Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/wlrhfns7TGdX9ZL5PNwGZ2X64Qc.roa
File: wlrhfns7TGdX9ZL5PNwGZ2X64Qc.roa (raw, json)
Hash identifier: NzYpF1ofPD1YArLo8BnvAHMQr1X8+KbxVnWoVFVbw10=
Subject key identifier: C2:5A:E1:7E:7B:3B:4C:67:57:F5:92:F9:3C:DC:06:67:65:FA:E1:07
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 018572B42CC65547DDD72CDD6DE54B403DE6
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/wlrhfns7TGdX9ZL5PNwGZ2X64Qc.roa
Signing time: Mon 02 Jan 2023 13:38:08 +0000
ROA not before: Mon 02 Jan 2023 13:38:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60849
IP address blocks: 185.40.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:2c:c6:55:47:dd:d7:2c:dd:6d:e5:4b:40:3d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Jan 2 13:38:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c25ae17e7b3b4c6757f592f93cdc066765fae107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:37:35:72:ab:87:e7:54:3f:b8:50:da:75:
c4:5b:77:55:e6:7b:f9:5a:57:35:80:ff:39:83:50:
c2:e0:be:c4:29:15:64:cf:28:1f:77:52:3b:da:dd:
6f:0c:9b:12:c6:0f:d7:ac:58:54:33:ba:f5:06:31:
46:c6:da:33:31:11:48:3c:d1:9e:30:5e:f5:dd:e9:
5e:87:ac:a2:f8:8a:75:73:da:64:c4:b8:6b:8e:50:
3a:7e:e7:fe:c9:cf:74:18:f4:f6:cc:d9:58:d2:12:
d3:bb:db:96:bf:f9:d8:43:22:5e:64:69:3b:7c:3c:
0e:b0:f3:e4:c0:39:dc:f7:95:e5:be:34:e4:a7:4a:
bd:02:0f:3d:3b:78:ee:e2:9a:75:cb:af:72:cf:4c:
64:1e:7a:8c:7c:f9:cf:ae:b1:7e:e6:6b:29:22:66:
c7:1f:07:1f:7a:1a:e1:d8:6e:c3:d0:6e:25:5a:39:
ad:81:6c:e1:49:c0:29:50:b1:63:7b:48:90:30:43:
5c:e8:80:98:2f:e9:46:2f:43:d8:1b:29:5b:a0:b8:
75:02:59:2d:c6:45:af:51:3f:53:92:63:ad:51:c4:
45:8e:ff:59:9c:0a:52:ed:e8:53:07:8c:3c:80:75:
7b:7f:4c:ee:46:04:e4:84:4a:5f:89:6f:57:ce:20:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:E1:7E:7B:3B:4C:67:57:F5:92:F9:3C:DC:06:67:65:FA:E1:07
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/wlrhfns7TGdX9ZL5PNwGZ2X64Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.19.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2c:38:a9:e5:65:87:6f:92:18:f9:5e:ef:bd:05:2b:4f:80:
82:5a:3e:86:11:d1:4a:58:b6:9b:45:3b:21:72:a3:3f:b5:74:
78:7f:18:a8:0b:26:90:61:10:c9:84:d5:d2:de:4c:40:c4:bd:
22:3c:91:32:db:97:6e:bc:a6:5b:ca:e6:7c:66:76:b1:64:91:
50:9c:0d:5f:51:ad:5c:07:d1:ba:a1:2a:76:dc:00:a6:5d:e1:
f0:8b:39:44:2d:14:54:b7:12:81:c1:55:8f:ee:a0:24:03:74:
e4:78:ee:d0:16:68:70:af:98:67:8e:f2:d1:da:e0:4a:58:31:
13:83:7d:ac:a7:86:f2:92:03:a7:b1:35:49:65:ac:d9:d1:d8:
ee:30:70:7f:3e:f6:fa:24:f5:9a:7c:46:20:27:d0:5b:91:56:
bf:b2:b1:17:61:85:5e:00:0a:c1:19:06:04:b4:d6:7c:7a:fd:
6c:9c:24:97:7d:2d:a8:a6:09:a0:9a:34:48:d1:bb:e0:e0:6e:
ad:bc:d0:dc:f2:51:9c:6d:a6:dd:dc:2c:ea:e2:fd:da:ee:d3:
b9:cd:39:4f:67:ce:f4:da:a7:3d:88:63:e0:1d:d0:dc:0c:d7:
07:96:bc:fb:84:ef:39:eb:c8:2f:60:d4:1a:9e:04:9c:34:8b:
4a:50:81:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:21 2024 by rpki-client on console-ams.rpki-client.org