Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/wRKf_UC4NPQGeDW4dVbNBeFBoAQ.roa
File: wRKf_UC4NPQGeDW4dVbNBeFBoAQ.roa (raw, json)
Hash identifier: wKkZ+QLImHtV/fhWZ6aEjZo2zjrdI1mI07tpdXPR3Jk=
Subject key identifier: C1:12:9F:FD:40:B8:34:F4:06:78:35:B8:75:56:CD:05:E1:41:A0:04
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 01903CFCBBFA00A07392D12550047AD9D8E5
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/wRKf_UC4NPQGeDW4dVbNBeFBoAQ.roa
Signing time: Fri 21 Jun 2024 22:48:34 +0000
ROA not before: Fri 21 Jun 2024 22:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5384
IP address blocks: 185.78.246.0/24 maxlen: 24
185.78.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 01:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:fc:bb:fa:00:a0:73:92:d1:25:50:04:7a:d9:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jun 21 22:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1129ffd40b834f4067835b87556cd05e141a004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:53:27:61:6f:23:79:5c:d5:ff:8a:a2:43:
91:25:20:ff:f2:65:e3:93:b5:2e:61:75:13:3e:95:
d6:ac:e6:b9:03:e3:82:d1:e3:ee:57:73:d6:d9:af:
66:34:8b:bf:dd:87:eb:1e:a8:4d:9c:2a:85:2c:26:
61:11:3c:ec:b9:99:fb:fd:46:37:bc:a1:cd:88:3d:
fb:50:81:ab:02:44:67:51:d0:cc:11:71:38:ac:bf:
e1:ce:ec:c4:64:87:0a:8a:7d:e4:51:ad:9c:1a:f3:
30:6a:f3:4f:a2:d4:d0:f3:53:ba:ed:2c:3b:d9:bf:
84:74:0c:8e:b9:7d:c0:33:e6:04:e1:5d:ad:f1:a3:
80:40:2f:bd:3e:ea:8b:a6:7c:76:fc:96:72:75:2e:
2d:b9:8e:79:c6:0b:d8:e7:b9:1b:89:c2:6e:ee:66:
e2:a1:cd:09:b9:ac:d8:2a:6e:dc:c4:a6:72:7e:8d:
0b:b4:ee:ad:87:c5:65:8b:71:11:2a:f3:4b:8e:ff:
80:0e:bb:30:81:1d:90:9d:0d:35:42:e6:89:57:c1:
38:7b:4a:13:9e:15:21:a7:cf:e7:33:29:b7:33:0d:
1c:c4:fe:6e:89:0d:5f:c4:09:59:9c:08:87:e3:d7:
d3:74:6e:fb:b7:dc:1b:aa:ff:4f:5d:ea:f9:86:4a:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:9F:FD:40:B8:34:F4:06:78:35:B8:75:56:CD:05:E1:41:A0:04
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/wRKf_UC4NPQGeDW4dVbNBeFBoAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.246.0/23
Signature Algorithm: sha256WithRSAEncryption
08:67:14:11:af:62:2d:56:74:fd:56:a9:33:76:1d:38:cb:c1:
5f:8e:d3:4f:ba:b9:1a:df:ef:74:15:9f:1a:49:20:0e:2f:db:
80:b6:60:b4:7c:2b:1e:97:b3:13:5a:bc:78:be:8f:fa:0a:44:
b1:0b:99:c7:71:80:46:e0:55:30:85:8c:12:4f:48:9c:50:8f:
8b:8b:12:37:9b:11:68:8b:d2:6c:d1:4b:8c:91:23:a0:3d:70:
c1:69:49:58:40:7f:fc:b2:65:c3:29:fb:be:1b:da:ae:43:da:
cb:98:b4:8f:1e:bf:7c:2c:95:fb:53:f0:7d:b5:b9:ab:e5:f8:
89:88:74:96:39:dd:99:83:09:69:11:91:db:34:7d:5f:f3:87:
3d:30:11:dc:b7:1f:a6:4a:9f:4e:60:20:ae:71:4a:f1:48:b6:
05:09:64:be:2f:c9:bf:4f:3b:b1:12:61:80:8a:9c:af:6b:11:
1b:1f:91:71:02:ce:d4:73:1b:4a:14:e4:35:b2:d9:cf:96:08:
f5:c1:10:b9:0f:8c:4a:0f:0a:1d:15:7a:c5:c0:fe:40:da:0b:
54:8a:be:28:59:58:cf:d5:44:53:dd:e1:4b:a3:67:11:78:8c:
67:cf:7d:9e:35:48:55:4b:99:e4:99:86:f2:dd:1c:ec:35:1c:
bf:75:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:41:01 2024 by rpki-client on console-ams.rpki-client.org