Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/0wYjXAIqoADKpWY-9IDsRKsk57c.roa
File: 0wYjXAIqoADKpWY-9IDsRKsk57c.roa (raw, json)
Hash identifier: TrZMjvf/dp1A6CwhWaQh4C6x4sJwCUiaLyTg7id9PG0=
Subject key identifier: D3:06:23:5C:02:2A:A0:00:CA:A5:66:3E:F4:80:EC:44:AB:24:E7:B7
Certificate issuer: /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial: 018D00D7D33FE65C2D0CAF468FDF24080915
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/0wYjXAIqoADKpWY-9IDsRKsk57c.roa
Signing time: Sat 13 Jan 2024 03:22:40 +0000
ROA not before: Sat 13 Jan 2024 03:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199334
IP address blocks: 159.255.146.0/24 maxlen: 24
185.176.132.0/24 maxlen: 24
2a13:c680::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Mar 2024 02:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:00:d7:d3:3f:e6:5c:2d:0c:af:46:8f:df:24:08:09:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
Validity
Not Before: Jan 13 03:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d306235c022aa000caa5663ef480ec44ab24e7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:e0:c6:38:65:71:04:5b:50:f1:db:c6:0a:
82:55:45:54:e2:10:d1:97:36:5c:75:d5:3c:17:ec:
f7:40:21:19:7a:91:5e:bd:d7:79:5c:13:81:9b:8d:
87:17:84:37:30:41:dd:00:f4:6e:96:cc:64:6d:74:
85:f8:5c:ef:7f:85:d3:63:f1:e9:d1:9e:d5:c4:3d:
f7:25:9c:55:64:49:5c:09:96:b8:fe:d7:9f:00:03:
42:21:c1:cb:04:d0:2b:15:ad:be:c2:7c:90:19:49:
b1:43:42:ee:02:55:45:e0:19:4a:6e:7e:63:bf:5e:
f7:3b:b8:a1:6f:c7:e6:20:7f:77:96:3d:50:ee:e6:
46:0a:5c:b5:4b:b4:26:c3:91:ed:4a:40:d5:cf:5b:
ec:93:db:19:d0:f4:b6:c3:8a:88:4f:47:fe:9d:8d:
e0:a1:c1:4c:80:ce:e5:56:43:a5:0d:be:05:00:f0:
ed:30:af:8c:8d:03:e7:86:75:a3:f0:c5:c5:c8:43:
c4:95:bb:c5:29:f1:57:d7:04:41:59:f8:94:e1:80:
7c:bd:d4:df:53:bd:75:2b:a4:3f:59:b9:10:cf:c1:
85:58:db:87:c0:e1:a3:a2:ba:34:f6:0c:89:be:a8:
ee:2d:39:4c:ad:d4:a2:a2:5b:15:9e:ef:7e:bb:4b:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:23:5C:02:2A:A0:00:CA:A5:66:3E:F4:80:EC:44:AB:24:E7:B7
X509v3 Authority Key Identifier:
keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/0wYjXAIqoADKpWY-9IDsRKsk57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.146.0/24
185.176.132.0/24
IPv6:
2a13:c680::/29
Signature Algorithm: sha256WithRSAEncryption
35:f0:f7:0f:cd:83:1e:c4:0a:1a:78:ed:33:d8:bd:89:0c:4c:
de:5d:e0:5a:ba:a3:0c:f5:1e:2b:14:be:ef:39:94:ae:f0:4a:
df:f4:1d:36:c3:3d:ba:6f:f5:42:84:ee:e0:c7:00:f3:d0:3f:
17:3a:bc:6f:21:e6:fa:d9:56:ef:5f:61:fa:63:af:06:e8:4b:
33:46:61:04:cd:36:81:60:20:2e:7d:c2:67:65:fe:dd:2b:0d:
0e:11:a4:d7:d6:89:86:26:49:c8:2c:b9:84:e7:cd:59:28:9a:
18:d2:d3:e9:bc:3f:ef:1d:6e:89:46:a7:2f:91:f0:4a:53:8a:
6f:35:93:e9:3a:89:16:3e:fb:32:46:5d:23:4c:a6:7a:86:e3:
0e:33:5f:58:8a:37:88:e5:da:76:ef:ae:4c:61:15:6b:e5:82:
80:b2:ec:5d:b6:87:b4:2c:b0:ec:2d:85:50:98:48:a1:5f:9f:
e3:a0:c2:70:ef:d6:47:53:73:60:0b:50:1b:b7:73:96:15:ec:
da:4a:01:47:91:13:8a:71:19:49:ba:30:52:df:0e:e8:bb:47:
a1:4c:98:65:f0:0d:f4:e9:4b:57:c5:a2:90:68:6f:ac:ac:97:
ba:d8:15:e0:2c:71:d6:38:2e:5f:dc:25:fa:9c:8e:bd:b4:bc:
0e:7f:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 05:40:22 2024 by rpki-client on console-fra.rpki-client.org