Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wrZ89U9tIbJfOKW_njD1RSCSeBE.roa
File: wrZ89U9tIbJfOKW_njD1RSCSeBE.roa (raw, json)
Hash identifier: E03EY+pJzLsb105RpdBsoy0QB4aKL97FQr8KtR4uexY=
Subject key identifier: C2:B6:7C:F5:4F:6D:21:B2:5F:38:A5:BF:9E:30:F5:45:20:92:78:11
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018752314AFE35A79C2474CB0505F7B6A13F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wrZ89U9tIbJfOKW_njD1RSCSeBE.roa
Signing time: Wed 05 Apr 2023 16:12:54 +0000
ROA not before: Wed 05 Apr 2023 16:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.234.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 16:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:31:4a:fe:35:a7:9c:24:74:cb:05:05:f7:b6:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2b67cf54f6d21b25f38a5bf9e30f54520927811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:6c:c5:d3:29:21:d4:51:be:81:69:04:70:
08:15:77:3b:c1:55:c9:9c:0c:fc:c3:55:23:3e:41:
c1:86:56:de:5c:c7:8f:07:68:5e:c0:0f:a1:27:94:
44:96:76:45:24:7b:0f:cb:b2:89:52:cf:63:c0:c2:
5e:db:73:cc:e7:9d:92:63:be:6c:72:bc:94:53:4b:
04:88:cc:eb:45:72:c5:77:50:dc:45:6c:d8:6f:96:
ea:29:ba:98:18:7a:72:de:4e:f8:36:72:f5:71:8d:
18:92:f7:fc:21:24:48:41:30:50:64:0e:39:a1:24:
ae:ae:62:77:ec:3c:9b:2a:2a:4f:5e:ff:ad:b6:f4:
fb:a4:75:2c:8e:14:fe:93:62:a8:74:be:a2:1e:04:
fe:ea:4b:48:3b:85:70:d7:3d:34:d2:49:b2:26:1d:
de:bb:6f:a3:61:42:47:12:2b:ee:87:fd:77:84:ba:
96:a1:40:fe:a8:49:8f:ba:0d:21:15:20:35:bf:99:
dd:05:6d:14:f7:05:52:8b:82:77:8e:d7:fb:f1:2e:
85:f9:69:d0:8a:e7:2b:02:1c:37:40:44:43:ff:2d:
f6:04:5f:9a:34:e8:c7:80:fb:c1:56:a3:56:2c:19:
4a:21:cd:b4:98:f9:89:f9:fa:dd:70:12:e2:f3:d4:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:7C:F5:4F:6D:21:B2:5F:38:A5:BF:9E:30:F5:45:20:92:78:11
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wrZ89U9tIbJfOKW_njD1RSCSeBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
194.87.189.0/24
Signature Algorithm: sha256WithRSAEncryption
13:74:38:32:23:76:bd:fb:13:39:3d:88:d0:65:91:70:9d:74:
f9:13:17:71:d9:65:03:e8:be:0f:02:c5:c0:bf:60:ef:83:c8:
3d:f0:10:34:00:33:b0:fd:0f:8d:b6:3f:c9:a6:8d:ff:c6:eb:
9a:1f:8b:ca:4f:aa:b2:f9:81:b8:41:04:9f:34:2b:26:fb:ce:
f5:a8:d2:a7:c4:7e:6e:f9:36:75:c0:ed:d7:37:32:2b:60:b8:
e9:60:e1:d9:b5:12:79:10:e9:a5:84:e3:d3:81:92:57:f8:a4:
84:6d:70:0f:fb:0e:36:0d:fb:c8:4f:db:01:c8:dc:33:a5:9e:
80:f6:ba:d2:10:c4:f5:2c:e7:8b:08:a4:18:ab:c5:dc:b1:9b:
f4:ed:80:38:fa:2c:7a:44:20:b4:cb:84:88:84:1f:e4:50:5b:
bd:bc:2f:4c:1a:41:0e:de:e8:26:14:12:06:02:01:13:f5:29:
09:6f:d3:9b:14:09:6c:99:e4:5b:a6:7b:4c:f6:e4:f0:bb:65:
2e:cf:09:30:4b:a1:68:f7:6c:c5:a0:7d:f4:57:01:83:a3:f8:
b9:13:21:85:3d:4e:ce:6a:7b:97:24:6b:73:03:49:ac:ef:13:
20:5b:f6:ef:45:b9:ba:84:27:86:ab:66:72:8d:d1:ec:00:fb:
b5:e6:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org