Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W1GU_9Hhj7d3kDa2ukYU8Gen4KE.roa
File: W1GU_9Hhj7d3kDa2ukYU8Gen4KE.roa (raw, json)
Hash identifier: tE4M0CdT+hS26cdDjP+g70fo7hyT/SQCTGmhXWVni7I=
Subject key identifier: 5B:51:94:FF:D1:E1:8F:B7:77:90:36:B6:BA:46:14:F0:67:A7:E0:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B1E868C309BA51071DD841BDC94F5840D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W1GU_9Hhj7d3kDa2ukYU8Gen4KE.roa
Signing time: Wed 11 Oct 2023 11:36:56 +0000
ROA not before: Wed 11 Oct 2023 11:36:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 185.252.162.0/24 maxlen: 24
185.252.161.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:86:8c:30:9b:a5:10:71:dd:84:1b:dc:94:f5:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 11 11:36:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b5194ffd1e18fb7779036b6ba4614f067a7e0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:f9:b1:80:8b:97:3f:03:51:8b:46:a8:4c:
09:3c:0c:6c:7c:0a:9e:8f:a8:2d:7e:f3:f6:47:50:
c0:fb:b4:f6:16:21:38:82:2d:21:06:e0:f0:fc:d6:
5d:b1:2d:6d:7c:23:d4:76:44:d0:bf:2b:c3:d2:80:
fa:00:d7:2e:1c:d3:c7:31:31:fc:fa:44:98:0b:eb:
3f:e9:d2:94:75:16:a6:41:65:93:cd:0d:ae:a4:f0:
00:32:8b:8c:d3:79:0b:34:f6:9c:31:ff:ad:ce:a3:
b0:7f:a2:b2:5e:4f:6d:54:e5:18:6c:87:80:a1:71:
01:84:61:ad:f5:37:20:97:29:bc:ea:bd:ef:fb:cb:
76:c7:b3:57:eb:21:e5:cc:9d:54:06:e8:21:cd:ce:
4b:e9:0e:8b:0b:e0:72:68:5b:4e:88:f3:f7:54:a7:
96:40:7c:40:3d:51:52:96:73:4d:34:51:df:e0:6d:
be:97:37:8d:4a:8a:dc:25:95:8a:2f:18:57:e8:b5:
fd:0f:54:95:39:69:81:f5:8a:2a:2e:0e:0c:c9:c9:
02:97:11:9e:61:31:94:a7:19:b2:67:90:61:a1:54:
1f:15:54:5d:5a:c0:68:b8:c8:ca:a8:57:a6:e5:f2:
55:4f:01:02:1b:16:b2:1d:d3:f4:1c:4b:8c:86:60:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:94:FF:D1:E1:8F:B7:77:90:36:B6:BA:46:14:F0:67:A7:E0:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W1GU_9Hhj7d3kDa2ukYU8Gen4KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.161.0-185.252.163.255
Signature Algorithm: sha256WithRSAEncryption
15:76:39:bc:c5:47:2e:91:c0:4e:de:8e:d7:58:94:3b:e0:bc:
b0:dc:fb:d8:b7:8e:f7:7f:a6:9f:fa:12:39:e1:7d:da:f5:fd:
55:75:34:91:b2:92:f0:49:15:0f:7f:1a:eb:54:13:27:fb:96:
35:3e:e9:23:73:d6:94:a1:97:4b:7f:25:4a:2b:8c:b1:ca:b5:
6c:d7:f8:3e:5b:d7:98:e6:0b:95:46:2a:05:07:13:b4:4c:2f:
79:7c:16:9b:d7:dd:5a:80:aa:93:f8:c3:6f:bd:5d:77:95:48:
db:c7:f5:69:97:9f:ec:ff:73:c6:96:f5:c3:bb:93:64:25:db:
d6:23:ca:ac:56:ce:22:12:e8:9b:4e:63:3d:98:a2:a0:0f:87:
d8:c3:7c:ba:46:f0:c4:b6:93:29:4a:f0:1b:60:d8:b7:8f:ab:
c1:87:6c:a5:5d:80:f6:53:85:99:35:ce:7c:52:5f:3a:54:7d:
3a:21:9c:87:0c:9f:c6:c1:21:5c:0d:30:9a:ab:60:b3:d4:c9:
5b:ce:e3:15:11:25:39:76:42:0f:bb:0b:30:8d:2f:bd:18:c3:
24:5f:68:4b:01:20:89:8a:99:43:6a:57:82:99:69:de:e6:e4:
2b:fe:e9:28:d6:45:fa:43:0a:8a:4d:a3:2a:65:b8:3c:02:bd:
93:2e:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org