Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/WcjBCFLYiyorSm7Ljj-ZsPw-344.roa
File: WcjBCFLYiyorSm7Ljj-ZsPw-344.roa (raw, json)
Hash identifier: EaWxtm1am3j2ktA8p48fMWHM1RVxmOASF59qn+WIbSY=
Subject key identifier: 59:C8:C1:08:52:D8:8B:2A:2B:4A:6E:CB:8E:3F:99:B0:FC:3E:DF:8E
Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial: 01856B8A1AD7374AEDABBEA686465AC7FB4E
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/WcjBCFLYiyorSm7Ljj-ZsPw-344.roa
Signing time: Sun 01 Jan 2023 04:14:51 +0000
ROA not before: Sun 01 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200311
IP address blocks: 194.60.214.0/24 maxlen: 24
194.60.215.0/24 maxlen: 24
194.60.213.0/24 maxlen: 24
194.60.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:1a:d7:37:4a:ed:ab:be:a6:86:46:5a:c7:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Validity
Not Before: Jan 1 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59c8c10852d88b2a2b4a6ecb8e3f99b0fc3edf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:0f:7c:11:48:9e:99:b3:e6:fa:09:81:7c:
f2:3c:c5:86:09:b9:47:13:b5:86:98:5a:63:fc:79:
59:8c:ec:fa:2a:31:ca:c2:99:f2:7f:73:f6:f6:af:
1f:59:51:61:dd:9c:06:52:ef:67:63:bf:ca:95:74:
6b:ae:4f:59:d1:76:db:96:15:08:1c:f4:9e:d0:f5:
d3:05:3d:19:ba:cf:21:6c:6e:01:b4:46:57:77:39:
45:91:0b:35:f4:f9:b7:18:d4:a4:0a:87:cf:a5:70:
c7:38:cd:94:bf:20:0e:6e:bd:59:3a:09:e0:41:dc:
16:89:52:d8:04:aa:f5:be:3f:6d:b5:b3:73:52:fd:
64:af:da:51:5e:8c:ba:b8:92:88:7f:6d:29:a5:a0:
8b:76:29:02:77:c2:d3:ba:ae:b9:1e:71:8b:3a:e6:
2c:40:3b:8c:4d:6d:b9:99:5e:c7:d0:e4:7c:99:d8:
26:ec:b2:3d:a5:2e:07:b6:a3:99:4f:65:c6:aa:44:
08:7f:3d:c5:18:d4:cf:3b:86:1c:2f:5f:04:8e:31:
67:01:e1:d0:9d:ad:f0:43:6b:64:b1:cc:b1:a7:3e:
12:57:53:8b:e7:c6:91:0d:2d:0f:ac:32:14:1c:0f:
a6:c6:21:1f:b9:7f:ee:1c:12:bc:a3:06:b7:12:0b:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:C1:08:52:D8:8B:2A:2B:4A:6E:CB:8E:3F:99:B0:FC:3E:DF:8E
X509v3 Authority Key Identifier:
keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/WcjBCFLYiyorSm7Ljj-ZsPw-344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.212.0/22
Signature Algorithm: sha256WithRSAEncryption
72:8c:47:9a:28:a0:a1:98:89:d4:3d:d7:1e:f8:01:e4:0e:ae:
3f:b2:97:00:ec:67:56:90:e9:4d:97:a6:c4:78:30:2a:7d:57:
1f:53:ca:56:fa:ca:63:d0:73:e1:df:5a:a4:2f:62:be:19:9d:
ee:d1:40:dd:1a:42:f7:69:c1:96:7d:cc:33:17:b2:9f:e2:3f:
6d:59:33:88:8b:6f:19:05:01:17:2d:10:cd:67:c1:ed:2c:47:
08:d7:57:2e:77:95:2f:41:78:f9:41:1f:86:aa:a1:3e:d8:1d:
6e:b1:7d:76:f6:43:49:22:ab:fc:68:f8:e1:6e:0f:80:f3:9b:
6f:b0:15:91:87:38:bf:c2:aa:d8:51:61:ff:b3:59:70:46:7a:
c6:5f:65:00:40:65:5f:87:9f:aa:42:67:fa:39:d2:e8:36:5e:
87:75:0c:59:08:bb:aa:f2:d9:c0:33:72:55:19:be:79:a5:7b:
e5:a2:47:64:6f:fc:d2:a1:b4:3b:49:e0:dc:ce:f9:30:bb:e0:
1e:99:a7:39:76:8a:53:43:46:67:33:d3:42:cc:b2:72:97:28:
5c:74:a3:e5:38:0c:b3:36:62:5d:83:f4:3d:81:7c:15:0b:c2:
e8:01:02:65:d5:e2:d1:5b:bb:d6:7e:86:5b:c0:30:3c:61:84:
4f:f5:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:54 2024 by rpki-client on console-ams.rpki-client.org