Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/w4I7XuivCE4PZbamPQ-o2MzfJr4.roa
File: w4I7XuivCE4PZbamPQ-o2MzfJr4.roa (raw, json)
Hash identifier: Fgnn0Q+4++zuGqt2PaY0JKzU3ORhQ45wsDvq5qp6y88=
Subject key identifier: C3:82:3B:5E:E8:AF:08:4E:0F:65:B6:A6:3D:0F:A8:D8:CC:DF:26:BE
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 018B1ABC166A1BB409F45358B2DF08ED3099
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/w4I7XuivCE4PZbamPQ-o2MzfJr4.roa
Signing time: Tue 10 Oct 2023 17:56:55 +0000
ROA not before: Tue 10 Oct 2023 17:56:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8814
IP address blocks: 158.181.44.0/22 maxlen: 22
158.181.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 27 Oct 2023 23:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:bc:16:6a:1b:b4:09:f4:53:58:b2:df:08:ed:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Oct 10 17:56:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3823b5ee8af084e0f65b6a63d0fa8d8ccdf26be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:6b:95:3a:c8:89:55:b8:d4:d5:46:7c:16:
0f:10:c1:41:f2:b3:d4:c4:c3:92:a0:b4:42:de:60:
94:f9:ec:83:c1:10:46:f1:f1:19:1c:9d:99:77:4f:
cd:b9:21:57:03:1d:79:63:78:fd:8d:7d:58:dd:be:
9f:ae:4f:5f:70:58:e0:27:3c:dc:d3:02:65:50:96:
16:98:4e:40:74:12:bd:83:fd:23:a1:92:e8:12:23:
22:05:d5:5c:d1:33:c4:b5:5f:42:ba:df:5c:57:87:
7c:e1:f4:64:9e:4f:7f:3f:b2:65:ae:3a:fe:e1:d3:
15:9d:2f:3b:b8:eb:b8:a2:61:ec:4b:a0:58:c6:fe:
07:ad:de:5e:27:81:e3:64:05:09:ee:58:fb:f3:19:
d8:8d:5e:a9:e2:51:06:7f:7c:1d:90:e3:3c:03:aa:
fc:8d:1b:ed:67:4a:3b:1c:71:f9:63:eb:be:ef:42:
cf:94:c3:f3:9d:7c:1d:c7:03:13:5e:84:3f:19:4c:
d9:fa:3f:b6:be:a3:a4:0b:a3:ed:7e:99:e9:58:70:
9f:96:9c:6f:98:1e:41:66:cf:14:35:d6:58:09:c1:
4d:e8:e0:35:7d:96:c7:f0:95:c9:78:ae:08:6a:35:
51:91:bb:48:1c:84:16:87:85:6f:1b:25:99:29:5f:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:82:3B:5E:E8:AF:08:4E:0F:65:B6:A6:3D:0F:A8:D8:CC:DF:26:BE
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/w4I7XuivCE4PZbamPQ-o2MzfJr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.181.40.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:b7:47:8e:c1:82:d7:2a:d6:a7:5f:13:8d:d1:be:f6:a8:4b:
c1:ef:9d:9a:39:5c:d3:95:22:f5:85:0b:23:c0:51:b4:c0:68:
d5:dc:95:87:52:02:d0:c8:bc:3c:4d:6f:f6:ab:d8:97:7d:35:
85:01:fd:02:4b:f6:88:fc:d3:6f:7b:86:a4:88:c5:3c:0f:5d:
ce:a0:96:6f:a1:f6:08:be:ab:14:81:f2:fb:6d:c0:67:2c:05:
46:69:d7:23:16:dd:3f:2e:ae:67:2e:85:1c:05:58:57:01:3a:
18:51:54:6e:79:58:aa:e4:ec:38:d8:55:8c:76:55:be:7b:31:
cc:39:c9:36:0a:c7:cb:44:25:99:2d:89:b3:3b:0b:52:a5:a4:
7f:d0:80:ef:c2:b1:ff:90:9f:47:02:83:d2:4d:8e:d1:63:df:
56:22:8b:a2:8e:fe:b4:1b:5d:bb:2a:49:c8:92:5d:88:72:0a:
8a:ca:8e:40:4b:4d:cd:14:7f:8e:5a:ca:67:61:ce:ad:b4:18:
a9:0c:bd:96:54:ec:1b:d4:15:b5:64:00:30:03:a2:77:d9:1f:
09:df:47:25:62:19:88:d9:f8:12:b4:c3:c4:01:5c:38:cc:10:
92:e9:a5:8c:2d:a4:ed:c0:a8:4f:bd:fc:23:70:75:9e:ee:33:
91:a9:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:51 2024 by rpki-client on console-ams.rpki-client.org