Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/WzEQRZlhvUFHUOScRkIJerl2sBU.roa
File: WzEQRZlhvUFHUOScRkIJerl2sBU.roa (raw, json)
Hash identifier: rzjcnf+mMhi4XppCO6GYm+qi601uZZyjJqSq7k1ug6M=
Subject key identifier: 5B:31:10:45:99:61:BD:41:47:50:E4:9C:46:42:09:7A:B9:76:B0:15
Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial: 0185729EF1B95F088EBF34E7619C339E0B41
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/WzEQRZlhvUFHUOScRkIJerl2sBU.roa
Signing time: Mon 02 Jan 2023 13:14:57 +0000
ROA not before: Mon 02 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60111
IP address blocks: 185.182.204.0/22 maxlen: 22
2a0a:f880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:f1:b9:5f:08:8e:bf:34:e7:61:9c:33:9e:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
Validity
Not Before: Jan 2 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b3110459961bd414750e49c4642097ab976b015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:37:64:14:68:9f:3b:78:95:18:e4:fd:06:
a9:e2:cd:5a:fa:3b:f9:3c:90:1c:e9:a4:85:b5:db:
b8:cb:e2:ea:4e:7b:a7:80:68:bc:b0:a7:42:a0:03:
90:3d:8c:8a:9d:a1:59:40:e4:5d:fe:fe:24:04:d0:
09:1c:72:37:ea:a7:5d:29:46:fb:60:19:1f:43:8a:
47:c8:2a:94:d5:8b:c8:39:e5:04:fa:20:d0:c0:a3:
60:e4:13:fb:06:55:5f:65:3b:6b:8e:19:d3:9b:f1:
cf:1e:4b:37:cb:9c:f5:cc:f2:f3:d8:4b:b8:51:fc:
a7:ff:0d:da:05:41:71:43:95:bb:b7:2a:8d:af:1a:
3b:f0:37:6a:f5:15:9d:16:e6:90:36:0a:97:b9:1a:
65:ec:2c:a0:9b:42:89:6f:ce:a8:66:f9:68:e4:a0:
4f:de:78:43:b1:13:b2:50:e9:cf:25:f9:b4:88:cd:
73:d5:01:a3:50:dd:42:de:2e:56:34:55:7c:04:3c:
86:3e:94:9b:de:02:3a:f5:65:74:3a:25:45:6f:0e:
6b:b3:23:94:8a:7e:d8:bd:e9:22:32:cb:09:6f:d3:
db:1f:8c:cf:ac:56:30:a6:ef:fc:c0:0c:5f:23:13:
ef:78:69:7c:ce:bb:cc:1d:e0:e6:0f:79:e0:d3:08:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:31:10:45:99:61:BD:41:47:50:E4:9C:46:42:09:7A:B9:76:B0:15
X509v3 Authority Key Identifier:
keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/WzEQRZlhvUFHUOScRkIJerl2sBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.204.0/22
IPv6:
2a0a:f880::/29
Signature Algorithm: sha256WithRSAEncryption
b5:9e:13:31:24:7f:eb:7b:89:ba:24:9b:de:9a:e9:ce:8b:05:
ea:34:61:14:5f:ff:a0:94:00:d2:25:64:ce:39:ac:09:94:b1:
b2:54:4f:f0:8c:73:2d:e4:47:8e:f6:a3:d6:b4:f5:f8:5d:76:
d0:e4:e1:d8:71:62:69:80:65:6b:e9:ed:43:b3:a8:ea:ec:37:
93:a5:fe:90:4a:cf:76:ad:03:8f:73:4a:dd:e6:80:07:c2:b0:
a9:74:a1:7e:64:13:fc:a6:b4:a2:56:7f:90:6d:79:b8:09:21:
a5:6b:14:e4:98:c0:95:d8:89:4c:30:0a:06:aa:b3:d7:cd:0c:
42:d8:7a:a3:8b:05:cd:47:37:43:22:51:d2:6a:53:5f:bc:76:
a4:26:93:28:e4:8a:a3:a5:6a:52:b7:9c:f7:40:1e:81:c9:28:
4e:bf:57:ee:1a:74:ac:78:1b:d5:e3:84:1b:71:3b:b7:7c:97:
1e:8b:5c:df:24:42:45:c6:7d:30:92:34:7e:64:ac:93:58:9d:
be:54:e7:c6:39:19:2c:63:b3:41:f0:23:fd:5e:bb:6b:ca:32:
f1:11:76:5e:8b:53:af:81:f9:55:d7:98:7f:13:5c:10:de:04:
31:7a:ce:a1:e1:c4:e4:9e:45:40:af:03:88:36:c7:55:e4:69:
15:e2:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:58 2024 by rpki-client on console-fra.rpki-client.org