Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/WqpYYcsBj42mb_OSuQPLI9F5ah4.roa
File: WqpYYcsBj42mb_OSuQPLI9F5ah4.roa (raw, json)
Hash identifier: Hh2pZoduaVBxJgxVIUETCknM8sJY4gJEwesfK2XFTuE=
Subject key identifier: 5A:AA:58:61:CB:01:8F:8D:A6:6F:F3:92:B9:03:CB:23:D1:79:6A:1E
Certificate issuer: /CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf
Certificate serial: 018B1E601734920A66BDB9095D34FF2E9D75
Authority key identifier: 62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/WqpYYcsBj42mb_OSuQPLI9F5ah4.roa
Signing time: Wed 11 Oct 2023 10:54:55 +0000
ROA not before: Wed 11 Oct 2023 10:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200043
IP address blocks: 217.18.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:60:17:34:92:0a:66:bd:b9:09:5d:34:ff:2e:9d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf
Validity
Not Before: Oct 11 10:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aaa5861cb018f8da66ff392b903cb23d1796a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:18:e2:c3:45:60:82:3d:53:8c:15:d0:9c:
43:de:56:cc:91:b0:6f:29:14:db:ca:54:f6:ae:ff:
86:03:10:29:67:02:2c:3a:7d:94:18:cd:63:b1:d7:
bd:98:f8:01:08:dd:f6:29:59:27:3f:90:65:71:20:
5a:df:5f:3c:1c:10:9c:d5:b0:c1:b4:3e:20:3e:b5:
ef:a4:2b:25:da:ef:7b:71:5b:99:95:67:ee:f6:49:
ae:7f:32:d9:fa:1a:6f:ca:41:e9:82:d7:34:54:7d:
9b:41:cb:85:68:68:15:16:c6:d5:f1:1d:f5:20:a9:
69:94:93:84:d7:0a:26:12:ff:29:e0:b4:fc:a7:a6:
57:d1:47:68:67:20:18:0c:0d:96:b7:6f:0f:ce:26:
6f:e0:0b:02:0f:4b:fb:6c:1b:9f:86:3c:95:76:62:
68:44:f9:ce:3b:18:d9:fc:c7:9c:9e:73:19:3c:2a:
28:f5:0c:9c:38:70:49:42:81:e2:ca:65:1f:d0:58:
73:b3:44:23:e1:aa:3f:c9:8b:98:50:96:8a:7c:0a:
5c:e7:d1:60:ef:7c:d4:37:3d:f5:07:f2:55:e8:8d:
b0:9e:49:08:b4:98:e8:9a:0e:de:a8:00:7c:92:8a:
f8:b4:6a:2c:cd:8e:94:49:1e:fc:36:af:06:8e:06:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:58:61:CB:01:8F:8D:A6:6F:F3:92:B9:03:CB:23:D1:79:6A:1E
X509v3 Authority Key Identifier:
keyid:62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/WqpYYcsBj42mb_OSuQPLI9F5ah4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.92.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ce:cb:e5:2d:d4:cd:42:fc:ee:7c:12:7b:d6:21:5e:00:30:
63:0a:a3:69:07:20:c8:3c:f6:1f:36:b9:bf:d1:a5:5d:b6:de:
c7:58:a9:71:ee:15:c4:f8:91:af:35:9c:4f:7f:4f:cf:6b:68:
bd:9c:c2:e7:9c:89:8c:e4:fe:1c:98:78:f4:9b:96:0c:e2:1f:
9d:8d:4d:b7:dc:92:ff:2b:45:ff:d2:fd:7f:95:57:dc:55:01:
ce:40:65:f6:30:10:4d:51:11:8d:4e:fe:cc:6d:20:55:b3:85:
97:47:9f:d8:b3:67:57:3c:e6:d4:10:47:8a:fe:c6:aa:83:fb:
be:93:21:5a:97:2c:97:14:16:de:0f:1c:68:df:b1:fb:e6:f4:
cf:89:c6:14:bf:55:7a:cf:1b:bd:b9:d0:d1:d1:b6:76:83:4a:
12:a9:27:27:f0:c8:d9:f5:bb:12:e5:53:7c:31:76:04:9d:49:
68:33:05:9f:70:6f:59:bc:97:f1:5e:91:10:4a:f6:86:78:ec:
c5:6a:72:7a:9a:b3:1f:75:25:c4:c6:38:84:bc:09:65:fa:8a:
b5:6f:f4:07:13:ef:3c:d3:f7:be:0f:84:27:da:f5:e6:7a:f8:
e1:71:b9:72:9e:74:74:80:83:4d:fb:e7:91:cc:7d:fc:93:21:
85:b3:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org