Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WlVh0VJjQDHKUt69suDCcKfzyaM.roa
File: WlVh0VJjQDHKUt69suDCcKfzyaM.roa (raw, json)
Hash identifier: YuQU7xDTr32VV52BRMxEgBwIAoZfZz1sOAU9Uc3pTvE=
Subject key identifier: 5A:55:61:D1:52:63:40:31:CA:52:DE:BD:B2:E0:C2:70:A7:F3:C9:A3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956834E2F9A9415AFD67FF44EFDB27
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WlVh0VJjQDHKUt69suDCcKfzyaM.roa
Signing time: Mon 02 Jan 2023 03:45:17 +0000
ROA not before: Mon 02 Jan 2023 03:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60028
IP address blocks: 31.148.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:68:34:e2:f9:a9:41:5a:fd:67:ff:44:ef:db:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a5561d152634031ca52debdb2e0c270a7f3c9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:1c:97:48:05:48:e9:23:ff:31:56:b9:7b:
97:93:a1:c6:d1:c1:37:6b:8a:2a:3c:18:20:28:b4:
f5:37:fb:ff:6d:98:10:84:a1:db:dd:62:f9:0b:fc:
41:a0:22:03:ab:e3:6b:e7:2b:ec:2b:24:ca:08:cc:
b2:2a:44:af:bd:3d:f5:ff:79:13:bd:f0:3c:a0:5f:
a7:48:85:e5:c5:1c:06:ef:c4:5c:74:75:a0:65:3b:
e2:1a:8c:77:33:8d:20:64:a2:28:de:09:e2:46:0e:
f2:4e:20:1a:a4:9a:8e:00:85:11:42:7b:6b:dd:57:
d0:7f:9b:2f:52:c7:d9:11:40:35:b0:e9:68:2e:06:
a2:92:19:5d:ab:f0:c3:bb:11:e9:60:b4:a7:ae:c8:
f5:0b:a8:b0:26:44:d0:96:30:29:05:53:36:cf:9f:
f4:4e:0b:ed:43:50:83:eb:0c:fe:4f:61:83:97:e8:
ae:16:18:8f:10:df:55:40:b5:45:86:6d:53:d4:8a:
a3:ff:df:92:f4:8b:a9:b8:06:42:31:dc:96:ea:b6:
5e:52:bf:c2:5d:d7:4d:b4:04:5d:f0:e6:24:cb:73:
a7:ae:52:4c:f1:b2:1d:51:73:89:bc:49:88:96:e5:
cd:57:e8:73:92:96:44:22:c4:4c:75:3d:c1:81:e1:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:61:D1:52:63:40:31:CA:52:DE:BD:B2:E0:C2:70:A7:F3:C9:A3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WlVh0VJjQDHKUt69suDCcKfzyaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:87:bf:ae:a1:78:01:84:b2:9f:33:1f:a3:e2:21:50:ec:a4:
13:8b:2f:7a:13:32:82:53:05:96:b0:ea:9f:07:12:1c:6a:cd:
0e:60:99:43:2e:49:69:4c:c0:f7:62:7e:78:14:59:0b:6d:15:
bf:bf:b9:37:8b:ec:62:79:f6:b0:95:be:44:78:43:d9:95:3e:
de:24:05:bb:0b:2f:ca:d7:09:67:ee:65:b0:c9:18:d8:43:de:
41:40:7a:81:8b:4f:cc:2c:3d:21:21:fa:fd:09:8f:b6:d0:18:
84:ef:d6:68:c1:da:6d:5a:bd:10:22:56:9a:36:9c:25:14:a3:
5b:f8:05:92:84:fd:74:88:7b:43:0a:e7:4b:9c:2e:de:d8:1d:
5b:a0:d7:15:c3:81:0f:f8:7b:94:ae:44:11:05:de:7e:70:fb:
1f:32:36:e0:96:f9:80:c1:18:21:87:39:7e:27:35:fd:1c:39:
4b:5b:85:e7:8c:2c:68:ff:f3:97:0c:9d:94:13:3e:39:2c:d2:
d9:3e:f9:90:8e:94:b3:75:92:2b:54:f1:c5:af:6f:95:9b:01:
2d:93:1c:74:e4:5f:bf:1c:4c:17:9c:cd:a2:fa:49:9a:14:76:
1f:c9:80:7c:bb:aa:9a:6e:cb:ce:33:2d:bf:86:37:cd:4a:be:
5a:4f:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:31 2024 by rpki-client on console-fra.rpki-client.org