Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/f_WPH8WQKenYU9I_UHyI0ZtBaG8.roa
File: f_WPH8WQKenYU9I_UHyI0ZtBaG8.roa (raw, json)
Hash identifier: cppvV0XVIweg6Kf4WGB63HKF8M3RYdwF7irCLE5U7YY=
Subject key identifier: 7F:F5:8F:1F:C5:90:29:E9:D8:53:D2:3F:50:7C:88:D1:9B:41:68:6F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEBFF73056538C68465676476717D1
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/f_WPH8WQKenYU9I_UHyI0ZtBaG8.roa
Signing time: Sun 01 Jan 2023 06:04:46 +0000
ROA not before: Sun 01 Jan 2023 06:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57321
IP address blocks: 85.202.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:bf:f7:30:56:53:8c:68:46:56:76:47:67:17:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff58f1fc59029e9d853d23f507c88d19b41686f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:c7:71:f6:d5:35:21:8c:f1:a3:6b:fd:68:
20:52:8f:b1:ab:55:76:84:91:12:e3:43:60:e2:fd:
15:98:26:50:86:f7:07:0b:f2:67:2e:c7:f9:3b:22:
41:44:b6:ef:32:22:0a:0b:43:32:5f:5b:a4:b5:fa:
03:cd:bc:92:ab:4e:5d:c7:bf:d4:13:c3:87:14:8a:
a0:2e:5a:cd:4e:51:84:14:af:10:9a:fd:27:5e:72:
40:fe:da:88:70:13:ff:5e:3c:a0:af:84:07:03:f0:
62:a0:b0:3e:8e:ad:6c:0e:e0:c1:21:cc:ce:e7:d2:
33:c1:e5:f0:63:00:19:91:de:a8:f3:0a:27:ee:5a:
1f:a4:c9:7e:73:74:bc:33:02:21:bf:ec:c9:a9:03:
ab:94:8a:79:6e:64:08:36:4f:af:de:c8:54:80:2f:
4e:e5:1f:64:4d:20:af:18:30:5b:00:d3:2d:07:9b:
48:1e:6a:c5:86:7c:9b:72:27:a6:4c:f7:21:7a:ba:
b3:b8:be:19:77:5f:66:fa:d5:ef:bb:72:19:ab:97:
77:7a:75:31:5e:26:c6:9d:17:90:81:26:ab:5e:12:
27:ed:ad:85:f8:53:ac:d1:f9:15:fb:57:db:d7:d6:
f9:84:7f:33:39:05:b4:aa:42:5e:c8:ac:a7:dc:d9:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:8F:1F:C5:90:29:E9:D8:53:D2:3F:50:7C:88:D1:9B:41:68:6F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/f_WPH8WQKenYU9I_UHyI0ZtBaG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.52.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b5:b0:8e:38:71:09:a5:9e:fe:39:58:4a:8b:df:86:ab:a4:
28:94:16:5b:4c:43:51:7c:55:05:2a:77:4d:a0:ad:cb:86:ab:
18:b1:eb:6c:d5:b0:51:af:07:a6:4e:69:b7:84:f7:1a:d7:86:
8a:13:78:5d:92:99:2c:0c:77:04:10:c6:b6:ce:5f:9a:72:a6:
da:b5:75:4f:91:4b:9b:69:c5:45:55:87:bc:7a:07:be:3f:ac:
ab:b5:52:af:b2:0b:2c:ff:55:73:7d:7a:aa:75:08:bb:4d:56:
2f:0f:51:a6:14:b4:b0:d5:10:7d:bd:49:17:94:0c:89:42:fc:
93:47:0e:11:28:90:47:da:3b:65:6c:a9:06:c0:6d:b6:55:37:
31:96:3e:05:bf:de:70:dc:ac:4e:ac:eb:cb:d8:eb:c9:8c:42:
d7:6c:d7:bc:bf:37:ec:6c:63:6a:14:c5:26:35:3e:ee:7c:ab:
2b:b1:80:2b:a5:e5:e4:ff:07:e2:6f:d4:2b:6c:02:bb:2d:a1:
57:09:81:99:08:5a:40:6d:24:17:2a:7a:19:aa:4f:eb:0b:51:
de:16:e2:7b:8b:6f:be:02:6d:23:38:e5:bd:ec:4a:ba:1d:b8:
29:f8:8a:ed:71:23:12:e5:f0:e1:e0:f8:f8:a0:6f:cd:1f:15:
5f:76:7c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org