Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/w5mlOwA_KODuktrzvb5MfZpjj40.roa
File: w5mlOwA_KODuktrzvb5MfZpjj40.roa (raw, json)
Hash identifier: EgRlEZxdOpFw0IQ1iXlifdcbN9yadr7u+Q5NA8jaHng=
Subject key identifier: C3:99:A5:3B:00:3F:28:E0:EE:92:DA:F3:BD:BE:4C:7D:9A:63:8F:8D
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 018728226A222D9344FFD3E7B029CF87E0F9
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/w5mlOwA_KODuktrzvb5MfZpjj40.roa
Signing time: Tue 28 Mar 2023 12:12:36 +0000
ROA not before: Tue 28 Mar 2023 12:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41281
IP address blocks: 193.189.100.0/24 maxlen: 24
193.189.101.0/24 maxlen: 24
45.154.252.0/24 maxlen: 24
45.154.255.0/24 maxlen: 24
45.154.254.0/24 maxlen: 24
2001:67c:130c::/48 maxlen: 48
2a0f:df00:dead::/48 maxlen: 48
2a0f:df00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:22:6a:22:2d:93:44:ff:d3:e7:b0:29:cf:87:e0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Mar 28 12:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c399a53b003f28e0ee92daf3bdbe4c7d9a638f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:e3:36:60:7c:7d:ca:b1:58:e4:87:45:97:
e8:8d:17:0e:de:1b:dc:e0:df:e3:ec:75:c0:b6:d2:
5c:7b:db:c5:ba:5f:bc:5b:b2:ba:b6:b8:b2:5a:6f:
fa:54:94:29:76:7d:63:b3:71:4c:8a:f9:72:f5:60:
d8:fa:38:db:0b:0a:8b:4c:f4:be:34:a5:ef:52:70:
1e:5d:79:0a:1e:6e:b4:75:fc:8e:62:84:08:93:89:
82:41:53:03:b7:67:3a:51:86:32:9b:45:d1:b1:ef:
f0:cc:49:0d:84:51:6c:48:e3:59:f9:1c:5d:f3:4b:
ac:e7:b3:d1:d4:2e:43:35:ca:a2:41:3a:26:de:bf:
af:c0:9e:64:1f:c1:cc:9d:03:fd:c6:fa:b9:fb:2b:
5d:c7:bf:30:d6:c2:e0:ba:7c:f8:08:df:1d:76:fa:
b5:0a:25:f5:06:2f:02:2e:56:4a:3d:11:4a:23:10:
87:41:9d:8d:19:8d:5f:63:41:5d:c6:af:47:8d:2e:
04:5e:6e:2e:8a:44:c7:f9:b6:ca:0b:76:9f:89:d8:
fa:76:fe:0e:d7:85:ac:90:d5:85:f6:e0:41:a7:ba:
d2:23:59:a6:89:6c:80:6f:61:5d:ed:2d:d7:1a:dd:
14:f4:26:6d:ac:2c:50:97:a9:bf:78:80:aa:5e:32:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:A5:3B:00:3F:28:E0:EE:92:DA:F3:BD:BE:4C:7D:9A:63:8F:8D
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/w5mlOwA_KODuktrzvb5MfZpjj40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.252.0/24
45.154.254.0/23
193.189.100.0/23
IPv6:
2001:67c:130c::/48
2a0f:df00::/48
2a0f:df00:dead::/48
Signature Algorithm: sha256WithRSAEncryption
ae:70:36:c0:34:3f:0a:2c:8b:e4:a0:bc:ec:e3:75:bc:71:1f:
37:be:d5:17:ef:7e:ec:58:68:4d:98:7b:2b:9b:e0:b9:f9:ea:
28:fd:8d:32:f8:32:42:45:aa:c8:f2:ce:c4:e3:1b:d7:f9:97:
81:33:75:c0:a3:3d:3d:9f:eb:97:0c:f0:ab:d7:1c:7e:fd:9b:
06:f1:26:12:e9:44:da:26:05:f3:7c:8d:79:4b:a6:ee:0a:76:
6e:39:8d:18:04:3d:93:0f:e9:2c:da:f0:64:97:45:29:af:7c:
d2:8f:ef:0d:c0:bf:79:b6:4d:bd:f6:c3:27:d9:2f:80:c8:c3:
a2:46:c2:d0:1a:f7:9e:0f:b2:c5:49:bf:74:a4:35:2c:7c:d7:
db:9d:b0:ae:f2:b1:fd:29:f1:9f:29:84:73:91:d8:fb:15:f4:
51:b4:48:64:cc:ae:2c:3c:8a:10:ba:19:0d:d5:e6:ac:2a:97:
f6:d0:79:84:7f:93:bf:4e:0a:ad:51:59:28:5d:b2:6e:df:ba:
6d:52:b8:a3:7b:0c:b4:28:40:cd:71:cd:03:0a:a3:ed:8d:fa:
a1:e0:9f:8f:08:b4:50:04:e1:2b:de:47:13:89:9f:61:86:ce:
7d:86:ce:25:c0:ff:91:33:ff:a4:d1:2c:37:53:b9:0e:19:b8:
96:14:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:14 2024 by rpki-client on console-fra.rpki-client.org