Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/WeRRlo0Bkp0nKoQ2Xx2syBn_D8U.roa
File: WeRRlo0Bkp0nKoQ2Xx2syBn_D8U.roa (raw, json)
Hash identifier: 8THjcyhdm6deugq80nJoHD4V/b6OJ6zb9jJ4EpkMb68=
Subject key identifier: 59:E4:51:96:8D:01:92:9D:27:2A:84:36:5F:1D:AC:C8:19:FF:0F:C5
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB25C7D6176AA95D75AD7D9D7A571E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/WeRRlo0Bkp0nKoQ2Xx2syBn_D8U.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 194.180.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 17:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:25:c7:d6:17:6a:a9:5d:75:ad:7d:9d:7a:57:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59e451968d01929d272a84365f1dacc819ff0fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:d2:d2:06:ef:67:6b:1e:cc:b7:53:70:26:
b3:38:13:15:04:c7:a1:19:67:cf:f3:9c:f3:48:68:
04:34:43:9c:eb:f6:6c:70:ac:5c:8a:e3:70:5b:c8:
c1:46:2a:85:44:c0:fa:e9:48:cd:92:91:8b:da:4c:
8b:8a:5c:0d:88:06:ed:18:c1:67:a2:f7:e1:22:be:
ed:c0:04:3f:69:d9:3d:ac:6e:43:70:c8:07:d9:72:
5d:3b:58:51:46:59:ce:0f:fb:17:59:7d:7f:c0:c1:
f8:b9:da:dd:5f:52:5f:54:39:b9:6f:c7:8c:ed:b8:
2d:5b:9b:cb:b4:67:17:6b:ce:c1:e6:b0:d1:63:24:
20:fd:d8:3d:52:de:05:16:a9:23:71:dd:69:ce:1a:
a3:6d:c7:7f:b9:46:33:0d:c5:f3:4f:38:15:8d:55:
08:de:25:6b:a1:d8:f7:11:67:03:03:63:fe:94:9f:
b8:d5:81:3c:d7:93:7a:87:02:d0:4e:cc:99:2f:db:
5a:7d:2d:31:2b:cb:06:b9:69:a6:33:b5:ae:eb:ea:
bf:ba:00:2c:7d:c4:14:98:48:a7:f8:c5:75:41:45:
5c:63:3d:e9:66:cf:0d:1b:f2:55:82:5b:b2:c0:24:
3c:00:7b:69:ee:93:ca:f4:96:ff:ef:1d:39:c5:0c:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:51:96:8D:01:92:9D:27:2A:84:36:5F:1D:AC:C8:19:FF:0F:C5
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/WeRRlo0Bkp0nKoQ2Xx2syBn_D8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.238.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f2:9a:7a:be:98:ab:e8:2e:6b:c1:01:4f:fc:08:50:f1:1c:
de:3a:de:a5:29:02:b8:41:02:8c:1f:9a:19:a5:64:68:a8:1b:
1a:bc:e6:93:b0:a3:7d:30:af:13:03:1f:bb:46:c7:86:bd:da:
b9:ea:41:12:9f:f5:5f:1a:11:7f:60:1a:6d:f5:61:ca:cb:a0:
5b:75:9e:e5:e4:bf:b8:98:c5:63:ed:d1:54:25:b0:f7:24:7c:
7c:c5:9a:fb:e5:93:b9:c3:f2:6c:7e:6a:d5:ca:13:da:5d:8e:
93:64:6e:7b:7b:c0:88:42:74:eb:a6:45:13:39:e5:9e:79:4c:
18:ac:b0:62:c2:9f:e9:a3:b9:94:a5:ca:1d:59:e2:f6:09:3d:
fe:a6:fa:db:0c:70:ea:93:ee:48:49:b9:aa:2e:3e:67:d4:1a:
09:c6:52:a4:ad:67:40:17:20:1e:20:ef:03:ed:b7:9d:c2:72:
0f:47:2e:31:6c:79:46:65:49:f3:1f:11:f8:c7:93:3c:33:25:
aa:21:18:7b:35:51:2e:cd:22:a4:a2:9a:92:69:b8:3f:82:42:
18:18:98:b2:05:00:a1:8c:92:44:7e:ab:50:a9:56:e8:6b:30:
db:0c:5c:93:2a:6b:0d:9a:9d:f4:94:a2:8e:53:ea:3b:fd:f4:
c0:bd:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org