Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/WDAnDZLnLUkcvfCk2FJZme5c2hk.roa
File: WDAnDZLnLUkcvfCk2FJZme5c2hk.roa (raw, json)
Hash identifier: ez+TKbpCps1JpgsjakOftJGGqyhLi/lKDpT4nGLmtv8=
Subject key identifier: 58:30:27:0D:92:E7:2D:49:1C:BD:F0:A4:D8:52:59:99:EE:5C:DA:19
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 01856E2F85BB560EA9B804EB81BA5C350FDE
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/WDAnDZLnLUkcvfCk2FJZme5c2hk.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43995
IP address blocks: 82.151.32.0/19 maxlen: 27
45.159.44.0/22 maxlen: 22
185.77.24.0/22 maxlen: 24
2a02:e040::/29 maxlen: 64
2a0f:7180::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:85:bb:56:0e:a9:b8:04:eb:81:ba:5c:35:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5830270d92e72d491cbdf0a4d8525999ee5cda19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:43:a0:46:16:10:c7:35:0e:14:e2:a6:3b:
bf:27:a3:68:75:41:55:0f:23:82:64:0e:f6:39:f3:
f9:02:7a:16:bd:24:f2:cf:d9:3c:c4:01:60:6b:79:
ff:11:ca:81:68:e8:6d:b8:43:7d:ea:f8:a3:51:13:
fc:91:36:1d:64:cb:35:55:f4:4e:42:a1:50:b8:b7:
4b:aa:8c:1d:47:0a:fe:d4:d2:66:9a:98:4c:47:76:
30:d9:23:4f:00:1e:d4:54:e0:40:5d:d8:47:15:05:
a0:cc:3f:29:c8:53:7a:08:6f:c1:d2:d8:ef:37:dc:
c4:22:a5:c8:5c:ad:73:41:f9:bf:69:51:4b:3a:b1:
f4:d3:e5:0e:95:da:88:ae:36:a2:82:af:4d:48:23:
ba:3b:c9:3d:09:68:fe:72:85:0a:69:d2:41:43:0d:
06:05:48:a3:7d:25:4a:c4:d1:bc:d3:74:ae:84:9e:
58:45:29:cb:85:3b:ed:be:0f:5a:d6:92:22:9a:2a:
f6:be:95:84:0e:8b:b3:0c:13:0c:3c:e3:47:2f:92:
00:7c:a6:db:ef:9e:f2:ab:35:e4:fc:2a:17:2f:60:
23:d6:24:60:93:1c:99:a5:ad:5b:54:c1:ca:57:14:
70:3b:47:40:ec:71:f4:d7:68:d0:f6:ca:5f:6d:08:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:27:0D:92:E7:2D:49:1C:BD:F0:A4:D8:52:59:99:EE:5C:DA:19
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/WDAnDZLnLUkcvfCk2FJZme5c2hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.44.0/22
82.151.32.0/19
185.77.24.0/22
IPv6:
2a02:e040::/29
2a0f:7180::/29
Signature Algorithm: sha256WithRSAEncryption
24:d7:b6:68:88:8a:d6:a7:e3:f9:a8:4e:32:05:64:99:ca:7c:
0c:7b:fe:3b:6a:41:8a:22:47:3c:09:1a:e9:11:dd:0a:66:d4:
f3:de:a1:97:9e:ff:ed:52:54:15:0b:ef:de:d5:f8:3b:7c:fd:
13:b0:c1:44:0f:a7:be:24:28:07:ae:56:72:3b:28:a3:48:83:
75:98:5b:f1:a2:7c:d9:c5:e8:46:21:10:30:61:75:0b:f5:5c:
da:71:0c:f3:3f:ae:ee:81:74:16:88:97:92:bd:6d:50:af:a7:
6b:a3:7c:6b:b4:b7:be:de:b6:bc:8a:2d:71:5b:cc:20:a9:d7:
b2:d6:67:33:35:0e:b4:64:64:11:34:81:41:5e:2b:95:b0:5c:
61:97:f8:46:19:aa:62:3a:6e:cf:b7:9b:41:8e:cd:05:8e:a2:
f7:b4:1a:40:e4:d9:b9:74:d2:13:25:c5:79:d7:9d:c4:5e:fe:
3e:d2:a0:25:93:c3:8a:f7:15:ed:de:79:eb:74:e5:ac:9e:85:
22:3f:1e:76:3c:aa:d2:ff:bf:97:b1:1b:e9:79:3c:a7:00:e9:
02:3a:2e:99:ec:c3:e7:64:82:02:f5:ec:dc:a7:f6:cc:5e:3b:
21:40:d2:50:a8:0a:bd:e9:86:39:52:30:a4:f1:83:83:7e:a5:
58:a6:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:48 2024 by rpki-client on console-ams.rpki-client.org