Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WMAOz50RVrh4Jvx0dPpE10LA4D4.roa
File: WMAOz50RVrh4Jvx0dPpE10LA4D4.roa (raw, json)
Hash identifier: vQBp3+WkmzQE2OOVeuN12ZFv4g29LV3gZsvCQIjLE+g=
Subject key identifier: 58:C0:0E:CF:9D:11:56:B8:78:26:FC:74:74:FA:44:D7:42:C0:E0:3E
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEDA444D75E2C2626C674A9E46CE94
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WMAOz50RVrh4Jvx0dPpE10LA4D4.roa
Signing time: Sun 01 Jan 2023 06:04:53 +0000
ROA not before: Sun 01 Jan 2023 06:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206632
IP address blocks: 85.202.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:da:44:4d:75:e2:c2:62:6c:67:4a:9e:46:ce:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58c00ecf9d1156b87826fc7474fa44d742c0e03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:a1:5b:b9:6e:60:50:4f:9a:e5:65:69:78:
a8:82:eb:ca:1e:85:06:03:42:7f:88:75:e4:ab:a4:
6c:c5:f8:52:7f:db:27:8b:64:eb:c9:31:48:77:dc:
15:83:06:93:fa:17:c1:bf:6c:76:65:a6:e3:97:b6:
ac:d0:bd:5d:af:8f:bb:76:d9:e4:81:72:b0:90:a0:
06:e4:1f:16:88:76:86:c0:64:92:50:a5:cf:40:a1:
6e:01:72:a7:3e:3f:d2:1c:43:1b:5a:2c:0c:19:22:
e8:62:7b:9e:cc:f0:81:96:0d:a6:00:6e:95:75:93:
3a:27:c9:34:7d:25:dd:23:e2:2c:69:5e:43:62:e4:
4a:48:02:af:6d:e4:ca:63:ee:d6:43:dd:46:17:87:
f0:c5:94:7e:07:06:ab:fe:17:45:65:d9:6d:39:7b:
c2:23:ea:49:75:cb:52:9d:de:99:39:4b:f5:05:62:
f5:28:c4:c9:41:c7:17:fa:98:3a:a7:ad:54:5f:62:
3d:60:f6:6f:c3:a7:44:53:be:4b:49:45:51:7c:b5:
e6:6b:a4:e8:f8:11:7d:a6:cf:e0:15:43:4f:55:e5:
14:b4:40:80:7f:63:57:59:aa:3f:7d:83:d7:19:67:
b7:91:73:67:b3:d2:fb:69:ce:c9:ae:79:1c:3c:b3:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:0E:CF:9D:11:56:B8:78:26:FC:74:74:FA:44:D7:42:C0:E0:3E
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WMAOz50RVrh4Jvx0dPpE10LA4D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.50.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1b:e4:20:c0:32:46:40:cf:73:ec:a1:8c:6f:06:da:aa:04:
86:86:ca:c7:8d:71:05:c4:bc:e0:de:11:b1:d9:91:c3:0f:27:
98:25:bd:69:2c:86:69:6a:1f:8c:df:85:9a:02:84:06:d2:89:
a7:50:54:12:c8:43:87:df:15:7c:e5:29:ab:33:ce:9d:95:1a:
bd:80:20:e4:78:63:53:36:32:6c:24:cb:9e:2b:16:7f:45:56:
4a:62:57:2b:73:cb:43:f0:0c:90:0a:59:b6:8f:68:4f:fe:a5:
8d:e6:73:de:67:a1:1f:89:2a:59:95:51:cd:e7:98:97:c5:e2:
74:aa:95:ec:4a:de:e1:5f:1a:53:ba:c9:dd:07:42:9d:ce:1e:
04:46:f5:9c:78:e2:c2:80:58:9b:e9:e8:6b:d1:2c:73:3f:e8:
bf:bf:c4:eb:ab:31:b5:cd:f8:e8:ea:25:a2:6f:f7:fb:3c:e3:
b8:e0:2a:c7:38:07:c8:5e:dd:88:f7:a6:e9:54:0c:fe:6d:37:
8e:03:83:3b:2d:f9:e5:6a:98:0f:1e:f3:ca:94:ba:03:79:c0:
01:71:1e:91:63:23:07:1d:f2:7e:a7:9f:e2:b2:89:99:f5:f0:
90:79:db:08:a8:87:5d:67:0a:39:60:83:18:e8:88:6f:eb:f4:
b5:74:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org