Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/WJrwny5QR5i_rp1KWmx3lxsxvdg.roa
File: WJrwny5QR5i_rp1KWmx3lxsxvdg.roa (raw, json)
Hash identifier: 9/0vSuSoLH8zl4zLPlXKx/nydCr0fo/E0MUisGx9Y0g=
Subject key identifier: 58:9A:F0:9F:2E:50:47:98:BF:AE:9D:4A:5A:6C:77:97:1B:31:BD:D8
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 01875186FF67D02189A04CA402BE8DD554C2
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/WJrwny5QR5i_rp1KWmx3lxsxvdg.roa
Signing time: Wed 05 Apr 2023 13:06:54 +0000
ROA not before: Wed 05 Apr 2023 13:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 132.66.0.0/16 maxlen: 16
132.66.0.0/15 maxlen: 15
132.66.18.0/24 maxlen: 24
132.67.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:86:ff:67:d0:21:89:a0:4c:a4:02:be:8d:d5:54:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Apr 5 13:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=589af09f2e504798bfae9d4a5a6c77971b31bdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:db:a2:75:4d:c0:f7:b0:76:47:a8:c6:2d:
4c:59:bb:63:5b:12:c4:ea:50:ea:0a:e4:99:11:41:
0d:7d:90:43:0a:32:f9:36:94:77:1c:ca:64:8e:e6:
46:bc:43:99:24:91:56:9f:c8:2b:c0:2b:26:cb:8b:
e1:65:ba:51:bc:ec:62:b4:4c:86:65:62:e6:bc:ec:
ce:e4:a6:15:5a:89:3a:c2:15:9d:cc:5e:57:7b:93:
87:f6:2e:f3:32:d8:09:33:a9:5e:04:e6:95:8d:ba:
5b:dc:67:90:ad:52:46:69:f7:40:c8:83:8c:18:e0:
0e:32:11:2a:01:e3:ad:99:52:33:d6:33:f7:67:4e:
ad:21:12:21:f6:e7:87:30:10:b5:4d:d2:20:5b:4b:
5d:b0:b4:6c:ad:5d:75:09:02:90:53:54:ea:b5:18:
85:cc:f7:f4:f2:1f:b7:56:1b:d0:44:0a:85:21:7e:
5f:5b:92:27:dd:cc:0e:21:48:81:0b:19:4a:69:01:
af:4e:bb:45:9f:ed:e5:bf:14:13:8a:a1:42:27:cd:
b0:8b:af:19:9e:03:10:6a:1e:95:f1:bc:57:48:19:
66:67:11:3b:2e:51:47:98:bd:4c:e0:90:5b:d1:af:
54:8d:0d:b5:08:cb:4e:36:2d:de:d6:29:84:fc:13:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9A:F0:9F:2E:50:47:98:BF:AE:9D:4A:5A:6C:77:97:1B:31:BD:D8
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/WJrwny5QR5i_rp1KWmx3lxsxvdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1e:8a:9d:3a:b0:43:7f:0c:a9:23:3f:c9:d4:26:78:40:77:79:
8a:23:6a:44:79:13:69:85:5c:ca:96:e6:a2:d1:86:12:3e:77:
82:85:64:fb:b3:ae:25:41:b2:0b:a7:46:0f:61:b3:9d:31:84:
7a:37:12:df:a6:0e:e2:94:d3:55:61:57:86:31:36:ec:7f:36:
47:1e:d5:5b:7c:e9:f2:e1:c2:8f:03:af:66:4f:7e:90:ea:81:
b2:2e:49:cf:30:93:50:a9:a4:24:46:e0:e9:8b:90:da:67:08:
99:98:a3:6a:39:74:eb:56:28:f1:f3:1f:34:4f:fd:cb:b0:89:
d9:a5:e9:f1:ae:07:d0:b0:a8:7a:84:ee:ed:05:cc:fd:ae:86:
b0:40:2c:96:d1:4f:49:70:04:ff:bf:dc:d4:f3:b9:7f:5e:a1:
55:d2:08:d0:84:e3:9d:3b:e4:c4:0a:a4:8f:f8:74:bc:90:fb:
5d:34:24:af:f7:83:6f:d4:d2:77:d4:66:d0:fa:03:24:d9:9e:
cb:8f:48:65:04:76:20:cc:40:10:99:ee:78:92:1b:83:95:ff:
27:bb:45:3f:2e:29:20:38:e1:38:22:08:95:d6:75:53:4b:5d:
b5:3a:cc:cd:19:19:1d:3a:fe:88:cb:14:17:d4:52:06:05:16:
99:bc:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-ams.rpki-client.org