Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WVQ0uy_tFjbm09Vc-HVJY0X6pUA.roa
File: WVQ0uy_tFjbm09Vc-HVJY0X6pUA.roa (raw, json)
Hash identifier: pR/j8hzJRiArYyv+vV9D7t9o1vEYMTOV5i+8Mr8h87I=
Subject key identifier: 59:54:34:BB:2F:ED:16:36:E6:D3:D5:5C:F8:75:49:63:45:FA:A5:40
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0186E956877189DF2CCA6B510BE6F4487730
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WVQ0uy_tFjbm09Vc-HVJY0X6pUA.roa
Signing time: Thu 16 Mar 2023 07:33:27 +0000
ROA not before: Thu 16 Mar 2023 07:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.243.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 04:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:56:87:71:89:df:2c:ca:6b:51:0b:e6:f4:48:77:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 16 07:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=595434bb2fed1636e6d3d55cf875496345faa540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:ed:1a:76:7f:20:7c:aa:20:16:db:78:c8:
c7:c8:51:af:ce:a8:eb:e0:76:be:37:ef:43:46:8a:
75:ef:ec:28:97:cc:90:0b:75:cd:3d:a6:c9:a3:67:
77:fb:64:13:d1:91:b5:95:a8:b4:a3:8d:a4:df:2e:
30:25:2c:26:89:4c:a7:0a:e9:51:b6:b0:ea:ba:3b:
7a:02:1c:66:25:68:99:0a:67:36:ce:b6:f5:cf:b2:
25:6c:a7:a0:ae:f0:79:b0:c0:21:a4:e9:bc:9c:e5:
bc:e3:af:83:b5:f5:69:43:49:cd:a2:18:fe:4a:71:
46:d6:52:29:19:e4:54:98:1d:75:2a:7c:94:57:2e:
c3:f7:1a:d3:59:53:71:e5:52:f6:63:e7:23:84:5b:
31:17:0e:86:ce:6d:91:1f:7e:fa:bc:83:89:92:06:
18:8d:1d:45:2d:1e:3b:f3:bb:ba:f8:7d:17:56:d7:
66:b7:92:93:e7:40:ac:f1:67:fb:a6:ec:67:ff:55:
34:2b:c9:b5:11:88:be:26:24:2a:1d:ff:27:4d:92:
c4:bd:d4:58:a4:dd:92:1f:b2:cb:0e:cf:1b:56:95:
a8:d9:3f:d6:6c:d2:8f:5e:77:bb:e3:62:41:fb:39:
53:ad:70:d3:d6:02:2b:b0:70:91:0b:1c:84:87:54:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:34:BB:2F:ED:16:36:E6:D3:D5:5C:F8:75:49:63:45:FA:A5:40
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WVQ0uy_tFjbm09Vc-HVJY0X6pUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.4.0/24
Signature Algorithm: sha256WithRSAEncryption
19:81:6c:8a:61:9a:f7:02:49:3e:6d:e2:ac:cc:67:8e:f0:66:
e8:24:ce:48:f6:8b:38:15:93:d7:a4:6c:e9:8f:ba:d1:08:79:
81:64:b8:d5:62:f4:de:65:9a:64:b0:20:4e:bb:f9:61:0c:3a:
9d:b0:0d:2b:9f:ea:a2:eb:1a:3c:a5:9a:cb:a6:2e:d3:c6:f8:
d7:f1:e9:5f:dc:ef:f5:6c:cf:ba:f9:89:49:fd:02:6e:ea:ff:
34:33:1b:bd:9f:c0:22:70:f3:82:81:a3:d9:2a:25:d5:3b:a5:
47:b6:4a:ac:01:cb:4b:46:0c:dc:50:2b:c7:74:3b:2a:9e:9b:
77:f4:17:b4:21:80:1e:66:db:d6:df:56:30:36:96:55:e8:a8:
85:61:9e:b2:b9:2e:32:f9:77:29:5a:4d:64:57:e6:ac:dc:4e:
19:4a:cb:fa:38:3b:68:83:c2:fe:cd:2d:cc:42:51:a1:d5:3e:
3e:32:cc:74:96:7c:84:6e:63:b8:57:45:ef:0f:ff:83:e3:9e:
d0:ca:4b:fc:e5:40:2d:8a:0f:6b:3e:7d:9a:de:85:b7:a1:88:
dd:b4:5d:82:2e:71:e2:06:19:33:27:ba:96:2a:dd:b8:27:56:
8e:a7:f9:b5:f3:e2:c5:f3:69:3d:92:fb:64:51:61:f7:cc:24:
a4:a8:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org