Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/wL71BerbCvVwlhPbcw93B57sgtk.roa
File: wL71BerbCvVwlhPbcw93B57sgtk.roa (raw, json)
Hash identifier: dicygp8jrlIQ4RlWQ6b2TKz0fVVPv9Fk2AIfed+mleU=
Subject key identifier: C0:BE:F5:05:EA:DB:0A:F5:70:96:13:DB:73:0F:77:07:9E:EC:82:D9
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 018C64257794E268F16A0696470C3A711EBD
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/wL71BerbCvVwlhPbcw93B57sgtk.roa
Signing time: Wed 13 Dec 2023 17:07:06 +0000
ROA not before: Wed 13 Dec 2023 17:07:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 130.180.224.0/22 maxlen: 22
130.180.240.0/21 maxlen: 21
130.180.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Dec 2023 18:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:25:77:94:e2:68:f1:6a:06:96:47:0c:3a:71:1e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Dec 13 17:07:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0bef505eadb0af5709613db730f77079eec82d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:1e:ab:50:e0:8b:8a:ec:f0:3d:f8:0d:87:
8b:d2:c0:d9:b9:41:03:09:cc:3c:c5:1e:2e:03:74:
29:4a:bc:a9:6c:79:80:86:4c:45:75:e9:5e:d6:3b:
db:ed:43:0b:74:9e:5f:83:1b:b8:53:9e:2b:fc:b5:
71:df:1f:ab:0f:94:17:94:0c:c5:0f:43:35:9e:c1:
13:5f:c6:3b:b7:3b:61:0a:30:49:11:e6:3e:bc:72:
1e:30:3d:c5:39:71:f3:7e:41:72:c2:11:b4:f8:89:
cd:3a:03:d8:e2:93:4e:41:4f:5f:5d:8c:b8:62:9a:
30:74:14:77:b8:f6:f9:ee:b6:c8:f4:bd:24:78:49:
fb:d3:b4:ec:f5:0f:a1:7e:6c:50:cf:e4:e2:7e:f2:
56:f0:91:8e:72:00:85:1c:20:62:7e:d1:37:4f:ac:
23:60:a7:87:d9:9e:b6:f2:27:be:30:a4:59:17:9b:
c7:d9:0a:8d:54:f6:c7:9c:4a:87:1d:b0:88:df:21:
bc:c5:47:cc:37:2a:d0:60:f0:64:df:c3:bb:d5:3d:
5f:d2:ee:e8:38:8c:a5:09:29:c1:57:4c:0f:32:14:
5f:35:9d:66:dc:e3:d6:3b:71:cc:e0:a9:a0:67:f4:
6c:cc:28:7b:72:23:7d:15:31:26:f8:c9:9c:15:ba:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:F5:05:EA:DB:0A:F5:70:96:13:DB:73:0F:77:07:9E:EC:82:D9
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/wL71BerbCvVwlhPbcw93B57sgtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.180.224.0/22
130.180.240.0-130.180.251.255
Signature Algorithm: sha256WithRSAEncryption
89:b3:b1:8a:c6:cf:92:5c:26:f5:0b:2e:51:58:1a:ad:ba:e3:
f2:23:5f:47:f5:a5:91:cb:be:51:fc:43:4b:3a:dd:8e:93:d1:
87:8b:59:47:52:a0:a6:2d:82:9e:8d:c5:34:74:c4:7b:93:71:
2c:10:30:ab:fc:bc:06:97:9c:50:eb:2e:fd:17:4f:87:f5:48:
6a:26:ab:c9:4a:e7:45:07:ee:30:73:75:ba:70:5e:5d:cb:54:
79:9f:4b:c1:4e:6f:a5:dc:a7:db:a1:c1:18:1e:f6:49:89:bb:
bd:d6:8a:ae:41:d7:98:30:bd:0b:a5:93:ad:8c:c8:a4:7e:c6:
b8:65:74:78:59:b0:a5:e2:7c:4b:56:c8:a4:5d:8b:d4:f9:6d:
74:e9:09:8a:a4:30:f8:45:60:71:23:08:ae:bd:31:4c:21:32:
9d:a4:7d:d0:d0:3e:05:09:38:a7:6b:4c:b1:9e:c5:36:78:d3:
d3:8c:98:1a:7c:46:4a:29:68:68:49:66:9c:4e:2d:f1:42:5b:
7e:3d:8b:85:89:db:1b:63:2f:4d:3a:f1:18:62:2f:2c:e4:2f:
86:18:8b:8c:0f:5a:62:19:6c:c7:86:1d:0c:5e:2d:31:f6:a0:
51:26:7b:4c:22:8d:43:3d:d1:3b:6a:16:6f:81:f7:74:0e:a0:
4d:c3:b9:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:31 2024 by rpki-client on console-ams.rpki-client.org