Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WCA_-GINkduqlKxKM9Swl4KYdho.roa
File: WCA_-GINkduqlKxKM9Swl4KYdho.roa (raw, json)
Hash identifier: T44VtMhft56eO3Gyu5BXKOJlbHta1/f34oN8tG3acK0=
Subject key identifier: 58:20:3F:F8:62:0D:91:DB:AA:94:AC:4A:33:D4:B0:97:82:98:76:1A
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01864F972462CB8F3FA056EEB5598CE8DF50
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WCA_-GINkduqlKxKM9Swl4KYdho.roa
Signing time: Tue 14 Feb 2023 11:02:30 +0000
ROA not before: Tue 14 Feb 2023 11:02:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 00:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:97:24:62:cb:8f:3f:a0:56:ee:b5:59:8c:e8:df:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 14 11:02:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58203ff8620d91dbaa94ac4a33d4b0978298761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:5a:10:4d:ce:3f:6f:03:18:b5:1c:5f:df:
46:e4:93:30:c9:f7:45:51:8c:b9:cf:cc:01:fb:7d:
86:95:b8:31:f1:ce:b7:2a:04:a3:de:5c:4e:e5:6c:
6e:42:63:d2:e5:d7:8b:13:e4:5f:46:b2:25:d3:5b:
88:1b:50:dd:53:d7:10:62:4f:d5:bf:7f:7d:18:ff:
6d:1f:5c:71:31:fe:1a:c6:14:47:a5:21:39:26:32:
42:8e:ff:95:e0:12:de:44:8b:59:1e:8c:01:3e:c1:
ac:8a:30:f2:3b:38:25:4b:a4:5c:40:44:c8:4d:f2:
2d:4d:60:52:07:6f:45:fe:2c:b4:ce:6a:2f:11:9e:
9e:e5:97:ab:76:35:5d:82:dd:9d:fb:a4:ff:49:f9:
5a:4b:27:81:29:e2:bf:c8:9d:21:af:97:76:84:c0:
e9:60:08:dc:f7:9f:f7:10:92:92:ab:1a:e6:0e:a6:
af:78:5d:f1:98:6b:f0:ab:2a:6f:87:41:f8:50:54:
60:2d:68:24:51:96:16:cf:24:0a:d8:b6:8b:65:17:
af:39:4e:67:aa:3a:9f:2c:5c:99:2c:c5:99:74:5e:
95:bd:9f:d4:0d:8e:2e:f0:4d:b4:6f:39:36:e2:89:
b8:7b:08:e5:1a:0c:f9:d4:a3:93:66:74:1b:2f:ad:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:3F:F8:62:0D:91:DB:AA:94:AC:4A:33:D4:B0:97:82:98:76:1A
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WCA_-GINkduqlKxKM9Swl4KYdho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5d:95:38:70:0c:b6:9d:6e:e5:ae:fb:f4:52:0e:8d:19:f5:
05:3c:b7:f1:5f:4c:5f:0d:ae:6b:7f:d3:81:2e:b4:b7:e3:ff:
e3:0c:97:28:9c:bb:a6:65:01:94:5c:d4:02:48:ec:49:f7:45:
12:1f:16:7e:51:44:de:eb:14:7c:40:10:32:0a:30:ab:d1:fb:
79:3f:d7:a3:9a:d9:90:bd:07:9f:4a:66:f2:74:c8:8e:10:cc:
f1:fd:f0:bf:e4:67:ed:1e:7b:60:ec:01:96:f7:90:97:74:9e:
c6:9b:2a:3b:3a:71:80:f3:31:2e:23:f3:48:22:fc:37:0d:d4:
cc:13:a4:a5:e5:85:51:51:37:91:cf:32:9a:d9:7a:0a:55:d9:
de:81:53:6b:d5:f3:55:12:fd:08:fd:81:1b:9b:59:d5:ad:39:
6d:db:a7:60:29:6c:0a:69:43:65:e5:f0:23:8f:10:e0:3b:78:
b8:ed:08:2f:b1:5e:2a:de:a8:d1:ad:0e:0e:49:39:cd:8e:ac:
f3:28:9b:2e:d6:d6:ce:da:13:8d:48:26:5d:95:74:20:c4:fd:
15:52:0a:b9:a2:18:ec:7f:03:7f:f1:a0:59:b3:41:65:04:a9:
4a:35:fc:11:14:da:46:d8:a2:02:d5:d6:02:b0:a7:b5:a6:61:
f3:74:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org