Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/wLmLDeHUS9KdNYasA3WvM_2WwNk.roa
File: wLmLDeHUS9KdNYasA3WvM_2WwNk.roa (raw, json)
Hash identifier: oqJqONH5SmnO20huvuhDHeG86JVa7PMkoXgha8XrpdU=
Subject key identifier: C0:B9:8B:0D:E1:D4:4B:D2:9D:35:86:AC:03:75:AF:33:FD:96:C0:D9
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 018571D78D417FD6369C97A0F43B758FA03E
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/wLmLDeHUS9KdNYasA3WvM_2WwNk.roa
Signing time: Mon 02 Jan 2023 09:37:09 +0000
ROA not before: Mon 02 Jan 2023 09:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200919
IP address blocks: 185.91.112.0/24 maxlen: 24
185.91.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:8d:41:7f:d6:36:9c:97:a0:f4:3b:75:8f:a0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Jan 2 09:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b98b0de1d44bd29d3586ac0375af33fd96c0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:93:da:3a:32:de:ea:f4:08:63:d1:a8:f4:
41:a1:e2:4e:03:d9:54:cc:63:46:a1:f8:b5:8a:d4:
e8:d9:ec:85:ee:3a:71:e0:63:ea:f5:e3:4b:a9:be:
e9:88:e1:69:b2:0c:df:ac:a1:18:77:85:5e:cb:97:
42:be:ac:a8:d6:42:5e:58:38:06:45:3d:f5:86:69:
77:c7:24:e7:25:c3:cd:4b:70:c2:db:74:3e:1f:2c:
5f:34:23:a9:a8:76:7a:e6:4a:58:70:6b:fd:41:74:
1b:62:ed:9a:d0:24:d9:00:9e:1a:53:d4:33:54:6a:
bc:1c:8b:a4:b1:88:03:1d:0f:df:c2:18:b6:21:2b:
ff:82:f5:b1:ec:d5:4d:bc:4f:6e:2f:b8:57:a1:31:
6f:03:a7:7a:b0:88:24:45:76:ae:58:cb:b3:0f:47:
24:f8:5b:58:44:99:b5:48:22:12:36:6c:46:91:ce:
26:6d:63:02:64:a8:ca:96:24:a1:24:61:33:8c:19:
78:81:e3:76:6d:a7:2e:e6:27:8a:d2:99:9e:92:85:
1a:c8:e5:e4:26:97:d6:3d:eb:bb:15:b2:85:2a:41:
f5:9a:ff:65:68:dd:a0:3d:51:25:19:7e:ce:b0:f3:
19:06:6d:49:33:96:3a:e2:76:a4:ad:9b:d3:86:97:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B9:8B:0D:E1:D4:4B:D2:9D:35:86:AC:03:75:AF:33:FD:96:C0:D9
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/wLmLDeHUS9KdNYasA3WvM_2WwNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:ca:18:9e:9c:88:31:9f:b4:0e:de:26:33:8f:f5:03:cd:9c:
f4:c0:64:aa:86:90:0d:09:62:48:d2:d0:cc:12:6f:93:21:04:
c0:60:05:1a:04:32:8c:64:20:9b:5d:22:00:20:db:6a:a1:62:
39:d8:5e:aa:0e:d4:7a:a8:b7:55:15:b8:85:9a:d6:75:48:3b:
99:2f:0e:ac:72:d4:53:1b:24:2b:d7:30:42:51:58:79:19:e9:
6a:43:74:0b:90:86:42:85:78:cc:27:04:fd:8b:1b:3b:6d:35:
e1:3d:d8:ae:bf:e7:cb:03:d7:5d:5c:bd:02:78:20:09:f2:02:
30:ee:aa:31:a4:19:d9:97:c9:62:00:ea:f6:a1:7d:1b:b5:26:
e4:7b:b6:10:85:e8:2f:81:0e:0b:16:7a:54:0a:9f:90:ec:ba:
c7:ec:86:ee:43:97:71:0d:58:9f:10:b9:cf:07:08:22:a8:42:
4d:1c:7b:36:30:db:c9:74:5a:6f:1c:bc:00:05:a2:7e:3c:ec:
77:04:fa:72:18:aa:ab:7b:26:f0:d2:fb:e0:c0:b2:73:70:8d:
4d:9b:b3:5d:15:91:82:4e:58:27:84:5a:b8:e0:ab:76:c4:6a:
e9:ee:d2:ef:bb:f8:62:f5:83:5b:27:44:cd:6e:39:10:95:80:
48:34:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:37 2024 by rpki-client on console-fra.rpki-client.org