Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa
File: W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa (raw, json)
Hash identifier: 9BnRcxAYm2AkNxkgWMrSAfffgQHqNEdbttkL/R648QU=
Subject key identifier: 5B:52:E3:56:A2:A8:08:F0:94:71:82:2A:E8:C8:B9:5B:05:71:D4:5C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BED29330FB5CBAF2EF2F3E2D858A9DD71
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa
Signing time: Mon 20 Nov 2023 14:36:22 +0000
ROA not before: Mon 20 Nov 2023 14:36:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61218
IP address blocks: 31.42.183.0/24 maxlen: 24
2a0e:97c0:4b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 24 Dec 2023 11:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:29:33:0f:b5:cb:af:2e:f2:f3:e2:d8:58:a9:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 20 14:36:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b52e356a2a808f09471822ae8c8b95b0571d45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:0f:b7:8e:99:82:b0:76:34:c4:b8:b7:06:
28:69:7f:9c:75:f0:d3:a6:47:d6:1c:d7:6f:88:84:
07:52:67:2b:24:74:51:01:cf:17:cf:93:75:ab:cf:
24:b7:3e:bd:19:58:9d:6e:43:e2:e8:ad:4c:ca:7b:
a9:d3:b2:7b:1e:2b:ec:4a:ca:a7:72:ef:2b:71:e1:
ef:bf:9b:c3:d6:97:34:d3:dd:e2:e8:0b:65:1c:13:
ab:c1:8a:bb:84:c4:67:f1:62:71:fb:9d:29:d4:63:
1d:e6:c0:4e:14:a9:78:ae:2a:4b:17:a6:7e:f5:51:
88:49:a4:4a:45:31:42:a1:80:58:b2:df:f5:e6:8d:
41:af:8b:3a:b0:4b:54:18:57:81:89:18:95:7c:32:
70:25:dc:f7:3f:72:7f:c5:98:6a:98:ba:34:12:3a:
00:11:21:bb:8c:3f:56:85:8f:a7:01:18:c1:0f:6c:
85:ec:9c:18:e1:3a:f4:68:7d:b8:a1:56:7d:98:b3:
d8:d9:64:af:54:71:23:86:7d:68:59:cf:ab:07:08:
48:f1:13:5e:cf:1f:6a:47:b8:29:7d:08:eb:89:d6:
d6:31:b6:94:ea:d9:96:63:1a:f5:b7:be:79:3c:0a:
d7:81:8c:c2:ac:02:1a:7c:c0:0f:68:0c:a6:00:fc:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:E3:56:A2:A8:08:F0:94:71:82:2A:E8:C8:B9:5B:05:71:D4:5C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
IPv6:
2a0e:97c0:4b00::/40
Signature Algorithm: sha256WithRSAEncryption
10:77:f1:8f:bb:b2:fe:64:f7:50:35:62:98:52:80:9d:ba:97:
bc:18:21:5b:1f:2a:99:8e:cf:e0:4f:67:38:ee:55:95:7a:6a:
96:13:01:70:ae:22:66:e5:fa:33:d8:38:14:44:d4:34:64:3b:
e8:90:07:1a:40:1d:18:b4:b1:2a:f6:37:33:53:47:03:61:1f:
67:00:96:44:83:bd:47:2c:ba:17:a1:2e:2d:71:8a:b1:58:a5:
e6:cb:be:16:09:e2:c6:b2:a6:4a:d6:b3:31:5c:8c:90:ae:aa:
12:18:53:e1:f3:29:6a:c9:4e:cf:d9:8d:90:f7:d3:34:82:dc:
83:1d:84:4a:f4:02:67:68:fd:1d:f6:ee:05:ce:c1:89:b7:5f:
6a:b1:06:eb:48:a1:09:2f:2e:e0:5b:a0:51:1e:d7:c6:c9:26:
48:fa:c0:b9:82:b5:30:c7:94:cc:e7:39:71:21:bb:db:ff:ae:
38:21:1b:dc:99:50:c0:c4:28:c8:c1:6f:2b:d8:60:35:63:5f:
d8:4e:b7:d3:51:b3:e5:d5:7b:ee:c4:72:9e:ce:f9:f6:88:dc:
0a:d3:c7:b2:65:be:d7:ee:95:55:b5:7d:29:f4:1a:2e:a1:76:
4e:22:4f:76:96:6b:33:17:24:6c:01:4c:58:ba:11:a5:53:8c:
8c:85:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org