Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wlMWGidc_4C9UYaL5tP9RpQLMHE.roa
File: wlMWGidc_4C9UYaL5tP9RpQLMHE.roa (raw, json)
Hash identifier: R0OnITlUZs9IeWcSN1iZXrrHMGzJm5B/qQaEUK6uS3A=
Subject key identifier: C2:53:16:1A:27:5C:FF:80:BD:51:86:8B:E6:D3:FD:46:94:0B:30:71
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4254CCB52938456828AF6D24CAAA173
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wlMWGidc_4C9UYaL5tP9RpQLMHE.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1
IP address blocks: 163.5.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 17:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4c:cb:52:93:84:56:82:8a:f6:d2:4c:aa:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c253161a275cff80bd51868be6d3fd46940b3071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:a4:47:04:23:df:bf:10:ec:1f:9f:0d:e6:
f1:ee:6c:ec:4b:81:83:c3:2a:83:cb:9f:35:91:2c:
55:3a:f6:af:96:73:40:c5:d3:af:90:d5:a7:76:01:
97:d8:31:ea:02:e1:52:68:7b:ed:0c:6a:63:16:b1:
23:0f:07:93:83:33:d6:3d:00:7c:85:3b:38:0d:77:
ce:ae:9e:41:67:7b:5f:f5:5f:69:6d:19:01:82:6c:
38:0d:fa:14:d6:4e:fc:6e:33:4f:ba:60:d8:be:46:
bb:19:9f:6a:9c:a9:37:f2:a6:06:a4:fc:81:2a:29:
cf:6c:06:2b:06:48:51:1d:d3:3e:d4:0a:a5:02:3b:
77:4f:b7:20:7e:ef:6c:72:84:58:f5:d7:e4:80:57:
5c:45:9c:24:f5:9b:22:25:e2:af:74:75:b0:4d:c0:
83:fd:82:99:90:fa:9c:b1:f9:6f:1e:a7:88:aa:d9:
66:07:db:13:10:6f:89:a2:ca:ff:73:57:f3:27:09:
30:7a:02:43:80:ef:d3:ef:4a:08:67:03:c2:9a:e4:
e0:75:5c:19:44:a9:ea:bc:17:2a:11:f9:53:75:bb:
74:4a:c5:4d:06:4e:ca:c0:c4:61:e7:3b:38:dc:13:
2d:2d:10:69:c3:91:06:c0:74:84:81:e4:23:f4:2a:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:16:1A:27:5C:FF:80:BD:51:86:8B:E6:D3:FD:46:94:0B:30:71
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wlMWGidc_4C9UYaL5tP9RpQLMHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.176.0/24
Signature Algorithm: sha256WithRSAEncryption
67:30:50:66:89:1d:3f:9b:62:a4:71:d8:37:40:1a:68:83:ad:
94:16:57:d4:f8:b1:e6:6a:1c:12:b5:82:60:8a:f5:46:bc:72:
60:ff:09:db:72:10:9b:37:1c:fb:e7:08:f3:90:e8:c5:8a:e2:
e5:fe:8f:07:55:b8:31:7c:6b:96:8d:15:db:d3:08:2c:3a:d1:
61:98:8e:bc:e1:e1:64:6f:3a:0b:95:ae:0c:c5:94:ba:ef:7c:
01:ef:5a:9a:74:ed:37:ff:55:9d:8b:e3:6b:35:62:11:95:6d:
8b:8f:e7:fd:aa:d3:98:e6:b0:d6:06:1c:40:cf:86:10:2b:16:
30:7a:38:b7:2a:46:ea:33:43:72:6a:4f:d6:53:1e:f9:e6:8f:
94:c4:b5:8a:2b:93:d6:29:b9:21:c1:bf:04:cd:b1:e6:91:01:
9a:6b:1b:dd:f8:ba:e8:5a:c1:e7:31:96:97:c2:42:01:ce:00:
d1:d0:e2:f0:58:52:51:34:5e:b0:f3:c9:1f:6f:5e:17:1e:a1:
0c:b6:0c:20:ef:33:34:3c:ec:c3:4d:f0:0c:33:3e:df:47:7c:
ba:f6:6c:cc:76:0c:78:d4:46:f4:b2:93:a0:eb:94:17:1a:65:
62:09:45:55:4c:cd:f0:01:a7:32:67:86:9e:a5:ac:0d:5c:2b:
df:5d:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 21:58:40 2024 by rpki-client on console-fra.rpki-client.org