Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ur_wk7FgQ0h3PA1t_e-KoOXADP0.roa
File: ur_wk7FgQ0h3PA1t_e-KoOXADP0.roa (raw, json)
Hash identifier: ZfxR1+/lL1LoYU0zYIuajNC0bLsytSRVXdd5rqkqdHA=
Subject key identifier: BA:BF:F0:93:B1:60:43:48:77:3C:0D:6D:FD:EF:8A:A0:E5:C0:0C:FD
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0187CCAA3CB0063A38FF21DA1A41A90F4C50
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ur_wk7FgQ0h3PA1t_e-KoOXADP0.roa
Signing time: Sat 29 Apr 2023 10:58:41 +0000
ROA not before: Sat 29 Apr 2023 10:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 2.189.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 12:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:aa:3c:b0:06:3a:38:ff:21:da:1a:41:a9:0f:4c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 29 10:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=babff093b1604348773c0d6dfdef8aa0e5c00cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:8c:ae:2a:ab:b6:06:12:ab:1f:23:c1:d8:
81:a0:4c:91:01:b7:72:50:1f:26:89:5d:e6:16:a0:
fa:60:57:5e:60:e6:fa:f0:0d:3d:62:c8:47:62:82:
84:7f:d3:86:f8:14:3b:28:3c:ec:c3:26:a7:6b:19:
55:8c:9d:9b:2c:39:59:00:01:e0:ab:08:4b:6a:9f:
32:b2:72:85:b3:4d:b0:07:c6:06:d9:a4:c5:01:a6:
58:7c:41:73:b0:f5:77:76:81:42:c3:ee:a3:6a:c9:
e2:14:5b:86:c5:23:d7:eb:49:9a:9c:7a:6f:ec:87:
07:fd:19:42:58:c2:ec:17:c3:2d:93:e0:49:94:df:
be:fc:4e:f5:a2:33:ef:d1:21:e6:83:da:31:b4:5e:
8e:4b:6a:21:42:80:df:d1:2f:21:fa:2a:2f:1c:0c:
b2:0f:59:94:74:f7:18:89:40:ee:c8:9d:09:b9:62:
ab:6e:26:8b:36:fd:f7:12:d3:49:7e:ff:02:e3:88:
1d:fb:85:5d:a1:40:2e:3e:12:83:09:3d:90:2a:c1:
01:10:4c:59:f1:62:b9:78:e2:24:6a:1c:94:f8:13:
38:19:58:8b:cf:4f:90:42:0c:bc:1b:0b:ee:3b:6e:
8e:ce:8d:37:c8:78:09:54:45:93:96:29:5e:bf:d3:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BF:F0:93:B1:60:43:48:77:3C:0D:6D:FD:EF:8A:A0:E5:C0:0C:FD
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ur_wk7FgQ0h3PA1t_e-KoOXADP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d6:bc:bf:cc:40:07:d6:ef:78:29:a6:5b:06:ea:2b:cc:f2:
d9:89:41:3b:25:d3:7f:8b:dc:70:ac:27:b3:2d:5f:b5:ab:81:
07:65:6b:3d:6d:79:d1:2c:d1:ac:d1:10:7a:78:3e:6b:aa:dc:
c5:3d:92:3c:05:f2:17:32:b3:7f:b5:dc:2d:c9:16:f0:d1:42:
b3:b3:ce:ae:3e:98:02:34:ef:9b:35:9f:5f:4e:7c:88:af:c2:
73:f0:b0:21:28:24:90:b4:dd:95:fa:83:44:2a:51:63:d9:b1:
c5:df:a5:15:da:5b:07:06:52:50:30:e4:06:44:c5:25:86:f4:
5f:2d:6e:4c:83:f1:e9:f5:e3:c2:ef:47:5b:f0:b8:72:3f:21:
3d:ae:4a:21:d6:a5:a8:53:0c:cf:97:a9:57:6f:f4:fb:5c:2d:
d6:71:fd:b6:b9:cf:34:d1:59:60:56:52:cd:d7:f0:4c:ad:3c:
4e:93:58:74:84:ed:7b:c2:7f:0c:c1:6f:73:42:7a:29:0d:9a:
3b:6d:ec:eb:3a:d9:84:79:13:7a:ac:80:9d:02:00:23:16:1c:
7d:6a:9b:87:5c:ec:90:49:38:bc:f9:c0:31:42:f0:ca:c4:c7:
72:a8:68:a7:dd:5a:c7:3a:aa:23:59:80:8c:2b:e1:04:89:97:
9e:d2:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org