Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/WjICKtWbDC55RNr_1wc_hfZy6YE.roa
File: WjICKtWbDC55RNr_1wc_hfZy6YE.roa (raw, json)
Hash identifier: mnR98ykOk+A7e7tUxohBd1W/w9caLPHNfUqkqz3lD0k=
Subject key identifier: 5A:32:02:2A:D5:9B:0C:2E:79:44:DA:FF:D7:07:3F:85:F6:72:E9:81
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 018571D7A5AF5BF0D9C09E127FF782F2250D
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/WjICKtWbDC55RNr_1wc_hfZy6YE.roa
Signing time: Mon 02 Jan 2023 09:37:16 +0000
ROA not before: Mon 02 Jan 2023 09:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.64.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 13:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a5:af:5b:f0:d9:c0:9e:12:7f:f7:82:f2:25:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jan 2 09:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a32022ad59b0c2e7944daffd7073f85f672e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:ac:f6:94:ad:12:c9:21:82:f8:8b:d9:7e:
2b:35:ad:af:28:b3:c6:17:f6:df:7c:7e:b7:aa:6f:
d3:3c:fc:91:95:83:02:34:f1:07:e4:a8:d0:57:aa:
18:08:f8:2e:64:f7:ad:b6:9d:59:d6:21:d3:1b:18:
13:22:46:fa:58:9a:26:dd:0c:a0:9c:09:a2:94:b4:
3e:51:00:82:47:c0:f5:28:24:12:d4:57:b8:34:1f:
43:1d:b1:40:0e:21:90:bf:17:37:c5:0f:bb:62:7c:
30:1f:5d:35:c5:f0:f0:75:bf:dc:39:e1:2b:38:b9:
45:8f:7b:6f:75:14:08:de:e8:34:7c:bf:fe:23:bf:
47:f3:88:a2:78:42:b8:13:c9:70:33:c3:49:cb:8e:
4c:db:81:78:b3:f3:1d:67:42:22:0d:83:50:5a:f5:
9b:b9:b2:b6:6a:b7:ef:9d:02:50:1a:26:43:6b:38:
99:65:36:6d:49:bf:6b:08:e2:a2:ba:6b:c0:4e:f1:
99:b7:1d:b7:c3:29:6a:e3:4b:fd:a8:49:2e:15:d6:
f2:9e:64:a3:b0:83:13:6b:1a:05:4c:40:2f:c3:63:
4a:a7:5b:33:76:77:54:45:09:3c:15:8b:95:46:9f:
c2:34:79:8e:e0:78:64:f4:a7:e5:65:04:61:54:31:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:02:2A:D5:9B:0C:2E:79:44:DA:FF:D7:07:3F:85:F6:72:E9:81
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/WjICKtWbDC55RNr_1wc_hfZy6YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.73.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0e:94:29:c2:54:8c:0e:39:d0:12:84:96:43:a0:06:09:c8:
be:5f:cf:74:32:b4:a7:e2:f5:6c:de:8f:b0:1e:8c:7e:e7:8e:
e2:2b:c6:02:5d:c1:81:14:05:33:b0:ea:2a:39:63:ab:14:70:
cd:a2:ca:de:68:fe:c5:3e:6d:80:3a:cd:58:d1:38:1f:66:12:
2d:d0:8a:eb:e9:53:15:dc:8c:70:7d:a3:4b:88:bd:bd:06:ab:
c7:67:30:69:14:64:30:ba:a5:13:ad:29:01:de:f2:3e:76:d6:
2f:24:3e:40:cd:ea:6e:7c:e9:1b:02:1e:97:b6:4b:a9:7a:59:
6f:61:af:f4:66:4e:3d:1a:ef:a6:bd:20:5b:45:12:17:c5:7a:
33:4d:47:de:43:ab:58:ed:1f:ea:c5:f6:c7:84:54:55:e1:dd:
f9:53:e4:a1:38:0b:4d:d2:28:1a:92:61:48:b5:35:7d:0d:6b:
0b:f2:6f:ba:16:c5:c3:bd:86:06:39:bd:e8:82:d2:dc:fd:06:
0a:f6:67:4f:56:57:5d:0d:0e:c6:16:ca:c1:ef:24:b7:79:fd:
fe:bb:72:0d:a5:66:1a:82:d5:6a:7e:7f:59:d5:c8:eb:2b:e8:
5f:f1:01:b4:e6:f3:02:51:14:0e:c4:23:28:85:d1:83:75:c3:
75:71:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:51 2024 by rpki-client on console-ams.rpki-client.org