Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wP0PuYBKjhpLbcqU8z9cjT5_gec.roa
File: wP0PuYBKjhpLbcqU8z9cjT5_gec.roa (raw, json)
Hash identifier: 1opSBh0WdCYOUaMEZ+flMbY/2i5jwqKkBSbMlK1vr6I=
Subject key identifier: C0:FD:0F:B9:80:4A:8E:1A:4B:6D:CA:94:F3:3F:5C:8D:3E:7F:81:E7
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01856FB12B96DC06E163D8EB22726059C000
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wP0PuYBKjhpLbcqU8z9cjT5_gec.roa
Signing time: Sun 01 Jan 2023 23:36:00 +0000
ROA not before: Sun 01 Jan 2023 23:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43959
IP address blocks: 45.95.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 11:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:2b:96:dc:06:e1:63:d8:eb:22:72:60:59:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 23:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0fd0fb9804a8e1a4b6dca94f33f5c8d3e7f81e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:c7:bd:5d:42:ca:1c:a3:11:6a:b6:34:40:
45:0f:89:82:94:ff:dc:93:72:47:77:a2:88:0a:23:
4f:e1:27:96:50:ce:0a:b7:01:16:65:84:7b:8a:e5:
81:b5:e7:57:37:6d:59:12:83:b6:88:0f:d2:ac:e6:
38:b7:71:3b:30:a9:5d:0c:73:e9:6c:d2:ba:74:18:
01:33:36:d4:2b:38:31:24:b8:ba:bf:5d:54:48:1b:
f4:3a:b1:80:94:29:09:9c:11:91:d8:98:cc:24:3f:
ee:d1:48:94:29:a8:72:8d:ff:bd:a7:98:b9:37:81:
a5:6b:bd:ed:5f:c3:1f:d0:72:a5:6d:f7:66:0c:f3:
e6:6f:3f:22:9b:8b:2d:6f:39:33:ab:e5:f2:cb:7a:
c1:8f:f9:9e:bc:d3:94:2f:4c:57:08:91:8a:32:60:
2a:08:df:c9:57:ad:57:bf:5b:77:09:76:8d:ab:2a:
1e:b4:a3:76:24:4e:f8:6a:d4:9a:6f:a4:6d:ec:4a:
78:44:03:4e:d9:47:5b:9b:27:67:36:d5:17:7c:04:
80:d0:7f:d0:18:51:f0:4b:4b:a5:76:ba:2b:35:a5:
6a:4b:15:99:35:1f:33:99:37:20:af:03:3d:f5:a2:
d8:17:47:ad:c8:77:3d:e0:72:12:33:ea:c5:96:3e:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:0F:B9:80:4A:8E:1A:4B:6D:CA:94:F3:3F:5C:8D:3E:7F:81:E7
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wP0PuYBKjhpLbcqU8z9cjT5_gec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2d:be:85:39:6a:7c:3e:cb:fb:f3:a9:31:97:18:1e:0a:60:
70:c4:40:21:ff:9a:e2:9d:cc:db:d6:74:4e:a4:6f:05:4e:11:
9e:6b:ec:92:9e:ac:32:bf:bb:56:7a:06:f3:84:10:ab:fa:84:
32:e9:57:97:51:d1:4d:35:7c:e6:3c:db:8f:13:27:61:2b:e4:
bc:a9:78:9b:20:b6:11:6f:d9:34:88:86:ff:b6:03:b9:79:94:
19:64:76:29:1b:45:65:84:84:af:14:54:02:70:a6:5d:42:47:
55:94:6a:80:5a:47:0c:74:38:8e:4a:c2:c5:67:49:fe:fa:b2:
cb:bf:65:20:01:1c:56:bd:4c:28:9b:58:53:2d:71:b1:e8:fe:
7c:11:85:d0:e3:e0:be:db:3e:87:24:88:10:96:c3:54:10:86:
1d:17:7a:37:f0:8d:d5:ed:c4:4f:0b:3e:b9:30:f8:3d:5e:b2:
92:0a:de:b0:1b:f1:f3:78:45:1f:ed:5b:8c:07:b9:42:1d:ad:
2f:c7:ab:fb:17:28:6c:81:21:98:b2:62:77:f7:55:8e:88:cc:
2e:57:83:2b:07:f1:b6:c3:07:0d:df:15:a6:2d:1e:06:76:0c:
1c:2d:b9:7c:1e:c5:9b:e2:5a:6e:be:93:29:99:b9:74:21:4c:
31:7f:ae:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org