Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/WpDnzK_a0_vK58WmEAhoaPafgis.roa
File: WpDnzK_a0_vK58WmEAhoaPafgis.roa (raw, json)
Hash identifier: iE2fQ7R2zOgABs9Aw0gPKu7G/ywhOK4iqgeMX2JXq38=
Subject key identifier: 5A:90:E7:CC:AF:DA:D3:FB:CA:E7:C5:A6:10:08:68:68:F6:9F:82:2B
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 018573E87776BBA3604456BA35C6B9E1CBFE
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/WpDnzK_a0_vK58WmEAhoaPafgis.roa
Signing time: Mon 02 Jan 2023 19:14:52 +0000
ROA not before: Mon 02 Jan 2023 19:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204601
IP address blocks: 185.182.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:e8:77:76:bb:a3:60:44:56:ba:35:c6:b9:e1:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Jan 2 19:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a90e7ccafdad3fbcae7c5a610086868f69f822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:e6:6b:14:dc:e5:18:a5:49:06:1d:2b:cd:
10:b5:89:89:94:f3:94:8a:3a:4d:cb:57:d1:dc:1e:
2b:d6:ec:e6:4d:51:49:98:aa:08:e6:ef:67:c0:6e:
fb:64:11:5e:97:e1:ee:7a:f0:43:b1:1d:50:20:15:
b3:12:58:e7:cb:4d:dd:a8:72:3e:07:3c:cd:c5:5d:
a7:06:62:84:b4:34:fe:f5:77:b2:11:22:a0:88:66:
42:49:cf:20:17:ac:95:15:74:a8:a8:ef:e6:64:ff:
99:02:2b:7d:e6:44:90:f9:2a:20:07:18:31:6f:16:
e1:01:ce:0a:32:4b:08:ee:97:dd:12:6f:77:1d:7e:
09:de:7a:16:93:c3:4d:b6:a8:4d:74:1c:86:8b:20:
2c:31:6d:07:a0:c2:1a:c3:16:91:53:3d:eb:e6:32:
19:fb:4d:70:1a:7b:4d:cb:8d:3e:97:43:41:e2:aa:
98:e9:3f:6f:17:02:a4:28:d3:82:cb:ca:57:04:e2:
5d:8b:61:ae:0d:1e:68:74:f5:c8:01:99:c0:7a:86:
15:1c:b3:28:4a:20:14:1c:49:06:06:34:46:4e:39:
05:d5:b8:e7:59:37:27:fb:28:63:2a:0b:b7:da:68:
68:71:91:e9:09:6f:73:b7:86:1e:b4:d7:67:0d:d1:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:E7:CC:AF:DA:D3:FB:CA:E7:C5:A6:10:08:68:68:F6:9F:82:2B
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/WpDnzK_a0_vK58WmEAhoaPafgis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:62:4c:3c:ca:15:ff:10:84:34:fd:54:36:9a:06:f7:c7:e9:
ec:91:bb:e1:f3:ff:2b:ad:d0:30:9c:fe:63:83:4c:22:2b:3d:
57:02:1d:ef:3e:a1:39:c9:fa:58:2b:a8:f9:5f:d2:08:97:08:
e8:78:c8:fc:0b:e9:a5:ea:66:1e:6a:c4:58:7f:ea:4c:00:96:
c5:63:2c:53:19:f7:c2:57:e4:e1:4f:a9:5e:d8:c3:d0:fe:e3:
4c:f4:c8:56:a4:fc:78:d4:a2:5f:78:7a:22:25:3a:ed:01:9c:
1b:3a:f9:b3:9c:ef:13:64:27:db:c7:27:a2:13:8a:db:08:c2:
f4:77:29:1d:3f:8c:d4:25:bb:dc:d0:67:33:8b:cd:49:f4:b7:
4c:06:a3:03:cd:86:3f:31:cf:8e:0d:61:3e:da:8e:5c:ab:cb:
51:ce:f1:b5:35:d9:99:66:9a:d9:1e:3e:e2:61:5b:81:36:c3:
e8:d7:c8:0d:bc:61:eb:56:87:9f:31:9e:e9:fb:c2:10:c6:f7:
45:ac:14:e4:12:e1:22:88:bc:05:d3:7a:ec:f9:dd:3d:9d:74:
80:a5:5c:32:60:f1:23:98:cb:3e:72:68:da:2b:6e:ff:f4:b2:
99:29:6a:61:fb:17:08:c9:df:ed:6c:a2:98:c0:5c:d3:97:51:
78:88:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:32 2024 by rpki-client on console-ams.rpki-client.org