Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/Wb7LBp3wwUmR6k-e4G5VxK6duC8.roa
File: Wb7LBp3wwUmR6k-e4G5VxK6duC8.roa (raw, json)
Hash identifier: pEP0pvZIAOrQYM6S2lEFD88QFpsl2XP3Kg8Ih3Yub90=
Subject key identifier: 59:BE:CB:06:9D:F0:C1:49:91:EA:4F:9E:E0:6E:55:C4:AE:9D:B8:2F
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 01856D41B1893FD5CD27CF890E17C353A058
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/Wb7LBp3wwUmR6k-e4G5VxK6duC8.roa
Signing time: Sun 01 Jan 2023 12:14:59 +0000
ROA not before: Sun 01 Jan 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1835
IP address blocks: 130.226.0.0/16 maxlen: 24
192.38.0.0/17 maxlen: 24
130.225.0.0/16 maxlen: 24
2001:878::/30 maxlen: 48
2001:7f8:1f::/48 maxlen: 64
2001:878::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Sep 2023 09:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:b1:89:3f:d5:cd:27:cf:89:0e:17:c3:53:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Jan 1 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59becb069df0c14991ea4f9ee06e55c4ae9db82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:4a:b7:5e:f7:bc:04:ff:d6:ad:16:ad:8f:
ae:2b:ed:9b:61:92:2c:8e:21:a4:c5:f5:87:ee:4a:
5f:bf:21:58:ca:c1:f9:a9:9d:b2:08:ff:90:55:b4:
30:10:32:e9:7e:cb:86:ac:29:54:9e:bd:3e:85:c6:
3a:82:8f:36:66:96:9a:b5:c7:11:ae:4d:ff:74:71:
dc:04:08:39:db:20:49:0f:29:83:65:10:38:cf:ae:
d9:9d:67:2c:30:7b:bb:44:0a:0a:91:f4:7d:05:c1:
f5:2f:92:02:cc:3a:6a:34:5b:f3:b1:20:e3:77:21:
5d:54:73:a1:30:ec:56:22:6c:fb:33:38:32:55:ec:
1f:bc:77:ac:00:2d:84:39:4c:26:bd:8d:90:73:aa:
40:a2:70:c9:02:01:0b:c1:11:18:95:4c:c3:01:3e:
4f:3a:f5:6f:fc:72:fe:df:c3:ec:09:64:9f:44:50:
e9:a6:8e:b5:15:ab:10:57:9f:f0:b0:3a:62:ed:f7:
98:16:cd:48:a2:73:5d:f3:d7:a2:c8:bd:a9:0b:3d:
04:ae:d2:b2:7e:1f:56:83:b8:17:0d:75:99:e7:ae:
9d:3a:bd:82:e6:f7:75:4c:fc:9f:1a:2f:72:18:9f:
13:19:5e:43:45:e9:19:de:24:44:90:4b:1b:05:4e:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BE:CB:06:9D:F0:C1:49:91:EA:4F:9E:E0:6E:55:C4:AE:9D:B8:2F
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/Wb7LBp3wwUmR6k-e4G5VxK6duC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.225.0.0-130.226.255.255
192.38.0.0/17
IPv6:
2001:7f8:1f::/48
2001:878::/29
Signature Algorithm: sha256WithRSAEncryption
66:d2:3c:c7:61:bd:ca:82:fc:7f:c6:ac:fe:da:cf:42:03:f8:
70:b4:03:e9:c3:54:61:2d:7f:f0:37:9f:1e:12:53:90:e9:03:
0c:4d:33:dc:f2:cb:01:31:8d:64:62:d6:d2:fb:53:32:9b:16:
e0:5e:24:79:f3:e0:17:2e:1a:11:9f:9d:70:34:d3:55:ad:19:
6e:6f:0d:85:c6:ed:7d:b5:3f:2d:40:f3:23:21:8c:11:ec:5d:
aa:6b:d1:63:0a:ba:0d:58:c9:db:a6:cc:ac:71:44:c1:0d:d9:
b5:51:cb:d0:cf:de:7e:66:db:aa:ea:e7:a7:2c:50:78:8c:4e:
fd:b6:dd:31:b8:58:46:8e:0b:81:fe:2b:98:12:d8:04:8a:79:
97:88:4f:2d:e9:6c:02:09:ac:e4:66:12:ac:4c:ab:95:01:55:
dc:87:93:d6:ac:fa:ff:51:8e:a1:c4:2e:dd:20:d6:81:d4:13:
f9:f0:63:af:b1:f8:af:28:75:f5:af:fd:56:9c:22:87:cc:7d:
1f:d9:e4:2f:02:29:9f:a7:52:54:3c:87:c7:d7:0d:e2:a9:38:
0d:05:d8:ef:69:2d:9b:c9:4f:1b:62:ae:e1:04:9a:4e:80:09:
7a:9b:60:f7:61:1f:ca:ef:ad:4f:23:11:62:8f:5a:c8:27:a7:
0f:ae:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:45 2024 by rpki-client on console-ams.rpki-client.org