Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa
File: w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa (raw, json)
Hash identifier: QKEgaQJBon9XRElbeD9M667Gz+/02SHkuWdSoK4cCvI=
Subject key identifier: C3:E2:DF:3E:0E:9D:C1:A4:75:13:21:D0:04:CD:91:E8:FB:72:4C:2A
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01857303A321B5B83D673F697EBD42A413C5
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa
Signing time: Mon 02 Jan 2023 15:04:56 +0000
ROA not before: Mon 02 Jan 2023 15:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24971
IP address blocks: 193.169.160.0/23 maxlen: 23
2001:678:a50::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:a3:21:b5:b8:3d:67:3f:69:7e:bd:42:a4:13:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Jan 2 15:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e2df3e0e9dc1a4751321d004cd91e8fb724c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:4f:39:fc:8c:e7:33:cf:e2:db:54:d8:31:
6f:6d:01:7d:06:cd:eb:ef:f6:0a:f7:cc:82:3a:f6:
ee:0c:c2:56:08:79:f3:7a:e8:9f:d0:c0:13:f0:e0:
a6:4e:59:ad:d6:fd:d3:11:40:46:f9:85:6e:20:e4:
5e:7c:eb:2f:6f:06:e1:ef:e6:c5:08:2a:ad:e3:82:
9f:1c:a1:c6:26:89:ea:d8:db:9f:0c:87:3e:a2:6a:
8f:87:02:7a:2e:ae:46:6d:f0:d0:97:0e:2f:5d:f3:
d5:8e:cc:1d:c0:cf:72:9b:43:96:6e:66:c5:ce:91:
99:ba:ef:b4:4c:c8:dd:75:c5:a9:06:36:d6:9d:93:
30:72:4b:d1:85:71:f7:47:9f:6a:b7:60:05:7f:21:
8c:28:00:e4:b8:ba:fe:c2:1c:87:07:9a:40:78:b9:
c7:72:9b:e5:19:94:7f:fa:f3:59:bd:9d:57:68:5a:
be:ed:13:84:a3:df:83:5e:2d:62:da:fa:ef:88:8b:
c1:89:74:ae:ce:66:d7:bf:65:ec:fd:09:b9:bc:16:
9e:18:8e:68:d5:fe:52:21:5c:0a:48:1e:0d:1c:0b:
05:3f:9f:03:fb:35:3f:54:1f:ab:2a:34:46:45:e6:
a4:1a:5f:70:24:64:a5:a3:02:46:e7:e1:26:dd:6b:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:DF:3E:0E:9D:C1:A4:75:13:21:D0:04:CD:91:E8:FB:72:4C:2A
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.160.0/23
IPv6:
2001:678:a50::/48
Signature Algorithm: sha256WithRSAEncryption
a3:5f:5c:f0:b6:20:32:ce:ff:45:e6:6a:73:8d:e5:21:d6:e3:
7e:f4:35:0b:4e:31:59:40:46:0b:1d:5b:5a:4e:38:93:61:8e:
e0:d6:db:63:74:fa:3a:ee:67:36:45:80:a0:ca:f1:1f:49:1b:
88:1f:92:53:f0:c0:fa:21:41:2f:e7:ea:e5:66:fe:67:e9:fe:
68:aa:33:1b:01:91:e6:af:07:18:e7:36:d8:9f:80:db:1e:b0:
15:03:9c:93:15:f0:d0:36:fd:44:de:b8:a5:2e:5e:10:97:8c:
c4:4a:0a:3e:78:b1:95:7b:d1:8d:a1:8c:30:81:1c:e8:a8:fe:
3e:1b:f0:f4:c6:dd:c1:73:e1:37:f4:3b:5c:48:9e:14:1c:a2:
7c:a8:c6:1a:8e:2b:a2:3d:eb:4e:78:f0:06:70:86:78:a1:fd:
a7:41:75:4b:19:f7:bb:56:43:c3:a3:a3:e5:c4:a7:e9:6a:7b:
5d:71:63:79:28:67:05:08:69:c8:d6:be:e6:d2:7a:0c:38:1b:
f2:12:24:a7:52:6e:09:f7:90:b3:e4:9c:27:b8:77:14:5c:01:
d3:66:7c:d1:3b:fc:e7:e0:e7:b2:40:3f:6d:71:b8:5f:07:bc:
9d:ca:4d:6e:ec:1f:66:ac:e7:a6:c7:17:38:93:20:2a:a5:3b:
5a:d8:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:17 2024 by rpki-client on console-fra.rpki-client.org