Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/WF1Clp3PEpNX7-hLPKfb80YfyW0.roa
File: WF1Clp3PEpNX7-hLPKfb80YfyW0.roa (raw, json)
Hash identifier: iSsusJbD7ALkgjqgQW02O8VoCElKAfJMzMSi/FARPqg=
Subject key identifier: 58:5D:42:96:9D:CF:12:93:57:EF:E8:4B:3C:A7:DB:F3:46:1F:C9:6D
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 018AB1852EF75E19747224DF133EED14EBBB
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/WF1Clp3PEpNX7-hLPKfb80YfyW0.roa
Signing time: Wed 20 Sep 2023 07:36:50 +0000
ROA not before: Wed 20 Sep 2023 07:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208925
IP address blocks: 91.237.87.0/24 maxlen: 24
37.77.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:85:2e:f7:5e:19:74:72:24:df:13:3e:ed:14:eb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Sep 20 07:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=585d42969dcf129357efe84b3ca7dbf3461fc96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:85:99:67:63:36:55:99:10:89:9d:71:8d:
69:0f:83:66:63:47:ed:bb:a8:13:4b:db:77:1e:28:
76:21:44:e7:55:0d:07:7b:b7:ba:7e:02:92:95:39:
a4:ca:e2:e9:1b:9f:17:6e:91:58:48:aa:49:43:17:
7f:fa:75:29:3e:e3:78:96:89:d8:76:4c:77:3e:33:
2b:37:23:16:bc:13:6a:99:f6:64:10:a9:dd:fc:5e:
dc:5a:61:c8:07:ae:19:d8:c3:35:c3:05:f2:f7:6c:
e6:5b:81:84:67:4e:81:80:d2:a4:26:12:8b:7c:0f:
00:e4:bd:9e:55:d6:25:2a:93:ef:25:0a:3d:1e:08:
03:70:dc:60:cb:85:95:2f:0e:23:22:ac:3f:d2:c4:
0d:d0:8a:45:dc:8b:2e:e6:0b:bc:65:4d:07:94:76:
23:7f:40:9d:4e:d6:7c:80:0d:df:7e:f4:97:c0:83:
07:13:a9:1e:bf:4d:12:a9:93:d3:18:c3:02:61:1e:
2c:b5:6c:63:54:67:cc:7b:ae:cf:79:69:a1:30:8d:
b3:6d:0b:ca:ca:af:2c:e1:1e:e3:22:e2:4b:e4:34:
6c:6c:60:27:c6:e4:14:7a:96:54:73:9d:2c:e8:2b:
74:66:2e:b9:83:cb:38:f6:50:30:e8:53:f2:14:7a:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:42:96:9D:CF:12:93:57:EF:E8:4B:3C:A7:DB:F3:46:1F:C9:6D
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/WF1Clp3PEpNX7-hLPKfb80YfyW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.149.0/24
91.237.87.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a1:da:95:6f:b5:ec:1c:91:7e:e3:2c:62:37:68:e6:7c:48:
79:ca:b3:44:c4:3d:03:e3:db:ba:7c:d1:50:7a:f1:c8:f1:1e:
23:29:c7:bf:f3:cb:f3:b3:84:1a:b2:65:d0:48:e2:25:6e:4a:
53:7a:90:6d:70:c3:b6:54:1b:6d:23:74:48:ec:ba:a2:29:d4:
57:49:cd:fe:f9:04:dd:2a:92:df:c9:25:e2:4d:c2:bb:1b:3e:
26:20:ae:e7:ca:40:ac:f6:3d:15:d7:59:76:25:32:3b:a7:27:
34:47:3a:57:88:23:e6:cc:85:a1:30:3a:ac:e7:72:7b:3c:80:
b7:7c:b9:97:eb:80:9c:3e:81:c2:0b:95:40:06:02:9d:d7:b4:
d4:82:b6:22:da:2c:6f:e1:2a:ca:7f:83:40:72:ad:04:0e:87:
f7:21:2d:8a:51:2b:63:39:e2:ef:9a:fe:48:43:06:35:9b:36:
48:7c:ae:eb:c7:82:0d:cd:f2:a2:46:04:19:9f:16:a8:44:be:
fd:4c:e0:cb:78:96:36:2b:92:5f:65:35:ec:38:59:3f:6f:c2:
47:3d:1e:a5:14:1a:26:09:2f:4a:e4:6c:a1:21:07:92:9a:1d:
de:13:40:1e:19:23:4d:6e:59:6b:af:09:28:f3:b7:c6:cc:8e:
9a:ce:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:49 2024 by rpki-client on console-ams.rpki-client.org