:b0:c9:62:a0:c4:48:81:8b:
32:fd:7b:8f:76:cc:94:06:c8:17:19:dd:85:57:0d:
99:31:bf:37:76:20:9d:20:ab:e8:36:56:0d:22:66:
a7:09:cb:68:d2:29:8c:ec:02:6b:96:94:42:6c:6a:
f8:fb:c5:4c:d4:99:d8:b0:38:40:65:d2:ee:b0:50:
a2:6a:88:38:c6:55:49:32:8e:72:e3:b6:30:b6:d3:
1f:ac:c7:49:76:a7:ae:fd:94:f8:c5:f7:62:7f:87:
bb:fc:5b:b5:c1:83:88:87:7a:8c:0e:92:7f:88:0b:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:04:D6:D6:A9:09:F2:3A:80:91:6E:CB:9D:12:32:7F:E9:81:55:24
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/WQTW1qkJ8jqAkW7LnRIyf-mBVSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.232.0/22
45.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:db:d4:86:64:7d:da:8a:2b:76:b3:b9:02:05:79:b3:be:1a:
7c:04:e9:45:de:7e:91:56:31:41:e5:51:24:96:8f:77:0a:61:
db:af:5a:57:08:ff:4e:7a:e3:46:42:0a:36:d3:7d:db:9f:f7:
f8:c7:1f:1e:19:f6:d0:72:90:9d:07:df:07:c2:a4:93:79:98:
19:67:68:fe:09:b3:fd:74:9e:7d:d7:30:ab:14:68:50:13:f2:
41:70:ab:ad:9c:50:02:0b:70:a1:7a:48:15:95:76:27:38:c0:
cd:74:49:72:cc:31:fc:1f:f2:53:ae:5d:51:5d:6a:2e:7c:38:
01:ed:e7:a5:6e:59:95:7d:bb:4b:88:73:fb:93:ab:a6:40:73:
5b:32:15:65:94:66:46:3c:d5:4c:ab:99:05:01:6a:37:7b:9d:
97:ef:9a:7c:9f:14:b2:0f:2d:1c:5f:5d:5d:cf:6b:22:71:eb:
56:80:8e:02:ab:dd:86:7e:5f:78:67:50:12:82:22:f3:9a:f2:
2e:61:68:18:81:2f:41:39:44:68:f2:63:23:f7:ee:64:a2:30:
3b:49:3c:52:2d:14:69:df:51:cf:f8:7f:26:94:21:fe:7b:e6:
50:95:a8:1f:a1:1c:69:a8:94:70:83:9a:1b:33:04:07:1b:7b:
64:20:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:47 2024 by rpki-client on console-ams.rpki-client.org