Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/wHFL9-OBV3jrlqfSuQobCgF_tNA.roa
File: wHFL9-OBV3jrlqfSuQobCgF_tNA.roa (raw, json)
Hash identifier: IcrWt4cDJUCine3oZsUJTZj5y2Y3DjOYSrT6yrdJY7c=
Subject key identifier: C0:71:4B:F7:E3:81:57:78:EB:96:A7:D2:B9:0A:1B:0A:01:7F:B4:D0
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 018F1A875253524E34B70F7CE71579235277
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/wHFL9-OBV3jrlqfSuQobCgF_tNA.roa
Signing time: Fri 26 Apr 2024 13:10:26 +0000
ROA not before: Fri 26 Apr 2024 13:10:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207233
IP address blocks: 45.84.124.0/22 maxlen: 24
185.162.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 15:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:87:52:53:52:4e:34:b7:0f:7c:e7:15:79:23:52:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Apr 26 13:10:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0714bf7e3815778eb96a7d2b90a1b0a017fb4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:90:b5:32:1b:00:ff:77:5f:5b:7a:6c:69:
42:27:fb:d2:d6:62:96:41:ea:be:0b:2d:3a:f1:07:
89:f6:03:fe:c0:c7:9a:7c:b4:0a:68:ed:32:c8:d5:
63:6b:f5:06:36:67:f9:34:0f:e0:a0:9c:94:7b:07:
2e:83:59:92:95:0c:50:bd:7f:f2:48:e9:c8:ef:30:
56:8e:43:18:19:91:c7:86:8c:48:ed:86:ea:ed:a8:
04:32:3c:35:cf:73:10:88:e3:5d:fd:46:79:b4:01:
84:12:08:94:9a:f4:e8:15:fd:d2:75:14:b1:2b:0b:
ad:cc:65:bd:1a:f6:92:49:be:8f:a6:f5:b2:1f:1e:
c9:0a:3e:17:c1:ed:c1:42:77:1e:96:c2:f5:c8:6f:
a6:28:bc:eb:3c:ad:bb:43:ad:8d:36:78:95:1f:1f:
92:fe:62:72:e9:ed:d5:80:e9:e0:f3:c0:97:02:d2:
c3:86:84:b0:94:da:e0:ba:7c:e9:be:ea:97:dd:3d:
8e:28:31:14:98:ff:f5:76:e3:f2:f2:41:98:6d:0f:
1f:e7:24:51:1a:c6:93:db:3c:d5:73:f1:8b:0d:0a:
94:56:c3:a3:f2:c3:18:64:15:24:38:20:0a:a4:4d:
15:15:7c:d8:27:57:3c:32:4e:60:1f:5a:79:8e:fa:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:71:4B:F7:E3:81:57:78:EB:96:A7:D2:B9:0A:1B:0A:01:7F:B4:D0
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/wHFL9-OBV3jrlqfSuQobCgF_tNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.124.0/22
185.162.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:68:61:63:75:3b:48:1d:c7:b2:98:14:f1:52:05:1c:58:d5:
18:cb:d3:39:cd:2d:b4:f5:76:49:1a:97:95:1d:44:72:68:ac:
72:db:39:e8:14:e6:2e:45:47:70:c1:d9:7c:d0:3e:df:ea:e2:
85:dd:94:12:b2:60:5d:fd:01:5e:20:a3:10:a0:64:94:7b:d7:
8b:74:2d:c6:ba:a2:6a:7c:1c:77:97:3d:8a:4d:b5:d7:a1:3e:
2d:f7:85:ec:90:8b:bb:83:9f:97:28:85:2d:19:b4:3a:5f:7a:
6e:d2:76:70:a4:22:6e:3b:db:7a:13:c9:5b:51:1f:76:a2:90:
7f:22:ca:65:17:c6:f2:88:a9:51:d8:25:9d:60:d7:15:48:6f:
5e:82:3a:0e:78:c2:0e:9c:9e:68:a3:db:6b:ed:54:01:6a:24:
59:16:10:07:ae:55:eb:ef:7c:7d:de:7b:72:97:f5:4b:a6:db:
25:df:14:42:2c:fd:6c:03:62:7c:5d:a5:08:c5:50:06:9a:47:
e0:ce:03:b4:ef:ac:7d:1b:44:0b:15:5f:ce:1e:da:a4:38:26:
ab:54:52:b0:19:37:c3:b5:74:5a:a3:13:17:8b:5d:89:83:b6:
f5:5d:fc:40:6f:1a:99:9f:2a:9d:f0:32:1c:11:b2:ef:6c:0e:
85:53:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 22:47:20 2024 by rpki-client on console.sobornost.net