Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/wtxGT6y9kNbjJei6573PMLMtfsM.roa
File: wtxGT6y9kNbjJei6573PMLMtfsM.roa (raw, json)
Hash identifier: 091B2ks9S8BSYTgUGp+zO/hxGBf1WvA3C7INZXKCFSo=
Subject key identifier: C2:DC:46:4F:AC:BD:90:D6:E3:25:E8:BA:E7:BD:CF:30:B3:2D:7E:C3
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 01856B9C811C7A16670CA008D273E9D91446
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/wtxGT6y9kNbjJei6573PMLMtfsM.roa
Signing time: Sun 01 Jan 2023 04:34:56 +0000
ROA not before: Sun 01 Jan 2023 04:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 88.135.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 05:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:81:1c:7a:16:67:0c:a0:08:d2:73:e9:d9:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jan 1 04:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2dc464facbd90d6e325e8bae7bdcf30b32d7ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:70:68:e8:f8:e4:ad:4b:88:4f:b9:22:c8:
fc:50:ca:c0:cb:1f:ec:63:eb:d8:25:c1:4a:2b:9d:
d4:84:13:18:a4:e9:af:e8:72:63:4f:65:f4:f8:2f:
bf:f0:00:4b:5e:e8:43:c8:b7:41:de:93:10:49:dd:
68:45:06:f5:a8:cc:a6:38:af:75:1f:c6:9c:58:72:
af:a7:a9:57:e3:a1:7b:c1:59:de:6b:9d:b4:b9:e5:
e7:b8:83:7b:aa:ee:7c:a6:9c:dd:ea:77:d9:f1:b8:
a7:86:54:17:dc:5a:7f:7d:c4:30:c1:c5:02:a1:8e:
97:ec:7f:9c:31:52:50:02:27:e9:b1:08:b2:2e:1d:
5f:09:b4:16:34:8f:55:37:e3:e8:96:38:7c:b6:36:
fb:19:8b:4d:b5:6d:a5:ae:7a:e7:f4:34:03:73:bd:
38:f5:6a:0f:0f:36:3e:6e:56:88:fb:54:e6:18:82:
93:d2:d3:a8:91:22:57:23:64:ca:d6:db:fa:aa:7b:
25:5a:80:ad:57:1f:3f:7c:7d:ce:9c:23:8c:11:9e:
fb:a6:4b:69:3e:82:ba:4d:1b:bc:70:f8:37:84:1b:
b2:c7:7f:b2:fb:c6:95:a3:59:9b:fe:40:24:c1:ac:
f0:1c:73:ec:0c:8c:bf:1e:fe:8d:28:a2:7d:2f:3a:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DC:46:4F:AC:BD:90:D6:E3:25:E8:BA:E7:BD:CF:30:B3:2D:7E:C3
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/wtxGT6y9kNbjJei6573PMLMtfsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.45.0/24
Signature Algorithm: sha256WithRSAEncryption
45:37:4d:1f:71:4a:bf:ee:00:86:56:1c:ba:f4:24:b3:10:69:
12:6b:a0:45:ef:6f:96:ab:bf:44:8b:e8:85:fb:63:17:d0:68:
54:8d:c2:83:db:53:13:17:77:1d:28:e4:2c:19:69:bb:46:a8:
8f:38:f4:96:1d:7f:6a:8a:34:8c:7a:0b:d4:4a:21:42:82:a9:
fc:89:97:93:35:c5:07:38:1b:ee:ca:ef:1b:d2:35:b9:04:b5:
8c:f2:e9:aa:a1:4a:f0:e8:61:53:28:20:1f:51:e9:d9:27:e7:
9e:b5:f5:3d:e0:8c:d2:b6:f1:e5:6b:37:16:7f:e9:1d:93:7e:
7f:26:96:01:dc:98:a5:58:b2:a7:37:ef:be:1d:d8:08:75:f3:
9c:79:70:a5:f6:8b:2b:7f:0d:08:03:71:5d:ae:5d:12:3a:79:
d7:69:25:53:46:61:08:00:7e:c9:e6:69:5d:b7:78:a9:2b:a8:
00:ee:2c:55:68:11:36:f5:f0:ad:b0:e9:da:aa:1a:25:9b:fe:
ea:c6:7f:73:c6:8d:38:21:f6:ba:af:bf:90:65:57:b2:fa:cc:
e4:57:23:a5:be:2c:1f:a4:5a:3e:b1:53:26:a0:ae:13:d2:d3:
66:a6:22:44:d0:1b:79:0a:01:ac:55:13:7f:1a:0f:0c:0d:5b:
4f:e1:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org