Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WSX6Nkz9C7WLYdd6JiSQfUn1jIg.roa
File: WSX6Nkz9C7WLYdd6JiSQfUn1jIg.roa (raw, json)
Hash identifier: 3csJqg4dIcjjJ2CLx9deUQvEbiV4pr80pR6MK/zfT+M=
Subject key identifier: 59:25:FA:36:4C:FD:0B:B5:8B:61:D7:7A:26:24:90:7D:49:F5:8C:88
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01865B8D6100189846F7E71AF468DDC7DD0A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WSX6Nkz9C7WLYdd6JiSQfUn1jIg.roa
Signing time: Thu 16 Feb 2023 18:47:17 +0000
ROA not before: Thu 16 Feb 2023 18:47:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32097
IP address blocks: 194.28.128.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Mar 2023 12:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:8d:61:00:18:98:46:f7:e7:1a:f4:68:dd:c7:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 16 18:47:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5925fa364cfd0bb58b61d77a2624907d49f58c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:29:36:e8:bc:56:a9:75:84:a8:08:a4:25:
39:3a:9d:5f:1a:43:e8:a1:90:03:0f:09:dc:fb:13:
5c:89:7a:8a:0c:91:6a:64:1e:27:49:f7:cd:4a:4a:
ae:2f:c4:4b:63:59:02:12:ba:bc:7c:27:b7:b5:ae:
22:96:1b:ac:66:b5:3d:e2:0f:9f:eb:2f:7d:76:55:
2a:42:14:ca:cc:c6:24:9c:68:9c:1e:0e:a9:54:0d:
2e:34:da:39:75:92:39:29:e8:04:82:88:9f:7b:ff:
c8:c8:0f:f3:6f:31:e7:4b:8c:4d:5f:d0:22:0c:0b:
dd:b5:41:fd:8e:d1:e2:f4:51:73:4a:4e:b3:68:2f:
f9:a4:0a:59:4e:2f:da:7e:8b:f7:27:91:06:2e:45:
64:dc:b3:2d:82:43:a5:2a:5e:87:63:1e:d0:3f:3f:
77:74:c0:dc:1e:d6:de:1b:ad:82:96:1e:4e:f8:d2:
d0:85:cf:82:b3:96:86:52:f2:03:31:a8:e2:88:77:
04:3c:96:92:96:25:29:2e:3d:f7:52:b9:e1:2b:b7:
09:6b:ea:35:91:43:b0:84:ea:57:b7:19:cb:87:71:
21:1b:d9:f6:e4:ce:7f:4a:c6:c9:be:6e:b6:2c:2b:
c3:5d:27:77:ae:65:91:d6:78:01:69:80:f2:34:6e:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:FA:36:4C:FD:0B:B5:8B:61:D7:7A:26:24:90:7D:49:F5:8C:88
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WSX6Nkz9C7WLYdd6JiSQfUn1jIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.134.0/24
194.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9c:d8:0d:8d:de:0c:da:56:4d:4e:d0:a9:ab:d3:7c:3c:01:
b7:da:6a:41:0e:62:0c:00:fc:84:2d:45:de:14:a1:fa:1c:f2:
c2:9e:64:46:5a:e2:88:49:00:bc:5b:26:0a:0b:fa:ca:d3:86:
77:e4:95:28:a9:ec:92:8a:c6:2b:06:a1:1e:87:13:b1:31:b5:
a2:46:d5:e5:0f:6c:5b:c1:aa:21:87:72:00:51:73:12:87:ee:
d6:47:7d:97:1f:19:aa:ea:cb:5d:e2:e2:93:d6:0b:03:ce:21:
5a:da:51:ab:57:0b:eb:e0:5e:fb:34:89:11:ea:cb:c5:97:2b:
2d:3f:3b:c7:80:32:90:b2:55:00:f4:28:d3:a4:3a:5e:79:ff:
94:9c:e5:e7:76:e6:88:03:e1:b8:3c:ba:79:88:27:2a:19:55:
a5:e0:00:b0:98:08:15:73:79:76:5e:a9:2a:3b:50:68:c1:81:
a2:cf:f2:89:f3:4b:ad:02:fc:e4:91:62:fe:24:f2:28:78:73:
e8:f8:87:e5:d2:e2:72:c3:70:15:e2:0b:b4:68:a7:81:0b:38:
73:1e:7f:2d:d8:e2:b6:e6:5c:fb:6f:1b:47:47:57:a6:6f:42:
d6:85:92:b5:81:52:50:df:bc:78:a7:64:56:ba:1c:92:a4:52:
cc:fa:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org