Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WbPhCY_zql2evf8PpLTV7lEtOSc.roa
File: WbPhCY_zql2evf8PpLTV7lEtOSc.roa (raw, json)
Hash identifier: ua+X8/VHbWmX5pHH6iKJd7Sj01dCbfYpt/3pxLU/ttg=
Subject key identifier: 59:B3:E1:09:8F:F3:AA:5D:9E:BD:FF:0F:A4:B4:D5:EE:51:2D:39:27
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0185700278CA00B345926F2D3663909B7B81
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WbPhCY_zql2evf8PpLTV7lEtOSc.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12873
IP address blocks: 212.15.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:78:ca:00:b3:45:92:6f:2d:36:63:90:9b:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59b3e1098ff3aa5d9ebdff0fa4b4d5ee512d3927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:20:9d:47:ea:19:b7:4b:9e:20:a5:5c:88:
e3:4e:38:e8:56:f4:17:26:63:f1:1a:a4:6c:61:b8:
1d:cf:51:60:1f:d0:8e:26:3c:a8:b5:ae:7b:67:8f:
2c:fc:e2:58:dd:87:32:8a:51:94:62:a8:97:5c:8b:
f2:c3:e0:34:b6:22:d8:b4:23:38:34:ec:32:7b:41:
e3:14:0b:1b:dc:46:5e:6a:bc:02:e1:78:11:45:16:
63:e8:73:cd:ce:aa:35:da:38:00:ae:f3:a9:91:c4:
83:74:8e:87:50:43:a2:e7:e4:d3:4d:f7:7f:5b:93:
ab:60:42:7a:70:ca:eb:1c:a2:4f:5b:14:69:7b:0e:
41:71:a2:96:12:47:b7:09:27:4a:24:d8:77:4c:6f:
0c:77:d2:7b:05:33:52:e8:f3:29:8f:1e:b9:eb:f3:
6f:4a:b5:29:37:40:bd:40:b6:cd:e8:14:35:75:94:
57:bd:5b:85:d8:5d:ea:6f:fc:bf:78:cf:6c:d9:40:
e0:5d:c4:f2:cb:e0:2f:a6:91:51:1f:98:90:54:0b:
3c:36:7c:9a:2b:e6:c4:64:88:e0:ec:39:e0:e7:9e:
a2:78:5d:2b:9a:da:c1:56:12:6a:1e:40:60:de:ef:
dd:6f:c1:40:98:8c:11:1b:46:f8:21:0f:0a:b0:2e:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:E1:09:8F:F3:AA:5D:9E:BD:FF:0F:A4:B4:D5:EE:51:2D:39:27
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WbPhCY_zql2evf8PpLTV7lEtOSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.9.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:08:8d:2e:f6:96:eb:40:67:af:2e:c7:fa:f1:16:4a:4e:29:
4f:51:54:69:73:bc:8a:8e:5d:4a:15:10:de:a1:31:25:10:3b:
fb:68:cb:f0:fd:32:57:77:ca:d1:57:4c:bd:5f:b2:c7:93:db:
67:81:bb:00:de:b0:99:c0:86:ef:04:60:e7:9d:96:22:d1:97:
58:2d:57:20:91:d5:58:fa:5b:a9:04:15:ba:bd:ac:12:5f:02:
4b:90:e4:68:c6:3c:92:ce:f2:11:33:d0:49:d5:4e:75:26:d8:
a1:8b:d6:a1:a4:96:e4:7e:fd:48:73:cc:ac:4e:14:67:31:95:
56:8b:69:9d:b3:3a:a2:95:97:05:72:9f:55:a5:ab:c0:2c:42:
00:89:6d:e5:46:9b:6e:5a:9b:51:88:77:55:88:ba:fc:af:60:
9f:cb:6e:14:da:49:e0:50:13:b6:30:03:b0:ac:86:4b:40:55:
eb:bf:97:cd:bf:c5:74:0b:8f:8b:18:c0:d6:2f:67:43:b4:c6:
f8:aa:9e:b2:4c:68:ac:a5:28:99:c0:b8:2a:25:17:16:2c:2e:
8c:af:cc:99:36:10:8e:83:6e:fa:bf:37:c5:14:22:51:31:8a:
b0:87:80:c9:f8:23:21:de:f4:dc:00:7d:a2:63:3b:25:17:ea:
c1:d0:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:21 2024 by rpki-client on console-ams.rpki-client.org