Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/wf9J5pCAQNHzqkV5fs3mL7AAlOU.roa
File: wf9J5pCAQNHzqkV5fs3mL7AAlOU.roa (raw, json)
Hash identifier: A1Fa1opN1UljmiqGIY6LbtpvuTRvCwFc9v8eI0Y8qxs=
Subject key identifier: C1:FF:49:E6:90:80:40:D1:F3:AA:45:79:7E:CD:E6:2F:B0:00:94:E5
Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial: 0186276D744A1420ADEB14D721C60F6E0498
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/wf9J5pCAQNHzqkV5fs3mL7AAlOU.roa
Signing time: Mon 06 Feb 2023 15:52:09 +0000
ROA not before: Mon 06 Feb 2023 15:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 185.137.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 22:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:6d:74:4a:14:20:ad:eb:14:d7:21:c6:0f:6e:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Validity
Not Before: Feb 6 15:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ff49e6908040d1f3aa45797ecde62fb00094e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:4c:c2:13:8d:c2:bd:1a:b9:97:5b:b1:4a:
67:85:57:46:73:49:9a:a5:b3:98:56:67:77:d3:12:
25:28:01:e6:8b:bd:89:2d:c8:0b:83:29:f7:74:ae:
cf:45:a3:1c:1f:d9:f8:7c:12:40:3f:cc:13:ad:55:
c6:32:7e:a3:33:2e:18:d2:cb:89:2f:c8:0d:11:bf:
91:38:a7:53:fb:70:78:a2:e9:89:4c:bb:0a:c0:ae:
b7:54:1b:85:87:98:d6:40:b5:54:44:3e:ea:7c:5e:
d4:c8:61:22:09:82:ca:23:f5:5e:32:df:c6:ef:53:
1e:8c:4e:0c:03:86:4a:fa:84:ee:6a:b3:77:fa:c0:
2d:e7:46:89:4d:fd:b8:d3:40:3d:f8:ab:97:8a:a1:
aa:83:1c:58:f1:e5:76:79:be:04:37:5c:3e:3e:cd:
b8:87:bf:4a:f7:f5:5b:3c:4b:03:46:7f:e6:68:ef:
ec:a4:36:e1:9a:f1:0e:18:20:41:6c:63:69:12:62:
a4:68:c9:8a:56:ac:da:49:0f:d4:68:5f:ac:a7:39:
2c:22:71:b2:30:e0:ef:fb:5f:84:3f:34:ff:1f:56:
f0:83:3c:5a:65:f9:b0:c7:ef:7f:f9:95:78:5c:94:
7e:ea:b0:91:3b:a3:b6:36:03:a4:64:49:c1:2f:dd:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FF:49:E6:90:80:40:D1:F3:AA:45:79:7E:CD:E6:2F:B0:00:94:E5
X509v3 Authority Key Identifier:
keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/wf9J5pCAQNHzqkV5fs3mL7AAlOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:87:ae:62:f6:04:e7:d5:a2:42:84:e8:df:47:2c:62:1d:af:
d0:a4:20:fd:97:0a:44:53:27:38:96:55:5d:96:ba:f9:95:3e:
03:03:19:65:49:4c:63:37:3f:ba:7a:93:44:42:a4:08:b5:70:
65:c5:80:16:a3:6f:c8:6b:f8:07:bc:43:cb:30:6c:e6:76:1a:
12:b5:f0:8a:82:56:43:ee:8e:bc:cd:1f:a8:33:9c:e7:d7:d1:
e0:98:ee:04:a7:22:b9:57:4a:e2:b7:4b:4d:30:80:58:cd:13:
31:89:f5:6f:28:59:28:43:08:cb:0e:d3:ee:dd:32:0b:75:3f:
8f:6d:55:5b:be:8a:ee:cf:d4:94:60:ec:7a:a5:2b:27:11:83:
b7:c5:db:35:3d:21:b3:7f:21:a0:e9:72:0c:7b:23:54:cd:ab:
21:cf:d4:80:ad:53:c9:67:a6:ed:a1:9d:4b:d5:44:0a:41:05:
61:5c:bb:bd:bb:1b:f1:bb:f9:cf:30:3f:00:24:bd:38:23:c6:
f6:c0:15:ed:17:04:c4:df:22:3b:7a:e4:73:6e:6a:8e:21:b7:
9f:d6:2d:09:18:db:fa:a2:d2:06:f6:8a:c9:fe:cf:08:60:9f:
d4:23:08:48:59:57:11:5e:aa:5f:c1:68:31:7b:7d:8f:9e:48:
61:bb:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:40 2024 by rpki-client on console-ams.rpki-client.org