Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/W1sjKIesurMXq-ov_V4PBm65z5w.roa
File: W1sjKIesurMXq-ov_V4PBm65z5w.roa (raw, json)
Hash identifier: 1JUVioUV4KGF0sY5ozJ1ApIpXagyjgbQ9JHApqx11TE=
Subject key identifier: 5B:5B:23:28:87:AC:BA:B3:17:AB:EA:2F:FD:5E:0F:06:6E:B9:CF:9C
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 0185BE9D9C378B4F0344CF4EA8A729FC4C14
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/W1sjKIesurMXq-ov_V4PBm65z5w.roa
Signing time: Tue 17 Jan 2023 07:24:38 +0000
ROA not before: Tue 17 Jan 2023 07:24:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36916
IP address blocks: 85.235.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:9d:9c:37:8b:4f:03:44:cf:4e:a8:a7:29:fc:4c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jan 17 07:24:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b5b232887acbab317abea2ffd5e0f066eb9cf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:43:cd:9c:74:11:01:cb:f3:32:02:fc:56:
2a:d0:17:b3:ab:99:d8:47:7b:dc:dd:ae:bc:a7:f3:
b4:05:60:5b:d8:49:2c:16:fb:66:87:d4:be:81:53:
59:f3:f4:fb:c9:5b:d7:b5:ee:23:cf:36:a9:2f:9f:
3c:cd:49:34:f4:cc:2d:b0:b1:5f:45:19:c8:51:7c:
7d:42:74:bd:b3:20:40:1d:33:2c:de:03:37:26:20:
6d:6e:b7:1e:e4:0f:68:08:16:a6:0b:fe:c7:86:6b:
f4:ae:c1:a0:f0:10:f4:a7:81:5e:d7:2a:9a:0a:49:
2c:ee:1c:1c:df:f0:8c:32:7d:0c:6d:3b:6c:6c:2b:
6b:1e:74:32:06:a9:2b:12:e4:6e:ae:2a:4a:5e:43:
51:7c:36:bb:11:aa:6e:27:8d:22:19:c4:fb:c1:fa:
f9:fe:33:18:3e:07:fd:2c:0e:31:09:47:a0:ba:e3:
2c:81:56:2a:13:bf:c1:a7:6d:71:40:86:4e:79:b9:
94:e8:b9:c5:35:b3:5c:23:73:ca:d0:c4:c2:02:23:
f7:7c:80:2e:f8:c7:c6:f8:70:5a:c3:2b:22:f8:04:
ca:8b:da:d6:4d:29:70:9d:50:49:9c:8e:7d:72:4b:
a0:a7:44:34:c4:02:b1:cd:34:4a:47:c7:d1:35:4e:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:23:28:87:AC:BA:B3:17:AB:EA:2F:FD:5E:0F:06:6E:B9:CF:9C
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/W1sjKIesurMXq-ov_V4PBm65z5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.76.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:58:fa:1c:a2:4f:55:a2:19:39:5f:7c:79:64:47:b7:2e:ae:
ee:12:bc:8d:31:e0:c1:1b:46:f6:4e:3e:32:cf:9b:25:1c:83:
71:00:d5:71:3a:2b:ea:7b:f3:64:6d:8c:da:bd:97:8a:f1:29:
05:80:9c:70:87:b4:85:3e:aa:c1:4c:b9:2a:cf:a4:b1:b7:b0:
9c:ba:45:56:a1:50:79:9e:9d:cc:d2:3f:52:e7:1b:71:89:3c:
ad:5e:f6:fd:b7:f6:08:e3:3c:3a:56:0b:77:b3:81:21:d4:68:
d9:b0:27:08:94:01:8c:f7:1b:30:74:ae:77:ae:85:15:fe:90:
c7:31:1c:68:ad:78:4a:67:0f:16:0b:8d:27:b0:64:e1:27:f4:
61:2f:25:88:21:6a:41:5b:a5:b5:be:01:ad:db:18:96:49:eb:
02:7a:9a:d6:75:60:73:28:24:55:15:e3:eb:f1:28:d2:4b:09:
25:48:23:72:02:a3:9a:65:69:88:b9:4f:64:41:9c:a2:2b:0c:
b6:b7:24:78:d3:87:bf:f2:4f:1c:0c:d9:19:a0:f3:a3:fa:67:
9c:8d:c5:7a:37:9f:fe:47:b4:70:71:7c:c1:4f:d3:79:6c:7a:
4f:14:f4:09:39:40:65:04:9f:5e:c5:9f:53:4a:73:ec:95:36:
fa:e5:7a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:11 2024 by rpki-client on console-ams.rpki-client.org