Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/W2-XJasWAEIfef6AH4otlZGgGbs.roa
File: W2-XJasWAEIfef6AH4otlZGgGbs.roa (raw, json)
Hash identifier: th/NTVFWQLxIZQV5CHzioOmPnUnas27BGoMTSPtp3GI=
Subject key identifier: 5B:6F:97:25:AB:16:00:42:1F:79:FE:80:1F:8A:2D:95:91:A0:19:BB
Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial: 0185723A0BFA3DD200A7EDBA0B3D6AEE367D
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/W2-XJasWAEIfef6AH4otlZGgGbs.roa
Signing time: Mon 02 Jan 2023 11:24:44 +0000
ROA not before: Mon 02 Jan 2023 11:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5610
IP address blocks: 91.232.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:0b:fa:3d:d2:00:a7:ed:ba:0b:3d:6a:ee:36:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Validity
Not Before: Jan 2 11:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b6f9725ab1600421f79fe801f8a2d9591a019bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:2d:0b:19:74:a3:c6:df:ee:04:ef:08:8a:
41:be:c5:cc:13:83:3c:79:af:25:92:ce:91:56:8a:
40:7f:37:08:90:0a:ab:91:0f:56:0c:98:c9:25:73:
80:e0:61:2d:dd:8f:26:28:69:65:da:f2:50:66:30:
a4:ea:bd:28:65:ed:5d:26:e6:6c:06:b8:a9:03:ab:
48:05:2e:43:89:2e:96:53:75:6c:63:fe:cf:94:b3:
f4:1d:a5:a5:1f:ec:63:0f:80:53:5e:a6:68:ca:53:
5e:29:e8:29:61:c3:8a:c7:62:40:24:af:fc:31:53:
46:72:75:2b:34:00:fa:e3:e7:30:57:98:f8:f8:38:
4e:6e:d1:ad:67:d9:d6:af:32:2f:f0:62:d9:ee:77:
78:ea:19:f2:1e:d8:70:32:26:79:89:d6:d5:9a:fd:
2f:92:63:55:3e:3d:b9:e0:53:e2:88:ab:2b:2c:68:
8e:56:ee:ec:43:6c:9d:d7:1c:72:0b:77:f6:2d:c6:
94:a4:39:df:c1:98:0a:a7:ca:e9:11:96:b5:f0:6e:
d9:6a:87:de:f8:6d:b3:f5:46:06:54:ad:ab:45:64:
76:e5:ec:e0:9b:0c:00:68:60:ad:0c:8b:2d:67:25:
14:fd:ba:5e:b4:a8:97:9f:e1:56:89:39:2d:11:8e:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:97:25:AB:16:00:42:1F:79:FE:80:1F:8A:2D:95:91:A0:19:BB
X509v3 Authority Key Identifier:
keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/W2-XJasWAEIfef6AH4otlZGgGbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:56:02:ae:26:e4:4f:9c:e5:26:eb:0c:56:3a:73:db:cb:13:
a7:38:82:8f:4f:ca:ac:2b:f8:5c:11:67:2f:81:7c:3d:8e:65:
05:e8:a0:a2:8a:d0:7c:48:5a:24:fa:9d:58:6c:c4:6f:4a:ad:
a1:39:31:47:43:af:2a:70:e0:9d:9c:0a:a9:38:bd:89:67:ca:
7b:d9:d0:68:d4:5b:a4:52:b4:fa:7c:72:e3:1f:71:b6:57:db:
9a:d7:a4:ad:7b:e3:17:aa:20:1f:ef:cd:6d:0d:52:4f:14:94:
58:92:e4:52:d7:de:69:5f:1b:89:18:10:2d:9c:ca:73:dd:de:
1d:47:0c:01:d8:5b:83:1c:ae:2a:e7:86:bd:cb:2d:c8:0c:91:
24:af:78:49:33:49:e7:f2:04:9b:df:b7:3e:7d:05:30:c1:2c:
54:9c:60:e1:c9:f5:0c:3c:84:60:cb:02:dc:b5:3e:cb:f1:31:
25:62:e1:3a:9c:92:3e:aa:8d:e8:13:7f:6e:ff:30:17:ff:ab:
01:e3:08:88:f1:b1:85:c3:86:b1:ee:e5:2e:79:90:1d:d4:5d:
0d:e5:3e:1d:2c:61:97:63:a4:4f:57:72:29:1e:e8:43:af:87:
2b:a3:d9:12:30:78:dd:c3:ec:0f:37:8a:c6:ef:ed:5d:87:7d:
d5:b4:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org