Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/WcR_fA8m1vI0Y93Z_nqO5Y892yI.roa
File: WcR_fA8m1vI0Y93Z_nqO5Y892yI.roa (raw, json)
Hash identifier: a7R/TYkmRD+KicqoiyqLNZhTkuHFWR0H+j1xjJLRJ8c=
Subject key identifier: 59:C4:7F:7C:0F:26:D6:F2:34:63:DD:D9:FE:7A:8E:E5:8F:3D:DB:22
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 01856EA68AA5C350AF91FF62993EFBAB2A45
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/WcR_fA8m1vI0Y93Z_nqO5Y892yI.roa
Signing time: Sun 01 Jan 2023 18:44:46 +0000
ROA not before: Sun 01 Jan 2023 18:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206728
IP address blocks: 45.141.84.0/24 maxlen: 24
45.141.87.0/24 maxlen: 24
45.141.86.0/24 maxlen: 24
2a0b:7ec0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:8a:a5:c3:50:af:91:ff:62:99:3e:fb:ab:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Jan 1 18:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59c47f7c0f26d6f23463ddd9fe7a8ee58f3ddb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:24:f0:4b:d1:7f:e6:c7:06:28:ac:ef:7d:
d0:bc:9f:ea:f5:2e:20:b5:f9:20:0d:3a:50:cc:2c:
90:e6:d7:c5:27:38:db:9c:26:15:c5:96:a4:0c:25:
c4:2e:d8:a9:cc:6c:da:b8:0c:5e:e5:5c:9a:c3:b1:
7b:58:ec:77:fb:5d:a1:ce:77:49:e7:dc:5d:33:e4:
ce:46:44:5f:0d:f0:42:96:71:e0:74:b4:4d:dc:24:
fa:a7:c9:41:ab:72:88:1d:d3:93:70:ef:d2:bc:33:
fe:b1:bf:77:54:5a:95:a7:6c:3c:dd:6d:78:75:5a:
55:31:68:df:60:c8:21:a5:87:5c:1b:9e:75:89:5b:
e9:99:aa:66:2c:e1:3b:10:88:e7:b4:07:40:e6:a4:
eb:98:cd:a5:c9:63:84:f9:eb:f8:13:82:24:27:57:
24:81:83:95:22:14:77:b5:b2:79:d1:50:17:b0:b4:
e1:84:e9:68:24:66:6a:91:53:d3:3b:96:7e:da:fa:
bc:f6:5f:44:5e:25:9d:75:78:92:d5:cf:b3:1e:43:
d3:b6:81:fd:8d:be:8b:42:5a:e0:3b:69:3c:49:d1:
6c:6b:cb:dd:15:c1:28:bd:1e:a1:54:9d:24:1e:aa:
f9:77:a4:2e:f9:b3:bd:9b:06:4c:cd:1c:9c:9b:eb:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C4:7F:7C:0F:26:D6:F2:34:63:DD:D9:FE:7A:8E:E5:8F:3D:DB:22
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/WcR_fA8m1vI0Y93Z_nqO5Y892yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.84.0/24
45.141.86.0/23
IPv6:
2a0b:7ec0::/29
Signature Algorithm: sha256WithRSAEncryption
13:c3:76:97:7a:94:16:de:dc:3b:4e:ec:c0:00:37:4c:d4:2f:
8f:d5:89:b0:59:a0:f4:80:89:0c:fa:77:18:87:e4:1e:22:8a:
54:b7:48:fa:08:96:96:06:bd:ad:a3:a3:78:f8:1a:6f:db:c6:
0f:98:ab:75:0f:f6:b6:fb:cd:ed:d8:7d:65:28:46:5e:59:d4:
35:9c:3f:7f:3f:53:14:ac:6f:dc:a4:3e:ff:f7:b6:9e:49:85:
97:c5:7b:53:b2:95:57:d0:c9:bd:79:87:78:29:56:54:15:7f:
d3:18:8a:65:69:6a:c9:5d:bf:75:f7:a9:60:bc:a0:db:f1:85:
70:cd:2d:a3:a2:86:b8:0b:65:aa:3c:c2:61:6b:5f:c9:11:0f:
3a:01:8f:37:39:b4:73:0b:04:87:51:f2:bf:d4:5c:d7:c9:ea:
9f:e7:a4:dd:15:5b:01:60:95:bc:17:9c:d9:74:b9:fa:e2:9e:
07:91:bd:d8:89:3e:e8:42:d7:03:27:ae:53:50:ef:f0:29:d4:
9e:89:09:eb:d0:26:a3:1f:df:83:b9:c6:4a:d8:ee:fb:3b:67:
a1:42:33:28:25:2b:f7:23:65:a1:e1:de:28:72:87:16:3b:9c:
0f:b6:8d:c5:ec:c5:83:7d:3f:b6:05:44:8d:44:69:8a:31:57:
4a:cf:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:25 2024 by rpki-client on console.sobornost.net