Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/wr2X1UTJaSCuoTsPjZi16xDXEqU.roa
File: wr2X1UTJaSCuoTsPjZi16xDXEqU.roa (raw, json)
Hash identifier: XAUn3LDkHhDgGEyozOspy1e3IFSbth/CyKQZz9TQ9M8=
Subject key identifier: C2:BD:97:D5:44:C9:69:20:AE:A1:3B:0F:8D:98:B5:EB:10:D7:12:A5
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 018571B9F89F8DBD6799FAC271C9F08B220B
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/wr2X1UTJaSCuoTsPjZi16xDXEqU.roa
Signing time: Mon 02 Jan 2023 09:04:51 +0000
ROA not before: Mon 02 Jan 2023 09:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 91.229.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f8:9f:8d:bd:67:99:fa:c2:71:c9:f0:8b:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Jan 2 09:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2bd97d544c96920aea13b0f8d98b5eb10d712a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:2d:1b:24:b5:be:7d:86:26:47:ae:89:5d:
5b:6a:56:d7:8a:73:9d:96:ae:77:96:81:6d:db:7b:
06:0c:39:34:c2:a1:64:93:0e:25:9c:b7:8d:2b:24:
d7:c0:58:d4:da:6d:c2:77:47:67:0f:9f:d2:f7:5b:
42:10:9a:b0:01:86:61:64:5b:45:c8:ca:a6:ff:fe:
f8:9f:93:1d:2b:17:a5:f9:b6:c9:69:0b:53:db:5d:
ce:bc:31:cd:01:6f:21:71:3f:0d:60:bb:37:19:e9:
97:fe:8a:ed:1a:28:f8:57:68:23:5f:c8:e5:a8:8a:
46:61:7a:93:18:49:c0:02:aa:70:cc:11:11:c9:4d:
b6:2d:44:fc:30:c3:18:1b:fa:b8:e2:74:f8:77:0b:
05:22:a6:5a:e4:9c:f4:c2:75:62:c3:f6:19:38:54:
27:9c:cd:43:a5:52:f6:5e:88:d3:2a:8d:dc:21:6c:
39:68:03:b1:ff:bc:4e:1d:4c:6f:47:83:17:f7:f8:
d8:f4:63:f7:04:52:e4:8b:ca:70:c1:51:8b:15:84:
c4:7a:84:01:9c:aa:84:4b:10:a4:fd:2c:50:90:41:
62:c3:ff:15:a3:a2:c9:34:40:00:c1:93:de:27:94:
53:c0:96:25:b1:72:2d:a5:6b:53:9d:87:f0:a1:dc:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BD:97:D5:44:C9:69:20:AE:A1:3B:0F:8D:98:B5:EB:10:D7:12:A5
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/wr2X1UTJaSCuoTsPjZi16xDXEqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.58.0/24
Signature Algorithm: sha256WithRSAEncryption
41:58:c3:06:ed:57:52:21:b1:c2:1a:4b:2f:ea:1e:cf:8d:48:
81:9b:8f:f6:8e:43:d0:7a:9e:3b:e2:ca:22:12:8c:31:02:68:
79:42:32:ff:dd:9b:9f:8b:f5:ab:c9:f0:3f:1c:1f:08:39:0e:
c3:83:e8:87:7f:77:18:53:81:5c:97:3b:90:7e:93:ee:b5:bd:
5f:bf:91:3c:0d:2a:32:55:2f:85:e8:99:a4:87:fb:64:c3:3c:
27:77:4e:c9:b7:26:bf:50:0e:64:36:c1:3e:c3:53:42:bc:6d:
be:37:c5:42:85:f1:f6:25:3d:e7:fb:23:dc:fd:e8:8a:06:e8:
0e:4c:87:53:ce:69:0a:51:e0:60:b9:14:0f:78:c7:eb:c6:6e:
78:ff:0d:cb:39:55:6b:bf:f5:33:44:bb:38:ee:68:7e:73:19:
41:b6:6b:0e:8a:3b:0f:ed:a5:71:62:67:3f:ef:66:df:50:9e:
fa:7d:ff:8b:da:d1:68:08:73:94:91:d4:5d:a2:c5:c4:d0:04:
97:58:06:56:db:ef:68:cb:a8:ff:d8:aa:55:35:a0:19:d2:bd:
13:a8:c3:bf:40:02:ef:a5:5d:c4:ac:5a:9c:24:77:59:fa:82:
09:b3:50:da:1d:55:fc:f4:db:79:2b:ae:62:bb:08:c3:21:40:
98:8e:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org