Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/wUrVTWFFx0oDuRd4Pr1YSB7CZHQ.roa
File: wUrVTWFFx0oDuRd4Pr1YSB7CZHQ.roa (raw, json)
Hash identifier: AJN/21HklFRbHGMeY4lOhhnWkW15jswQhB69WTcfPvA=
Subject key identifier: C1:4A:D5:4D:61:45:C7:4A:03:B9:17:78:3E:BD:58:48:1E:C2:64:74
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 01856E5D7021565DE38FF71AE757DEB5D397
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/wUrVTWFFx0oDuRd4Pr1YSB7CZHQ.roa
Signing time: Sun 01 Jan 2023 17:24:55 +0000
ROA not before: Sun 01 Jan 2023 17:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34762
IP address blocks: 86.39.128.0/17 maxlen: 24
185.115.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:70:21:56:5d:e3:8f:f7:1a:e7:57:de:b5:d3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jan 1 17:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14ad54d6145c74a03b917783ebd58481ec26474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:71:27:30:87:9e:95:0a:75:80:0b:10:c0:
94:40:73:64:5c:5f:04:91:04:09:53:e7:71:c1:55:
15:f7:bb:49:8b:e8:59:c4:4e:74:04:0c:10:47:f2:
55:fa:82:79:83:5c:4a:07:1d:1d:94:1b:1e:e8:ad:
e4:67:49:3c:d2:28:08:b8:9c:de:1c:95:7b:1d:2c:
47:84:49:cf:34:70:61:47:af:24:5a:0d:d7:d8:3b:
bf:80:f6:b6:5f:88:8b:e6:9a:25:f9:61:c6:d4:dd:
85:9d:2f:ef:35:8d:30:1b:35:72:22:2e:e5:62:38:
50:3d:f8:4d:00:5a:8c:53:e1:a7:70:cb:82:6d:2a:
11:c2:12:45:c3:bf:28:42:e6:49:d7:9c:e0:2b:19:
66:a4:4f:05:ac:38:62:94:4a:4d:4f:91:a1:3e:8a:
f0:ac:fb:d6:48:0e:90:62:3c:e8:96:4f:33:fc:40:
10:9b:39:96:61:91:ef:0c:71:46:81:76:04:7f:38:
ce:09:7a:8b:37:c6:30:a6:a0:4e:21:db:89:85:95:
07:37:22:41:7f:35:18:53:a3:56:67:e8:d9:46:e8:
6d:6e:1e:b6:38:5e:d0:7c:b4:a2:bd:01:2c:ea:1f:
de:d1:f7:cf:33:8c:26:4f:74:74:a2:2b:d6:27:bb:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:D5:4D:61:45:C7:4A:03:B9:17:78:3E:BD:58:48:1E:C2:64:74
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/wUrVTWFFx0oDuRd4Pr1YSB7CZHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.39.128.0/17
185.115.216.0/22
Signature Algorithm: sha256WithRSAEncryption
87:fe:a8:cb:f0:32:cd:ed:05:45:6f:93:05:38:fb:59:6d:2f:
dd:6c:a2:30:a6:1a:23:a5:47:c3:e0:91:15:4f:82:8c:b9:4e:
78:af:f0:87:84:be:5d:fa:21:d8:1b:48:d8:3c:e8:41:b3:ed:
b3:64:38:f8:bb:1a:45:7f:a6:89:56:b8:63:b3:5b:b9:30:55:
5e:0d:e0:5e:5c:e2:71:24:a8:b7:13:e8:47:7d:ab:41:51:6c:
50:be:1c:6d:4a:97:a9:83:53:bd:7e:f0:7b:4d:d2:6c:0b:96:
ce:26:fe:d2:4d:ff:5a:b4:b7:6e:74:d0:3e:6c:f0:87:dc:86:
29:03:09:e9:fa:1b:2e:a6:60:60:94:ee:4f:48:2c:6e:c3:9e:
14:b9:e8:d4:64:3e:01:84:6d:0c:bc:4b:f2:77:71:e8:b1:a0:
6b:3b:14:c7:1c:f8:dc:11:21:87:e3:48:00:c3:48:d0:f5:74:
9e:22:5a:5d:81:6d:9e:91:a1:6f:e4:d1:ed:75:21:22:5c:7f:
20:c7:84:2b:fa:e2:c9:11:b5:4a:f8:dc:d7:0e:aa:7d:6e:c9:
3a:b5:35:44:78:41:f6:ab:e1:39:aa:0a:4b:3f:de:24:c9:c9:
28:19:f3:76:57:8b:fd:af:da:c0:7e:ff:4e:45:9f:b3:c5:11:
c1:5c:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:10 2024 by rpki-client on console-fra.rpki-client.org