Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/wamtYnQXDlz-FvME2qYzuzfdUy0.roa
File: wamtYnQXDlz-FvME2qYzuzfdUy0.roa (raw, json)
Hash identifier: XixNB28I5dF03NOvRadvV0nzHQh0Ouu7q99M0C0C8w8=
Subject key identifier: C1:A9:AD:62:74:17:0E:5C:FE:16:F3:04:DA:A6:33:BB:37:DD:53:2D
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 01856FC26E01437EF06DA8A9C7A7A393888A
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/wamtYnQXDlz-FvME2qYzuzfdUy0.roa
Signing time: Sun 01 Jan 2023 23:54:51 +0000
ROA not before: Sun 01 Jan 2023 23:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 185.102.218.0/24 maxlen: 24
185.102.216.0/24 maxlen: 24
185.102.219.0/24 maxlen: 24
185.102.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:6e:01:43:7e:f0:6d:a8:a9:c7:a7:a3:93:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Jan 1 23:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1a9ad6274170e5cfe16f304daa633bb37dd532d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:a3:a9:50:18:17:f9:69:89:3f:0b:35:7b:
ae:99:de:b1:39:1b:4f:51:c8:cc:83:71:9c:dc:2b:
5c:67:3d:d0:34:d4:ae:10:8b:8f:56:c9:a5:ab:ad:
90:b6:8a:77:ad:f5:da:42:c1:70:a7:d0:32:d6:0a:
85:b4:03:39:60:da:f7:e0:4e:8e:e3:dd:32:ff:54:
0e:df:a9:b7:7a:23:6b:79:12:b7:d8:40:75:4c:f5:
cb:8f:db:0a:a5:0c:ad:7d:81:58:6b:1e:d1:61:75:
d5:2f:08:d2:e8:a7:b6:6a:05:74:4d:f1:a7:0f:41:
8f:9a:a7:34:89:2d:fe:40:6a:0c:9e:6d:10:94:4a:
e2:2b:44:cc:39:49:5e:99:54:7e:84:42:6c:9f:50:
83:3e:9d:91:d6:22:a8:a3:d3:d8:d0:b6:98:41:0d:
63:fd:fd:87:b6:17:07:5d:b8:9e:d4:f0:bd:19:99:
33:73:c5:d7:a1:02:d1:04:04:d0:20:b6:0f:be:d4:
4e:aa:55:67:20:c4:1f:af:95:83:0c:42:b9:02:24:
9f:6e:09:5b:78:a0:8c:c6:14:2e:e0:63:2f:0c:0c:
13:45:58:24:af:8b:be:86:5c:98:76:e7:06:ee:91:
fa:5e:2e:14:77:94:8e:85:66:fa:6b:0c:e7:0b:3c:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:AD:62:74:17:0E:5C:FE:16:F3:04:DA:A6:33:BB:37:DD:53:2D
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/wamtYnQXDlz-FvME2qYzuzfdUy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ad:9b:bc:b4:ed:94:9d:d1:88:89:ff:42:3c:c6:f4:ea:af:
36:c3:44:66:c7:99:a2:95:bb:c8:93:73:f4:c7:d5:a7:43:61:
3a:ee:52:e7:a0:4e:1b:f8:42:63:49:98:e1:97:99:6d:6a:b7:
b3:92:82:a0:67:49:ae:46:97:01:86:ec:0d:8f:ac:94:b5:c1:
8d:68:0d:c7:73:a4:2b:d1:6f:6c:85:91:96:40:35:d9:a8:5a:
a0:84:34:75:b0:61:ed:ad:68:b2:2f:7e:63:3a:6b:f1:f3:e8:
54:26:04:b7:4b:d9:c0:72:57:10:19:0a:07:c0:14:72:a6:9d:
a1:34:78:74:ef:4c:bd:64:ad:3b:ad:95:6e:cc:8c:b6:b7:76:
22:68:59:bc:83:b5:45:60:6b:fe:1d:9a:df:0d:3b:8f:e9:6c:
23:bf:72:28:94:54:9c:0e:6a:f6:19:04:a3:b0:df:ff:90:26:
4b:d7:68:9d:b4:2b:c1:9e:73:6c:b3:6d:b5:a6:16:c4:93:2b:
9e:e4:5c:ba:3e:78:aa:0e:05:7a:ca:f6:7a:07:c5:a2:a2:5d:
a4:e7:15:d6:2f:cc:50:2f:0d:98:d8:74:de:8b:6b:65:5c:e8:
8d:56:7e:11:c9:6f:1e:02:d9:f9:e2:7c:5f:25:43:27:ef:a6:
98:34:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:07 2024 by rpki-client on console-ams.rpki-client.org