Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wsfxp0lQByxAqRnHFsvc7jeEgs0.roa
File: wsfxp0lQByxAqRnHFsvc7jeEgs0.roa (raw, json)
Hash identifier: xxJyvJMzoGRPVTKMnypiNhem6V8oGqiBfJQ83NR3GVo=
Subject key identifier: C2:C7:F1:A7:49:50:07:2C:40:A9:19:C7:16:CB:DC:EE:37:84:82:CD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018998BB1EFEDC3CB1C89738B62DBC08E4DF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wsfxp0lQByxAqRnHFsvc7jeEgs0.roa
Signing time: Thu 27 Jul 2023 19:02:27 +0000
ROA not before: Thu 27 Jul 2023 19:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 91.132.51.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 08:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:bb:1e:fe:dc:3c:b1:c8:97:38:b6:2d:bc:08:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 27 19:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c7f1a74950072c40a919c716cbdcee378482cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:04:38:72:9d:49:3f:f2:8c:71:51:06:51:
fc:d8:f7:79:5e:e3:82:db:e4:75:99:fe:be:9e:a4:
af:3d:f5:13:ae:cc:6e:ec:25:0e:d3:07:0a:c7:87:
f7:89:d1:a0:c1:9e:69:ec:95:12:4e:09:f2:75:89:
1a:e6:ea:45:58:6f:05:b0:89:f4:5e:b0:ca:13:8c:
e5:ab:c0:c2:60:9d:53:3d:f2:52:4b:1c:ce:d4:96:
81:76:be:21:8a:e0:8b:21:b2:07:c0:6a:fa:3b:26:
ab:08:3c:6d:77:a5:cd:d3:73:10:ed:60:84:0d:f1:
7b:94:15:2b:9d:7f:a1:7c:96:8c:d1:76:34:cf:c5:
01:f9:e4:11:1d:27:d0:99:a6:ff:fa:29:e7:7a:1a:
27:69:25:5b:67:50:d6:1d:90:76:de:74:ea:30:30:
b3:0f:63:96:23:d9:b4:09:02:dc:16:c4:f4:c3:ec:
83:8f:31:91:69:32:ae:c9:8f:1a:4c:47:5b:5c:2f:
ee:d4:4c:e1:da:62:f8:9d:0d:0e:28:ee:0b:9f:8e:
2b:02:9f:28:0c:07:89:0d:10:81:80:87:96:d7:f9:
84:8d:37:b7:04:f5:0b:7f:39:62:9d:9e:8f:9b:75:
cf:66:c4:85:41:fc:30:5d:cd:a8:c7:29:3e:00:eb:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:F1:A7:49:50:07:2C:40:A9:19:C7:16:CB:DC:EE:37:84:82:CD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wsfxp0lQByxAqRnHFsvc7jeEgs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.51.0/24
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:46:20:f6:ab:3f:7a:2b:62:c2:0f:7d:d1:5d:9a:76:1a:88:
86:e0:b3:4c:67:c6:b6:d2:7a:af:43:c5:7e:e0:cd:a7:ea:49:
29:16:f3:e0:35:2c:c9:04:01:c8:ab:29:99:0b:75:01:5f:8f:
3f:8c:7a:40:1f:b7:60:df:37:f3:6b:73:42:b3:69:e8:14:96:
c3:25:ef:66:32:eb:da:bb:08:78:40:5f:11:3a:45:0a:ca:84:
9d:13:36:21:df:ae:c1:83:dc:f2:d6:df:12:b9:d7:03:60:9e:
8a:90:be:ca:4e:26:9f:4f:f2:d3:74:64:66:7c:88:7d:75:e6:
5e:03:7d:01:47:a0:b4:a5:2c:55:e1:70:73:ad:b0:9a:89:47:
a2:c0:71:0c:cf:8e:79:89:9b:bd:6f:37:35:9b:7d:fa:4f:2d:
76:17:e2:51:28:7c:3f:cd:ef:92:6f:01:60:be:1f:55:ac:84:
85:18:87:83:b6:a8:5f:77:9d:dc:68:b2:75:11:04:16:a2:c4:
20:ad:97:c9:48:01:4c:be:40:d9:5a:e9:87:3b:18:0b:fa:44:
9a:19:ca:b5:0b:a9:ac:fb:69:e3:28:e5:30:5e:7c:92:51:59:
2d:ac:39:57:7c:d4:5f:17:c7:ca:ad:f0:38:20:26:1c:9a:95:
63:93:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org