Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WQTmEh-blxTxrfqL7sies-E5gtw.roa
File: WQTmEh-blxTxrfqL7sies-E5gtw.roa (raw, json)
Hash identifier: Fs+XoHj8Ua8uG0u30h1OE0foHZTh612JH9dkVP5BqzA=
Subject key identifier: 59:04:E6:12:1F:9B:97:14:F1:AD:FA:8B:EE:C8:9E:B3:E1:39:82:DC
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEE2DF30F2D2C8A34A18AFB9658BD4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WQTmEh-blxTxrfqL7sies-E5gtw.roa
Signing time: Sun 01 Jan 2023 06:04:55 +0000
ROA not before: Sun 01 Jan 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209579
IP address blocks: 85.202.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:e2:df:30:f2:d2:c8:a3:4a:18:af:b9:65:8b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5904e6121f9b9714f1adfa8beec89eb3e13982dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:ac:d5:82:1a:f3:67:62:5a:43:73:b6:15:
eb:52:a3:3e:63:05:f2:fb:b3:0e:16:de:56:ed:5c:
57:61:43:21:f1:d0:76:8a:88:a5:11:e1:8f:ac:82:
b5:14:c1:e0:0c:b3:f9:c5:99:63:d3:db:6b:c9:cc:
c5:74:39:43:70:c3:9f:1d:44:30:87:5a:62:c5:5f:
4a:da:28:89:68:4e:87:b3:5d:81:a9:23:ab:40:f0:
1f:c5:d9:6f:96:98:8c:d6:a6:9c:2d:d6:74:04:72:
fe:5b:0d:70:b7:b6:c8:bf:84:a8:58:b7:c0:8a:20:
99:44:ad:ff:8a:aa:aa:91:99:06:46:98:c6:e7:68:
c7:83:e7:3b:90:c9:c8:8a:b2:bc:fc:6f:4a:90:38:
22:4f:7c:e9:b3:54:96:79:50:fa:48:43:93:40:5c:
70:96:0c:04:51:aa:1e:26:43:56:2c:ef:39:62:b3:
80:af:36:7d:a1:d7:de:60:50:23:8c:75:56:bf:bd:
af:2a:f3:f2:9e:97:e3:5e:2b:45:cd:a8:c6:23:60:
5d:94:f5:43:33:8a:95:9a:7e:8c:45:b1:c4:62:88:
4f:c3:24:99:d2:65:e8:b8:81:ba:8c:0d:ae:1c:4c:
62:67:65:06:bf:30:8c:fc:58:db:33:95:b2:43:cd:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:04:E6:12:1F:9B:97:14:F1:AD:FA:8B:EE:C8:9E:B3:E1:39:82:DC
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WQTmEh-blxTxrfqL7sies-E5gtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.58.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e3:ba:0e:0f:17:5c:04:36:2e:08:2e:a1:80:60:14:e1:b3:
72:31:1e:12:1c:6b:1c:d4:fe:a8:fb:8a:df:de:cc:99:f5:d8:
ab:bc:e9:49:81:00:31:e3:c9:78:e9:bd:3f:86:69:92:fc:3f:
30:bc:04:86:42:99:e8:be:ee:51:05:8f:4c:dc:44:53:2b:30:
d6:c2:d5:a1:1f:d2:d0:aa:75:72:04:07:fc:c8:1c:ef:62:14:
58:49:5c:b2:d4:47:d7:1a:2c:9a:cd:fa:b8:72:97:3c:a5:b5:
5b:20:04:1e:cf:d8:4e:f9:b1:2b:d8:5e:1f:ac:c3:ae:d3:47:
48:44:f8:cc:9d:9a:8b:8e:c6:51:15:e1:87:bc:b5:a4:c7:b1:
af:51:c7:88:c8:04:69:fd:c4:3a:24:2e:f3:a5:01:a4:ce:b0:
7b:c5:21:b6:31:fe:41:b8:6b:5c:f2:ce:5b:86:12:49:4f:d8:
7a:37:86:f9:6f:1a:74:88:77:39:f2:94:5d:2e:85:d7:85:a9:
d7:9e:d4:71:9d:2e:17:02:27:31:96:67:58:ff:38:06:02:7b:
1b:55:a3:91:f6:f8:6e:f4:7a:72:19:00:73:40:7b:dc:60:9b:
4f:27:73:a8:85:28:65:52:aa:1b:f4:07:62:3f:bc:a4:8b:3c:
cc:81:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org