Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/WgTe1Agppou2YJIy3rDDCpRKiLY.roa
File: WgTe1Agppou2YJIy3rDDCpRKiLY.roa (raw, json)
Hash identifier: diJQ08GbjfKDsH4nWpu0yyQK2iqabDceLhBFUkmCP7w=
Subject key identifier: 5A:04:DE:D4:08:29:A6:8B:B6:60:92:32:DE:B0:C3:0A:94:4A:88:B6
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0185863162AC1AA34E34F66FD4074C4DB53E
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/WgTe1Agppou2YJIy3rDDCpRKiLY.roa
Signing time: Fri 06 Jan 2023 08:27:41 +0000
ROA not before: Fri 06 Jan 2023 08:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 09:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:31:62:ac:1a:a3:4e:34:f6:6f:d4:07:4c:4d:b5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 6 08:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a04ded40829a68bb6609232deb0c30a944a88b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:62:d5:1f:c9:88:2f:5e:1b:e7:c0:7c:65:
1f:f4:ca:63:05:1a:e1:88:68:05:a9:22:97:e8:cb:
5a:38:a5:90:1b:ad:a0:01:94:11:2a:1a:da:7b:e9:
28:2b:30:5f:1f:1c:c0:2c:72:16:e0:3b:7f:bc:52:
f1:98:ba:b9:c8:89:65:3c:3c:18:24:49:3a:34:ad:
1f:37:88:36:f9:55:55:a5:a2:46:08:30:3f:a6:0a:
8a:bf:9c:49:0c:94:39:80:87:72:be:62:2c:7a:32:
20:6e:9a:67:1c:0b:77:0a:aa:2e:bc:5f:ce:a9:fe:
48:ff:86:4a:ef:c1:93:44:48:79:20:e1:4d:28:3b:
ca:60:90:ee:b3:14:2b:2d:d0:6e:68:19:51:0a:16:
2c:b8:94:b0:00:cf:54:6a:e2:6a:6a:9e:34:e4:0b:
2d:11:33:89:72:bd:5d:01:a8:5c:e5:de:a6:a1:5f:
31:20:64:3e:d1:66:a4:20:d8:38:73:76:52:85:ca:
5c:6c:6f:88:5c:79:81:8d:53:a6:3f:5e:51:a2:a4:
61:b8:b2:b8:0f:34:a5:b8:cd:0e:68:9f:f5:7d:f3:
da:5d:75:61:b7:39:9f:59:83:9a:11:22:a8:07:41:
90:4f:0e:29:d5:ac:24:df:04:72:28:4b:93:69:68:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:DE:D4:08:29:A6:8B:B6:60:92:32:DE:B0:C3:0A:94:4A:88:B6
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/WgTe1Agppou2YJIy3rDDCpRKiLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.119.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4e:c5:16:a0:fd:f0:2a:1d:dd:71:4c:23:ab:0c:2c:38:98:
c5:0a:df:bf:f0:d4:c0:8d:c4:cc:b5:a7:94:a6:f6:d4:f8:f9:
1f:18:26:84:de:85:47:38:9e:49:c5:3d:cd:b8:72:ae:99:68:
ad:a3:ce:1a:bf:a5:88:f0:66:f3:ee:6d:d5:6c:19:8d:32:0e:
c4:17:4b:cd:05:5c:9b:e3:38:f2:8f:58:3f:08:30:0c:d2:da:
a2:f1:b1:5b:c2:b7:60:2e:9d:4d:f5:c6:2d:3e:a3:e2:58:37:
ef:d7:72:66:8e:54:1a:19:06:c9:f6:e2:d7:f1:cc:82:75:34:
ed:94:d4:ca:8f:f3:d7:23:7b:64:d4:d4:a5:51:b4:41:7e:a7:
39:3d:63:ec:a7:ed:10:47:b6:f0:aa:16:03:78:ee:3e:20:50:
fb:85:29:d9:b7:d1:1d:2a:64:c5:8b:1d:2d:33:94:08:ba:d7:
04:0e:eb:46:48:36:51:cd:d9:13:67:2c:52:30:4e:88:28:eb:
cf:97:58:ee:23:64:03:43:db:d3:fb:d1:5f:c3:96:d9:fd:6a:
4c:84:8e:48:fd:b0:e3:58:ef:b5:88:11:e1:20:a5:37:51:f7:
09:da:04:ea:af:21:85:0a:3b:fb:9c:a3:8f:6f:f0:1b:68:fb:
a0:70:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:44 2024 by rpki-client on console-ams.rpki-client.org