Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/wJExk2o1UPvMch0MImsyYBugSfg.roa
File: wJExk2o1UPvMch0MImsyYBugSfg.roa (raw, json)
Hash identifier: cxCiQRlB5r9e34wQMy4JeG1/hTygAXE5Yfh0aEAEFXo=
Subject key identifier: C0:91:31:93:6A:35:50:FB:CC:72:1D:0C:22:6B:32:60:1B:A0:49:F8
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0185719E6A9A41260F628C016F0D89D31DA5
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/wJExk2o1UPvMch0MImsyYBugSfg.roa
Signing time: Mon 02 Jan 2023 08:34:45 +0000
ROA not before: Mon 02 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59828
IP address blocks: 185.70.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:6a:9a:41:26:0f:62:8c:01:6f:0d:89:d3:1d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 2 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c09131936a3550fbcc721d0c226b32601ba049f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:c8:82:c1:ed:87:b7:6e:dd:d7:27:dc:27:
88:b4:fc:4f:f9:57:2c:ae:ee:07:c8:99:2d:73:82:
13:1d:5e:8d:75:5e:ed:ed:0e:bd:07:a4:a8:8a:c9:
06:0e:b3:43:0e:62:4c:95:74:ec:ec:15:94:73:b0:
3f:a3:3e:81:9a:1f:e6:51:4a:9d:55:cc:90:98:4e:
d0:09:b6:e4:da:c3:43:55:91:da:16:75:56:28:43:
e1:b9:e4:f1:d4:49:05:fb:34:0a:00:31:79:3d:7b:
53:b7:9d:41:9f:ce:ec:af:fd:56:9d:1e:7e:af:77:
17:08:36:74:3b:2c:98:f5:cf:56:1d:64:d6:8c:19:
27:4e:13:d9:8e:fe:56:a2:31:a2:99:17:09:a7:fe:
e0:b8:0e:8a:1b:fe:a1:da:5c:48:15:56:9e:64:fd:
d5:5b:a1:2e:37:ad:75:34:2e:c0:e5:68:db:f6:99:
fc:c7:ad:53:e3:60:b9:0c:df:62:bd:c9:01:cf:b8:
5c:be:e0:70:cc:5d:67:6c:1c:21:2b:49:d0:ad:55:
15:9d:95:42:46:25:5f:d6:f0:37:cc:e8:dd:fe:bc:
57:f9:3b:07:08:e2:f3:76:41:ef:ba:d7:a5:88:14:
28:be:51:c1:c6:06:d6:35:9f:38:e9:8a:46:03:36:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:31:93:6A:35:50:FB:CC:72:1D:0C:22:6B:32:60:1B:A0:49:F8
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/wJExk2o1UPvMch0MImsyYBugSfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:20:94:09:01:b7:1f:fe:14:48:bc:23:6f:12:77:42:52:ad:
93:20:c8:16:ce:2b:11:6f:76:52:9f:22:df:09:80:bf:51:09:
1c:3e:70:2b:ba:a8:d4:db:3f:66:f5:53:e5:e0:26:16:5e:3a:
65:37:39:2f:8a:1d:34:54:03:14:fd:a9:0d:eb:24:5e:ca:33:
2f:55:88:d3:07:c2:6c:c1:4f:c1:24:e8:27:2f:7a:a5:6e:1f:
d7:3c:96:83:f9:8b:e8:a0:9c:89:71:ec:9b:f1:c2:30:39:1b:
86:77:36:9c:64:d6:47:6e:75:e2:cf:2c:b8:cd:96:54:92:b6:
af:0f:37:94:6d:fd:44:2d:ca:9e:89:97:6a:8f:5a:34:c1:8d:
5f:88:bd:3d:fc:01:ca:26:89:b6:eb:2a:ec:65:36:dd:67:1a:
03:d2:cb:dc:29:6c:6a:c6:ea:51:19:51:ae:c7:3d:11:f0:71:
5f:81:bb:04:5e:15:5c:3d:8a:65:84:3a:4f:71:29:d0:69:f2:
79:ea:0c:e7:78:ce:2b:fe:5f:c9:f6:4e:cd:e7:88:2c:71:3c:
45:45:c4:90:e0:26:89:6c:ed:13:a1:a0:cf:0e:8d:48:21:33:
65:8d:bb:80:25:24:e9:0a:ad:8b:4f:4e:83:5d:80:8c:62:31:
13:00:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:58 2024 by rpki-client on console-fra.rpki-client.org