Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w-bQ4F5zZcJrykAkOvBckT-rfVQ.roa
File: w-bQ4F5zZcJrykAkOvBckT-rfVQ.roa (raw, json)
Hash identifier: hjnL8k6gR1wzwpf4tTkyT0nEM50N/sWhdY+Z/w00y68=
Subject key identifier: C3:E6:D0:E0:5E:73:65:C2:6B:CA:40:24:3A:F0:5C:91:3F:AB:7D:54
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185C4411CA4A63BA418094DE024835C296A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w-bQ4F5zZcJrykAkOvBckT-rfVQ.roa
Signing time: Wed 18 Jan 2023 09:41:19 +0000
ROA not before: Wed 18 Jan 2023 09:41:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 118
IP address blocks: 192.124.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 10:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:41:1c:a4:a6:3b:a4:18:09:4d:e0:24:83:5c:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 18 09:41:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e6d0e05e7365c26bca40243af05c913fab7d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:96:83:8d:36:3c:e7:3c:c7:7f:7b:22:56:
72:9e:c9:b2:58:aa:29:19:6f:bd:c0:b0:ff:60:18:
d5:85:52:8e:38:75:8b:cc:0c:a1:40:84:f8:3d:af:
d7:6e:11:65:38:45:be:cc:53:41:ed:b4:0a:40:b4:
48:78:5d:9a:a3:e2:12:ed:15:36:7f:0d:4c:68:fd:
07:7f:d0:27:8d:c7:20:8b:7e:b5:ee:f5:67:e2:61:
27:a0:9a:ca:74:81:2f:bb:38:9a:f9:1a:33:94:fc:
96:7e:fb:ca:e3:16:02:f2:d5:3b:d7:0c:9a:4b:de:
e2:52:51:0a:70:80:fa:36:80:c0:36:ea:5b:0d:76:
c7:52:37:77:50:1f:ac:6c:a9:d1:5a:d4:68:bd:e6:
12:74:c6:3f:55:d7:62:0f:64:bc:29:86:fd:fc:ff:
d1:ef:5c:61:d7:56:52:83:16:5b:ac:07:b0:88:55:
5d:9a:13:ac:82:23:2c:b8:b3:bb:31:28:e1:82:ed:
3e:88:7b:05:7f:b5:74:20:90:3d:1d:02:35:5e:38:
d5:a9:15:a9:79:32:ec:24:73:2a:c0:5f:7e:64:15:
fd:54:50:23:97:d2:7d:c4:c3:ad:d9:05:49:71:ea:
d2:23:00:99:e2:6e:02:6b:98:06:bb:1d:54:00:00:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:D0:E0:5E:73:65:C2:6B:CA:40:24:3A:F0:5C:91:3F:AB:7D:54
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w-bQ4F5zZcJrykAkOvBckT-rfVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a6:21:cf:c9:15:97:38:52:96:68:1f:e0:99:ee:40:71:07:
46:3b:88:f5:ac:90:db:2c:6f:94:ce:87:ef:38:db:d4:f3:93:
1e:fb:76:e9:e1:90:1f:a3:08:62:96:66:19:b0:e8:50:cc:7b:
6c:e7:18:c6:ca:cf:d0:cd:40:24:40:ab:7e:cb:58:f7:c6:bc:
cb:fc:14:46:1c:97:48:42:99:00:77:f8:71:d9:22:6f:77:5e:
28:4e:3f:5c:24:54:43:35:98:4b:6b:ee:fe:f8:33:a1:14:56:
b4:6a:f5:21:5b:b7:9a:29:86:1f:97:f9:05:16:d8:41:21:f2:
44:10:e8:7e:aa:c6:5d:ea:33:00:cd:23:c8:9a:17:bd:86:ae:
3a:29:0a:ea:e4:d6:32:a4:aa:4e:cd:7d:a7:b9:88:fb:d0:1f:
92:2c:a6:c3:26:a0:2b:4d:0a:66:f7:56:84:ab:fe:f3:0f:2d:
07:26:90:fb:4f:d8:dd:f5:d9:b8:35:23:94:e6:f4:f3:0d:50:
c6:81:2f:40:4c:37:d6:35:e9:14:50:71:d6:cd:6b:de:7c:af:
5d:59:e6:ac:25:2b:0c:4c:c3:46:34:a2:21:58:da:a2:90:25:
c8:4f:fa:de:ca:56:47:18:96:f8:95:3a:36:3e:24:4f:d4:7d:
ac:c7:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:50 2024 by rpki-client on console-ams.rpki-client.org