Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/k0Wunl2sKej3NBPitGxcR3zqX6M.roa
File: k0Wunl2sKej3NBPitGxcR3zqX6M.roa (raw, json)
Hash identifier: WRceCODhRGLaj7q6C4av+B+cwiuY+K5WYgbeQScreRw=
Subject key identifier: 93:45:AE:9E:5D:AC:29:E8:F7:34:13:E2:B4:6C:5C:47:7C:EA:5F:A3
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 018572280FE85497219C23F59E1C92D852AB
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/k0Wunl2sKej3NBPitGxcR3zqX6M.roa
Signing time: Mon 02 Jan 2023 11:05:06 +0000
ROA not before: Mon 02 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208288
IP address blocks: 45.147.112.0/24 maxlen: 24
45.147.112.0/23 maxlen: 23
45.147.112.0/22 maxlen: 22
45.147.113.0/24 maxlen: 24
45.147.115.0/24 maxlen: 24
45.147.114.0/23 maxlen: 23
45.147.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0f:e8:54:97:21:9c:23:f5:9e:1c:92:d8:52:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Jan 2 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9345ae9e5dac29e8f73413e2b46c5c477cea5fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:07:61:bb:eb:94:c1:cd:63:55:5e:c2:93:
e0:72:71:58:b3:41:2a:39:bd:57:14:12:c0:35:af:
2b:a5:6b:73:5b:29:11:e7:b2:d8:31:55:d9:4a:f2:
94:63:53:fb:1c:e1:2f:70:e7:37:38:67:8e:84:66:
75:8f:78:1f:bf:ff:90:6f:f9:fc:12:90:08:01:56:
30:9f:78:03:33:9f:9d:a4:a1:33:5a:0b:61:8f:1f:
24:13:e6:be:e5:6b:0d:9f:f2:ed:a0:8a:bd:de:35:
a0:b2:b7:49:8e:7a:9d:39:30:40:bf:ae:f7:ef:1e:
f0:a4:72:bd:cc:ab:1f:2e:70:4a:e9:1a:93:3b:b8:
cc:8b:f1:66:e3:7c:f3:15:4e:fc:e1:b0:09:fe:83:
a8:31:8b:ee:7b:8f:9b:6e:0a:31:f2:5f:4e:d1:7c:
32:33:1c:19:2f:c6:65:e8:78:4e:6e:d2:3a:1f:0b:
26:0c:29:4e:b2:5c:11:43:02:49:bc:f3:97:74:b4:
a8:e1:5c:f2:d9:48:d2:5c:12:60:1f:e6:19:3d:39:
ba:28:b3:4f:f9:88:ac:1b:bd:eb:fb:e1:39:f8:29:
21:78:e3:fd:27:16:f1:7d:2a:34:d8:64:28:9e:b4:
e4:05:3d:bf:cf:f3:2e:bb:da:81:e4:83:e7:40:9a:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:AE:9E:5D:AC:29:E8:F7:34:13:E2:B4:6C:5C:47:7C:EA:5F:A3
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/k0Wunl2sKej3NBPitGxcR3zqX6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:40:02:64:77:28:3b:d3:ce:49:f6:7a:6a:ff:e9:c0:14:a3:
f8:f5:f1:3a:4b:2a:76:ff:92:41:aa:3a:ec:5f:89:a9:bd:fb:
0a:90:e2:6d:af:0f:48:4b:62:0d:f6:c6:70:3b:08:b4:b5:95:
51:98:6a:5f:48:fb:d1:0d:72:7c:9b:30:6c:c5:28:3c:a6:63:
b4:33:1e:51:7a:62:14:60:27:cd:b6:8c:b4:62:be:1e:02:50:
fe:fe:bd:65:43:64:a4:c9:30:5e:3c:d4:d0:28:f0:24:aa:56:
4d:28:ad:56:b5:16:2e:3f:7c:71:8d:eb:21:fe:8e:d1:f4:72:
99:2f:7d:18:d0:a9:e9:4e:2b:90:a2:06:1f:bf:fb:32:42:94:
ef:4e:c1:4f:f8:e5:5f:0d:e8:0d:82:10:27:24:f9:c5:e0:e3:
d4:d4:12:45:d9:23:be:cc:f8:95:f0:26:19:fa:84:76:16:ae:
74:77:72:10:90:e1:ad:38:da:83:ee:1a:e4:cb:17:e4:6c:5f:
76:ea:79:f8:0a:88:07:db:c1:dc:dd:5e:24:4e:1a:4e:bd:87:
a0:aa:0a:41:13:f0:c8:cd:9a:0a:31:77:7a:3f:87:ba:18:8a:
f9:13:81:db:9f:01:85:1b:2b:b9:6d:61:32:17:9c:23:6a:54:
e8:33:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:03 2024 by rpki-client on console-ams.rpki-client.org