Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/WtKe0KjkDMBkMbGX-qr10FxejjA.roa
File: WtKe0KjkDMBkMbGX-qr10FxejjA.roa (raw, json)
Hash identifier: RBCoTJgM+v2L0uxrpWOxSi3sB/N7l2YM0/G5v45mR9g=
Subject key identifier: 5A:D2:9E:D0:A8:E4:0C:C0:64:31:B1:97:FA:AA:F5:D0:5C:5E:8E:30
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 01918E63FB934272FC58A66D78E1A3A17429
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/WtKe0KjkDMBkMbGX-qr10FxejjA.roa
Signing time: Mon 26 Aug 2024 11:13:22 +0000
ROA not before: Mon 26 Aug 2024 11:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.85.15.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:63:fb:93:42:72:fc:58:a6:6d:78:e1:a3:a1:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Aug 26 11:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ad29ed0a8e40cc06431b197faaaf5d05c5e8e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:dc:10:d5:6f:d9:13:ef:f9:ab:71:3d:78:
04:f8:7c:d0:7c:99:ef:73:6a:e6:30:ad:c4:e9:b7:
1b:f5:6a:94:dc:e6:ca:85:12:c9:5b:7a:ac:6c:93:
b2:fc:e8:5b:03:2f:54:77:8f:eb:b8:44:4e:1b:4a:
c8:ad:ce:5d:d3:96:e2:4e:5f:ee:66:46:16:7f:87:
d8:7c:f0:2a:e8:bd:30:f1:d2:22:82:fa:ff:fe:1b:
49:9a:34:da:70:fe:68:56:bf:6b:c0:f0:5d:6a:2c:
16:70:99:a3:94:42:65:10:df:7f:31:f7:a7:a1:6d:
d9:65:fb:1c:88:2d:d1:53:8b:85:e1:54:00:54:47:
95:34:02:a0:6e:33:00:15:34:14:d0:8d:b2:3d:94:
9c:a7:03:7f:64:7b:a1:dd:7c:2c:55:fd:0f:dd:ca:
88:f0:30:0a:c8:7d:70:cd:e6:74:db:77:bf:b6:10:
dc:8e:92:c8:d2:ee:60:39:95:6c:1b:52:4b:5b:be:
31:86:7c:02:49:e9:a3:ce:0c:98:92:89:ae:0f:0f:
49:34:77:c5:1f:a4:7c:4d:d9:8f:96:79:79:e1:dd:
57:e9:0b:1e:c1:14:44:db:0a:f0:31:54:de:2c:19:
ec:60:f9:f5:0a:83:0e:13:b3:b3:7c:fa:17:26:54:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:9E:D0:A8:E4:0C:C0:64:31:B1:97:FA:AA:F5:D0:5C:5E:8E:30
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/WtKe0KjkDMBkMbGX-qr10FxejjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.15.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:71:f5:f1:48:11:c6:56:6f:93:14:92:80:64:f7:e0:24:dd:
a4:f8:9d:83:c1:60:b6:d0:e3:78:c4:0c:7e:e7:85:e3:ca:4c:
84:fd:0e:94:10:09:51:8c:e9:5a:d7:83:00:99:1e:a9:bd:bd:
e9:78:71:41:73:d4:22:69:16:50:ca:f4:e4:9f:cb:30:b4:58:
d1:27:d8:2e:1a:35:cc:d1:15:00:0e:ee:89:79:46:8d:ab:47:
29:a1:58:e2:ea:fe:3c:01:56:2f:e0:69:cb:c5:16:56:c7:9c:
c8:7d:1a:d4:14:0c:e6:d0:71:98:f3:cd:a1:0a:4b:1c:db:80:
76:90:00:84:ea:08:ce:5e:4c:14:75:d9:7a:f1:5f:76:75:0a:
33:e9:05:f1:90:d2:d5:08:8b:81:7a:f9:be:64:bb:e8:dc:36:
2b:41:b7:b2:c9:8d:0f:57:7e:20:30:93:6b:2a:f7:95:a7:5b:
3b:e0:43:4d:36:65:bf:ab:72:10:13:3d:0b:46:39:ef:82:bb:
9e:7c:e7:00:1e:9c:0e:1f:29:4e:bb:29:56:9c:18:eb:52:15:
39:cc:18:8c:e1:44:20:c6:80:10:1b:74:69:6e:b9:36:6a:5b:
57:56:cf:8e:04:c0:0a:60:ca:d9:cc:98:03:31:26:e4:a3:2f:
29:ee:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:44 2025 by rpki-client