Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/wosdGqvoBtIZDk7nGwBZt3UzlBg.roa
File: wosdGqvoBtIZDk7nGwBZt3UzlBg.roa (raw, json)
Hash identifier: usvHGzr+WB5mwsHHlzV/uAHVjS00ZfGdcGqNpraIx94=
Subject key identifier: C2:8B:1D:1A:AB:E8:06:D2:19:0E:4E:E7:1B:00:59:B7:75:33:94:18
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 01856F26D154AFE5BB972517551BCE2B1000
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/wosdGqvoBtIZDk7nGwBZt3UzlBg.roa
Signing time: Sun 01 Jan 2023 21:04:52 +0000
ROA not before: Sun 01 Jan 2023 21:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50629
IP address blocks: 45.151.240.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d1:54:af:e5:bb:97:25:17:55:1b:ce:2b:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Jan 1 21:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c28b1d1aabe806d2190e4ee71b0059b775339418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:dc:9f:33:85:64:ab:87:27:33:5f:c8:3b:
43:8c:e7:23:f0:98:c7:eb:a8:49:03:96:0e:99:08:
a5:b2:2b:1e:4a:94:8d:7a:83:b1:3d:93:65:d6:0b:
77:d9:10:16:70:8d:4a:f0:fc:e0:72:17:f7:92:b8:
4e:6f:64:29:71:8c:e7:bd:e0:2c:a1:09:9d:35:be:
b3:5f:b1:57:87:92:91:63:f5:47:b0:55:20:17:bd:
51:2e:c1:67:6d:f5:8e:1e:e3:fc:3f:57:b5:a7:ed:
f8:4b:ef:f6:b7:d7:21:9d:f4:75:f3:88:bd:77:6f:
7b:2d:2e:03:c9:ca:dc:cf:64:1b:04:9b:1c:ab:fa:
c2:b3:4e:f4:cc:26:2d:4d:2e:1c:8f:3c:0c:c2:a0:
c6:88:72:99:4c:58:71:f8:a1:e4:68:04:43:75:77:
c4:1e:77:e8:18:87:74:78:a2:c2:88:6d:00:44:e3:
5f:fb:84:84:57:e6:23:14:88:6e:3f:2c:56:9a:5c:
2a:fa:dc:62:e2:fc:17:46:c1:0b:b0:27:09:e9:d3:
1b:4f:08:40:69:fa:75:f1:80:4d:9c:96:fc:a9:99:
d5:29:de:5b:b1:26:5c:3d:63:d0:e1:ee:35:93:b8:
5c:23:d2:7a:18:ce:a3:bb:08:27:0e:51:36:31:51:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8B:1D:1A:AB:E8:06:D2:19:0E:4E:E7:1B:00:59:B7:75:33:94:18
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/wosdGqvoBtIZDk7nGwBZt3UzlBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.240.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:12:23:dc:d4:e2:8b:c8:53:47:89:97:3b:dd:66:a8:2a:42:
ee:bd:f5:6c:30:bb:a1:c5:29:23:25:a9:02:76:d7:eb:a0:76:
b2:ea:04:d1:da:9e:bc:ae:cf:ab:f4:42:34:93:ff:23:b6:15:
9a:c8:15:86:1e:ff:9e:ab:65:0c:eb:f2:3f:29:32:6c:81:10:
58:25:bc:c5:40:71:ec:bb:2a:71:a1:9b:82:78:f5:2b:7d:4f:
e2:fb:88:56:7e:2e:f5:0c:a6:be:1e:68:15:90:c7:a0:f0:fa:
e8:89:8c:38:3c:b6:89:67:04:51:be:0f:9b:06:dd:34:a6:0c:
db:e4:d2:2a:15:0c:72:d1:34:62:da:24:83:9c:b6:94:c2:1c:
bd:21:65:97:77:70:1f:2f:e8:c9:7c:a7:be:2e:e0:24:95:48:
60:65:77:5e:59:02:1f:c6:10:76:44:e3:40:17:17:ba:4c:bc:
9d:2e:08:47:91:6b:aa:d1:1f:83:9d:43:f1:8d:25:88:f7:64:
41:4c:79:26:de:94:b6:54:b4:03:30:f5:ca:d8:a0:55:72:0e:
5e:a7:3d:7a:ce:77:c0:fb:84:d8:9e:29:e7:c1:59:0a:af:35:
13:47:cf:37:32:81:d1:99:d3:78:d5:1a:a4:ff:e2:06:83:44:
f1:e2:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:28 2024 by rpki-client on console-ams.rpki-client.org