Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RWajS-REirHEgUzlnVx4F8DacgU.roa
File: RWajS-REirHEgUzlnVx4F8DacgU.roa (raw, json)
Hash identifier: zoPIO/jNJIb+XFuaw8gLFNlhLdlP99Bh3ZQ3By0Bfxs=
Subject key identifier: 45:66:A3:4B:E4:44:8A:B1:C4:81:4C:E5:9D:5C:78:17:C0:DA:72:05
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 0185715565C57EA3DDF4140DB58617AC1E83
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RWajS-REirHEgUzlnVx4F8DacgU.roa
Signing time: Mon 02 Jan 2023 07:15:00 +0000
ROA not before: Mon 02 Jan 2023 07:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 37.0.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 15:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:65:c5:7e:a3:dd:f4:14:0d:b5:86:17:ac:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 07:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4566a34be4448ab1c4814ce59d5c7817c0da7205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:14:05:12:94:db:05:da:3a:62:cf:ee:5a:
ec:70:a6:f2:f0:59:ce:17:a0:5d:2d:4c:fe:46:91:
54:fa:fd:39:c2:56:e5:cd:6e:75:5e:3d:fe:57:14:
34:bd:77:b9:a1:7b:2a:ca:01:c4:bc:77:8b:10:85:
00:23:1d:97:5d:44:9d:af:19:78:b0:f3:db:28:c5:
a5:7d:d5:ed:04:b5:68:f1:45:ad:d6:1c:5a:02:50:
52:ed:1d:a0:1c:59:1d:40:f3:7f:14:3d:de:1e:9e:
e6:6c:99:ed:97:09:30:ab:ad:ea:b6:c7:04:79:a6:
3f:1c:ed:79:5f:21:83:00:8b:9d:42:c5:1f:09:13:
44:86:0b:a1:85:23:f3:d6:64:32:24:ad:ca:e2:45:
dd:65:93:5a:3e:50:68:eb:2d:97:a8:28:67:21:f7:
92:8b:48:f8:14:2b:3a:44:eb:99:86:62:2c:f9:23:
b0:c3:cf:8c:52:9f:2e:e9:1b:52:af:80:37:f1:16:
a3:a0:49:cf:c5:94:8c:cb:88:da:80:c3:c9:a7:de:
21:df:a4:ba:05:10:7b:38:5b:4e:89:ba:7e:61:c6:
89:aa:f4:07:01:fd:ba:b1:24:05:bd:cc:d5:94:83:
84:8e:ba:db:30:9a:9e:24:f7:a3:10:af:32:62:f8:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:66:A3:4B:E4:44:8A:B1:C4:81:4C:E5:9D:5C:78:17:C0:DA:72:05
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RWajS-REirHEgUzlnVx4F8DacgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
66:34:e6:b9:d4:33:e5:2e:b1:15:f8:3b:cf:fc:ed:60:e2:35:
95:00:9a:5e:01:00:46:a8:de:e3:c9:15:c2:64:c8:5b:6c:00:
72:95:7c:d6:81:28:ce:13:0a:0b:3c:dc:63:d9:33:16:d9:9d:
90:f2:e8:0f:8b:cb:9a:7b:27:6e:38:69:b2:1f:5c:bc:fb:17:
a0:36:56:8b:f2:24:fb:66:e9:50:91:8f:2b:29:e5:41:e8:d9:
f9:2f:ec:90:e2:f9:33:ec:1d:9f:6d:cf:cd:ea:26:b5:eb:99:
ee:98:64:cf:40:95:96:ce:be:1d:35:ad:60:32:1f:ff:21:9f:
d4:55:d0:2f:c4:26:8d:34:57:6d:f5:a1:1b:2e:d3:27:a3:bb:
fa:18:da:7d:b5:dc:d5:9d:32:52:50:78:f1:ae:14:c9:58:7a:
92:99:6f:03:02:5f:c6:15:94:03:77:01:10:23:78:1f:bc:61:
8c:d2:7f:6e:d5:ef:6e:78:52:44:c4:37:01:6a:01:5d:59:e1:
51:07:4f:97:8d:6b:95:dc:11:a6:e4:cf:e1:78:5c:63:8c:b5:
ac:c7:67:04:d5:0c:ab:42:ac:d7:2f:55:38:7d:61:20:c2:2b:
7b:64:f4:e4:c3:a6:d6:d0:bf:53:ef:b0:94:a2:1c:de:e1:d7:
bf:a5:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:58 2024 by rpki-client on console-ams.rpki-client.org