Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa
File: WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa (raw, json)
Hash identifier: WlwQ02EXs1L4IlFG9hsdNjT0bZcGGV+GMTTTOQ8Aem0=
Subject key identifier: 59:3D:8F:6B:C9:FF:B1:44:C7:FC:3C:8D:3E:44:19:CF:C8:27:6B:EB
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01856F0B6B2B186A3DE20558726F427D60C6
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa
Signing time: Sun 01 Jan 2023 20:34:57 +0000
ROA not before: Sun 01 Jan 2023 20:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47232
IP address blocks: 185.214.192.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6b:2b:18:6a:3d:e2:05:58:72:6f:42:7d:60:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jan 1 20:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593d8f6bc9ffb144c7fc3c8d3e4419cfc8276beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:f1:3e:39:30:33:2a:3c:c8:65:44:36:3d:
9d:10:f6:5a:e6:90:f4:44:74:ea:4e:01:dd:0b:c2:
14:e8:c5:8d:f1:39:c3:36:6b:7b:33:7b:f8:8c:2a:
4b:a7:38:67:fd:a2:0b:d6:a1:f2:2b:09:c8:ee:97:
24:b9:aa:20:c6:d3:60:1a:50:4c:2c:2f:c4:9b:bb:
ac:1e:e2:53:0e:c3:64:dc:f2:d1:c8:bd:9e:82:53:
fb:d1:b9:e3:59:59:1e:80:8b:87:b7:eb:64:97:32:
8d:14:fd:da:f3:8a:f5:28:b6:df:9d:e9:0c:ac:51:
b6:f3:65:d2:fe:a9:5b:55:90:68:0d:cc:93:f2:3b:
9f:c0:30:86:36:0f:5c:39:95:8f:c4:0d:1f:79:0a:
e1:66:98:0c:b2:d5:fc:87:0a:e7:63:c4:76:16:4e:
85:80:94:29:73:66:af:3e:19:8e:6d:65:95:44:b7:
a6:e9:87:9a:3d:06:8d:29:21:4e:85:e2:02:fa:58:
01:ed:e7:c9:af:2b:1c:25:e7:7c:7c:6a:25:58:8e:
4a:a6:5f:54:4a:c5:7f:17:da:93:2b:5c:03:b9:b4:
ba:d4:0c:cf:02:c8:f7:7c:af:a5:06:fe:56:46:3a:
00:eb:53:44:a9:d5:91:1c:83:64:a9:2a:6a:37:cd:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3D:8F:6B:C9:FF:B1:44:C7:FC:3C:8D:3E:44:19:CF:C8:27:6B:EB
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.192.0/22
Signature Algorithm: sha256WithRSAEncryption
47:ca:5f:45:94:0a:e5:fd:56:f8:bd:6e:1e:b5:02:d8:04:cf:
b9:66:38:60:05:b8:3c:d8:14:46:7d:5c:82:58:8b:8e:8c:1a:
64:97:77:48:20:2c:e5:41:5e:ec:4d:76:bc:5a:07:7d:27:04:
40:0c:68:f6:59:42:a6:e4:8e:45:d0:0e:87:e8:8c:df:53:84:
23:39:67:44:24:01:5f:be:11:3e:1a:31:8c:a5:2f:0a:5c:26:
d2:7d:80:c0:17:b9:b2:79:e6:3a:df:24:73:69:7d:ee:8c:27:
96:68:c4:d4:85:3c:99:6b:39:fa:92:30:41:7d:f7:a8:6d:ef:
83:3e:34:1e:dc:c6:b4:21:18:47:b8:45:31:cf:ee:4a:0b:12:
36:14:c7:8d:4a:a4:6c:9e:78:92:82:07:96:eb:17:c5:ef:4f:
aa:a2:69:fc:0d:1b:11:53:f3:68:db:85:01:1b:a0:8c:e2:12:
3c:0b:e5:38:34:41:47:92:a4:88:39:4b:d1:c4:66:30:78:a6:
0e:44:c5:53:5b:5e:8e:d1:b0:ba:90:a3:75:56:ec:72:9e:bc:
c1:cb:6c:1a:69:95:d1:44:52:3a:d5:1f:8c:64:33:50:a9:d7:
cb:ca:88:4b:ac:46:9d:b1:71:3c:0d:db:be:65:de:23:29:81:
4f:0e:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org