Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/WdC-YZJso956KBzA5n0lqfCgbQA.roa
File: WdC-YZJso956KBzA5n0lqfCgbQA.roa (raw, json)
Hash identifier: 6MwJZyo/1FL7DwWUtDm9Wa2+KziYmfTkWsy0aJUShLo=
Subject key identifier: 59:D0:BE:61:92:6C:A3:DE:7A:28:1C:C0:E6:7D:25:A9:F0:A0:6D:00
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 01856F26D070A04A31C163099B5EEF3DC94E
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/WdC-YZJso956KBzA5n0lqfCgbQA.roa
Signing time: Sun 01 Jan 2023 21:04:52 +0000
ROA not before: Sun 01 Jan 2023 21:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47277
IP address blocks: 45.151.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d0:70:a0:4a:31:c1:63:09:9b:5e:ef:3d:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Jan 1 21:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59d0be61926ca3de7a281cc0e67d25a9f0a06d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:61:56:55:a7:44:f9:67:6a:76:8f:33:d8:
c6:71:07:bf:d0:57:43:ce:0b:28:e0:b4:13:70:b5:
e3:fd:a3:60:2b:2d:6f:2d:7a:95:96:3f:1d:8e:b3:
59:0b:27:ad:0b:82:ad:ba:6e:77:5d:08:8b:96:fe:
19:48:e4:62:cd:2f:4b:f2:77:15:bd:03:7d:fc:18:
70:8d:82:f3:0c:07:6a:cf:25:aa:b9:26:e8:0d:dc:
8d:3b:3b:d2:87:22:cb:5e:24:f5:bd:de:c7:6a:37:
3d:91:19:a6:02:8d:1d:39:c8:12:88:25:ca:ba:4a:
62:fd:e1:80:57:eb:10:0d:8b:7d:da:18:80:97:39:
99:50:cc:f3:a9:92:e6:4f:3c:8f:04:2f:84:7a:0c:
78:36:82:a1:91:d9:fa:4a:2e:f8:dd:cd:a7:c8:9d:
a3:00:a6:2f:b0:78:e5:71:d6:60:69:9d:38:c4:c3:
14:f4:87:40:2a:2f:01:64:3e:92:96:b5:8b:6b:7d:
56:d5:15:99:16:62:7b:6f:74:69:44:e3:e7:b9:ae:
41:91:8a:06:7d:8a:2e:e0:6c:91:93:4d:59:00:5c:
cf:93:9c:78:7e:3d:7e:b4:02:b2:b6:35:e9:50:b2:
6f:30:96:79:88:1a:4b:48:8e:89:3f:bd:ab:e1:13:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:BE:61:92:6C:A3:DE:7A:28:1C:C0:E6:7D:25:A9:F0:A0:6D:00
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/WdC-YZJso956KBzA5n0lqfCgbQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.240.0/24
Signature Algorithm: sha256WithRSAEncryption
08:26:d7:33:17:9c:e3:21:ce:95:e4:e2:e6:10:7c:70:f1:fe:
5f:c1:0d:14:09:51:50:17:a4:a1:98:7c:0d:8f:19:0b:e5:e5:
c3:22:16:20:f2:2f:d7:51:5d:6a:7c:42:66:0f:81:37:eb:bb:
b8:e3:b0:43:aa:7a:4b:29:63:7b:02:3c:ea:04:5b:b8:b6:3d:
ee:a7:6c:05:77:d8:71:b9:9a:5e:ba:8c:01:2d:0a:58:66:b5:
66:1b:d3:f0:12:38:5f:61:f1:d9:51:20:66:8e:a3:ee:d3:6b:
e5:50:01:00:ab:e3:71:65:e6:54:fc:bb:ed:24:45:a5:93:2c:
6c:a8:28:38:3c:06:4b:b6:0b:6b:bc:b6:f9:0e:e0:e4:8c:11:
ed:3b:2a:74:28:05:b2:17:8f:78:f1:cc:f6:db:36:26:39:af:
67:b5:76:26:5a:e4:77:1e:4b:9d:01:40:fc:a9:63:1a:f2:8a:
d4:2a:18:85:93:82:31:97:a3:c0:79:41:be:77:a3:5c:a9:34:
f2:e1:0b:6d:7b:a6:dd:9c:10:52:35:3a:22:a1:be:bf:98:99:
e2:85:6b:b9:f2:d9:f9:63:ee:1b:6c:48:01:09:a5:83:d3:c7:
02:51:60:79:d8:d1:be:a5:f3:bc:da:b4:f8:33:64:be:6b:9c:
90:c0:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:28 2024 by rpki-client on console-ams.rpki-client.org