Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wy6nV4YERAGpNGZXp3jvTajuXCU.roa
File: Wy6nV4YERAGpNGZXp3jvTajuXCU.roa (raw, json)
Hash identifier: 8mr6Oabe4GV9UPSmTx1LKkD6fTGi+CsHIICnnH2CFLE=
Subject key identifier: 5B:2E:A7:57:86:04:44:01:A9:34:66:57:A7:78:EF:4D:A8:EE:5C:25
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018BE9567F357CA8C017AF54CDDE2567812D
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wy6nV4YERAGpNGZXp3jvTajuXCU.roa
Signing time: Sun 19 Nov 2023 20:47:21 +0000
ROA not before: Sun 19 Nov 2023 20:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142594
IP address blocks: 2.56.166.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:56:7f:35:7c:a8:c0:17:af:54:cd:de:25:67:81:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 19 20:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2ea75786044401a9346657a778ef4da8ee5c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:53:5b:8e:6f:eb:2a:bd:99:d4:0e:db:03:
b4:12:06:d9:5a:fd:c7:b5:21:9d:e4:5f:d2:c5:db:
69:66:3c:50:6b:44:b5:34:5b:43:82:af:0c:ba:08:
44:68:a9:ae:44:a0:9d:db:93:3c:fa:a7:99:b4:9a:
26:d1:69:92:1b:08:77:dc:c1:9a:4d:e5:60:8d:f0:
89:82:8c:15:43:5b:45:17:36:19:91:75:e0:5b:c2:
40:3f:b9:4f:51:1d:0a:0a:04:4f:49:ef:6b:f7:e6:
06:30:2a:61:96:39:56:f0:6b:45:46:1d:a2:4b:8e:
fe:63:75:1e:73:57:d2:8f:e1:a2:24:66:c9:9b:96:
1b:2e:5b:bf:69:d3:d6:fb:84:2b:7c:f8:f0:4f:9f:
ba:e2:41:8f:38:1f:61:92:f1:ad:d0:04:3f:64:89:
9e:0d:bb:1e:3e:f8:24:90:0d:67:e9:be:17:0c:50:
b9:66:0b:f2:ff:50:f6:f8:1a:9f:2d:3b:89:34:b6:
85:76:69:2e:33:83:f4:bb:8d:08:95:34:4f:01:24:
b1:67:cc:26:71:a5:22:58:c2:df:74:95:d7:84:9f:
fe:95:31:30:98:7e:f6:56:04:6d:db:23:94:ac:02:
00:d8:cd:bf:40:3f:c6:f9:e0:78:c4:fb:89:4e:f3:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:A7:57:86:04:44:01:A9:34:66:57:A7:78:EF:4D:A8:EE:5C:25
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wy6nV4YERAGpNGZXp3jvTajuXCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
185.234.74.0/24
Signature Algorithm: sha256WithRSAEncryption
75:07:2c:3b:a0:9e:73:8b:34:bf:b3:23:97:a3:3e:e4:b9:33:
2f:67:d7:92:cf:e6:30:2a:73:c1:6a:73:da:8f:5a:46:c1:77:
6d:1c:dd:ef:23:97:6e:94:b6:7a:ad:9a:9e:cd:04:89:38:b6:
d8:18:b1:00:ae:6f:3a:a1:1b:fa:2d:bf:4c:ae:33:7e:cc:d3:
bf:be:8f:5e:25:00:91:eb:26:fd:70:84:ec:1b:52:c8:d7:8c:
11:62:b9:8c:e8:52:78:f9:ee:b3:36:6c:84:6d:1f:f2:73:e5:
47:5d:82:66:a5:b1:29:fa:7e:2e:38:ea:ff:a1:ca:74:4f:90:
7c:c6:ca:a3:ea:63:91:d7:19:ca:3a:e2:c9:b6:e3:02:70:7c:
d7:aa:4e:43:24:0f:6a:72:41:85:c9:6e:13:c0:cd:47:71:f6:
a6:a2:3b:8f:34:13:19:17:21:12:7d:c3:d3:8b:d6:89:9c:ad:
05:f2:30:22:65:2a:a5:38:7c:2b:45:22:a3:0d:20:f3:6c:65:
f4:6e:46:6d:d1:ef:41:af:6c:cf:70:88:8e:c8:d9:e2:ad:df:
fd:d2:e2:60:df:98:22:85:9f:ed:9d:55:f9:ae:e6:bb:3e:22:
e8:9d:c9:9a:66:e8:11:1b:d4:bd:4a:f2:84:29:a0:45:f5:5c:
f9:78:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 23:19:14 2023 by rpki-client on console-ams.rpki-client.org