Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/wDu-Vv4Np24YMkshtaWpnF7Gcmg.roa
File: wDu-Vv4Np24YMkshtaWpnF7Gcmg.roa (raw, json)
Hash identifier: iqb9a96MdH3cghJ7rrMs5o98SaaEujaMddFLWTnOrhY=
Subject key identifier: C0:3B:BE:56:FE:0D:A7:6E:18:32:4B:21:B5:A5:A9:9C:5E:C6:72:68
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 0186FECC9A25040303C13E7ED6B078C588EB
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/wDu-Vv4Np24YMkshtaWpnF7Gcmg.roa
Signing time: Mon 20 Mar 2023 11:34:27 +0000
ROA not before: Mon 20 Mar 2023 11:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 149.62.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 12:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:cc:9a:25:04:03:03:c1:3e:7e:d6:b0:78:c5:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Mar 20 11:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c03bbe56fe0da76e18324b21b5a5a99c5ec67268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:9e:3c:7a:e2:71:ea:08:53:de:f5:02:cd:
21:12:1d:2b:47:74:78:d1:a1:f8:ac:ec:9b:f1:c5:
6c:02:cf:c8:c9:dd:b4:14:df:ca:54:b7:ab:f6:d2:
9b:68:12:65:4c:73:a8:65:88:6d:68:72:e1:bd:ba:
14:88:3c:a7:51:cf:ef:54:a6:2a:06:82:9e:1f:15:
1e:4e:fd:cb:4c:f3:6b:63:87:78:e7:a3:86:7b:4e:
fc:2a:cc:47:97:f7:61:6e:6d:fd:92:4f:52:8a:30:
98:bb:2a:60:65:92:b6:6b:79:55:3f:c3:51:59:f6:
78:31:9a:64:71:26:48:0b:41:04:e9:d6:df:8e:e4:
07:d1:c9:e7:9f:05:41:3d:5a:23:72:f6:24:14:be:
63:7d:ea:e0:56:91:f3:56:f7:59:13:56:d8:1c:32:
a4:f0:ef:0f:54:00:61:a2:67:43:51:6c:be:19:41:
7f:c6:0c:f1:a9:67:32:0d:47:14:ff:6f:08:54:e5:
fe:e6:49:07:60:86:ec:71:8a:25:7c:1c:bf:c1:f6:
e6:34:6c:a2:a0:5b:3e:f0:20:4e:53:b8:b5:91:cb:
8b:e4:57:78:64:7b:b2:7c:ab:2d:d9:6f:9d:45:99:
3e:66:69:7c:98:82:98:cc:b6:b9:5a:e4:08:b7:97:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:BE:56:FE:0D:A7:6E:18:32:4B:21:B5:A5:A9:9C:5E:C6:72:68
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/wDu-Vv4Np24YMkshtaWpnF7Gcmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.34.0/24
Signature Algorithm: sha256WithRSAEncryption
41:af:4f:66:df:73:9d:c5:8b:a4:54:31:b3:bc:f5:19:cc:cb:
12:b7:59:58:21:12:7d:fb:1c:ea:c8:27:60:36:d7:e1:b2:59:
ed:fa:53:69:80:ab:6c:9a:f3:5a:ca:f9:fc:23:e4:a4:2a:26:
7d:64:cc:de:52:8c:fc:74:1e:3f:24:ed:2f:31:fb:f1:ab:7c:
19:38:b9:1f:9c:25:38:d3:89:98:a5:2b:bd:32:6b:f8:25:d6:
d3:b8:3a:98:82:66:63:13:57:d7:64:9c:59:38:b2:47:a9:54:
7a:94:c0:d3:ea:5e:8d:70:ec:4b:d5:75:ec:25:7d:c1:71:c0:
4b:c3:f0:77:03:51:7d:e8:18:1f:36:44:1a:a2:1d:43:4f:f7:
c9:fe:a4:0d:b5:ed:db:e4:82:b5:b5:d5:07:e5:ca:41:15:51:
cc:c3:25:00:ff:8c:ff:6f:10:44:f2:f1:9d:5b:ed:57:be:f3:
ca:77:be:d3:b6:56:bb:0b:6b:c8:83:3a:5d:b2:c9:17:83:f5:
d3:0d:75:c0:b6:04:2c:36:bb:b0:20:ea:38:1d:eb:5e:66:01:
f9:47:fe:07:89:53:71:be:7a:ab:5e:b7:a6:db:b4:90:1d:f7:
59:f4:81:77:b6:09:bc:66:70:64:23:c8:fb:99:d2:c3:7c:de:
0d:4a:32:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:39 2024 by rpki-client on console-ams.rpki-client.org