Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/WAqyvEj4Ow9xjJVqiiII6c36p7g.roa
File: WAqyvEj4Ow9xjJVqiiII6c36p7g.roa (raw, json)
Hash identifier: WhHGb8p+3klt0JBcU20h9THCwUmcifq7IqiUZJVJOBw=
Subject key identifier: 58:0A:B2:BC:48:F8:3B:0F:71:8C:95:6A:8A:22:08:E9:CD:FA:A7:B8
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 01857014F85C22AFBC740766A90A493D2BC2
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/WAqyvEj4Ow9xjJVqiiII6c36p7g.roa
Signing time: Mon 02 Jan 2023 01:25:00 +0000
ROA not before: Mon 02 Jan 2023 01:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.105.0/24 maxlen: 24
2001:7f8:bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:f8:5c:22:af:bc:74:07:66:a9:0a:49:3d:2b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Jan 2 01:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=580ab2bc48f83b0f718c956a8a2208e9cdfaa7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:cc:90:b1:83:ab:2c:5f:91:0d:9b:99:48:
a8:b7:b3:46:e9:ae:52:d2:c5:76:8d:56:e0:4e:3d:
6d:91:93:b0:e4:8a:48:94:e7:01:0b:f3:92:2d:aa:
a4:43:b3:4a:7c:df:6c:63:3e:70:d4:d7:42:63:f5:
68:20:0e:f9:5e:ad:d9:35:c3:64:19:5f:c1:4e:0d:
3d:74:d4:c2:57:0a:11:54:0e:7d:16:59:91:bc:55:
bd:09:13:ae:0a:7a:d9:c4:8a:4b:72:e8:5c:58:d6:
01:95:de:19:83:bd:d5:0e:27:39:80:01:41:55:2b:
d2:5f:ce:89:ea:4a:d2:c5:52:68:07:b3:f2:56:f9:
37:cb:2b:36:08:0e:b8:5e:84:62:a9:0d:11:d7:dd:
18:50:ae:67:d9:88:b2:5c:f3:2f:d4:cc:88:38:97:
28:5b:69:ff:f9:cd:31:9e:7d:1c:1d:3f:46:b1:73:
93:39:32:79:54:f4:73:41:e5:f9:20:41:3b:c4:2d:
a6:25:8d:d7:7f:e1:32:f8:8c:e7:69:42:fd:b6:02:
2b:c3:55:37:3c:f2:e7:6b:14:27:02:76:96:90:eb:
bc:ed:ed:73:70:b6:c6:03:37:55:d2:f7:b4:5d:fc:
62:df:b7:19:9c:9c:fd:9f:05:aa:50:58:df:c1:3a:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0A:B2:BC:48:F8:3B:0F:71:8C:95:6A:8A:22:08:E9:CD:FA:A7:B8
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/WAqyvEj4Ow9xjJVqiiII6c36p7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.105.0/24
IPv6:
2001:7f8:bf::/48
Signature Algorithm: sha256WithRSAEncryption
2d:33:64:cd:1e:88:61:4b:32:0b:e0:c2:4e:a8:b6:5f:eb:55:
4b:66:e3:43:06:bd:33:a3:69:ac:1d:67:9a:57:01:e7:a7:52:
d3:0f:81:cd:d8:48:92:cc:c2:d2:9b:43:5a:d0:49:88:28:4c:
ac:2e:59:70:0d:58:ee:45:57:7d:2b:c8:0c:ae:fc:c7:b0:b1:
fe:f3:cd:34:97:21:6f:f9:f6:c1:64:3b:0d:83:76:cc:21:b8:
54:a8:c5:19:7f:ea:98:4c:32:8b:9c:4f:e7:dc:9e:63:12:c5:
86:ae:c4:3b:71:82:58:20:6f:6d:05:87:b4:01:b6:89:a4:dd:
33:85:db:de:f5:a9:2f:16:59:1c:42:06:dc:d6:fb:e8:f4:a2:
55:5b:45:a7:86:b3:cf:dc:75:8f:d5:aa:e9:ff:48:84:19:2c:
45:b7:a9:b5:7d:a8:42:a3:4d:68:03:58:cb:81:91:a0:fd:41:
c5:d1:1a:8f:73:63:13:ec:c1:e3:ca:d4:c2:64:7c:9b:57:0e:
8d:48:ac:93:2c:f4:74:f8:88:c4:24:02:bf:d1:97:47:c3:32:
82:58:69:2c:2b:6f:7f:7c:14:4c:e0:cf:fc:08:50:f9:63:b8:
52:5d:c7:a4:3f:09:2c:62:f5:18:b0:19:a9:c1:32:94:bd:f8:
26:15:94:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:35 2024 by rpki-client on console-fra.rpki-client.org