Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/wUHyCsRg3xk_AbDWeBr5_TNgYwo.roa
File: wUHyCsRg3xk_AbDWeBr5_TNgYwo.roa (raw, json)
Hash identifier: 3fKuzvXCuGiimijZfYiZwvDqFIlPY0ImZzLu8koIbcQ=
Subject key identifier: C1:41:F2:0A:C4:60:DF:19:3F:01:B0:D6:78:1A:F9:FD:33:60:63:0A
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 01857155249F21011A987BAD4F00D972AD22
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/wUHyCsRg3xk_AbDWeBr5_TNgYwo.roa
Signing time: Mon 02 Jan 2023 07:14:43 +0000
ROA not before: Mon 02 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30784
IP address blocks: 82.199.96.0/19 maxlen: 24
79.172.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:24:9f:21:01:1a:98:7b:ad:4f:00:d9:72:ad:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Jan 2 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c141f20ac460df193f01b0d6781af9fd3360630a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:f1:68:ce:8a:cd:a3:a2:96:cd:ca:f8:9b:
8b:19:00:14:de:a6:65:84:e2:40:6a:b9:16:27:ed:
82:c3:e4:42:70:0d:77:97:85:e4:a1:fb:e4:aa:20:
cf:dc:f0:ce:c1:84:78:f4:cd:b5:e4:0a:c9:ac:3d:
b6:15:eb:19:96:82:65:e4:f0:e2:e6:30:c6:66:bd:
92:ae:a9:7b:ef:f6:2a:34:d7:13:c0:26:59:e4:8a:
64:83:bf:25:ad:cc:61:3c:45:b3:9b:78:33:4d:fb:
d8:3e:b5:58:02:0e:41:8b:2e:34:06:0d:a0:b1:a7:
5e:b2:80:88:99:7e:07:68:9f:2a:f2:2c:f9:d2:c2:
98:cd:10:32:3d:18:79:c6:45:e7:e6:23:79:4a:e9:
05:dc:79:98:71:f1:95:6b:d4:df:2b:81:1e:aa:eb:
94:b6:52:16:2b:ac:f0:fd:93:e6:43:69:be:e7:6a:
c1:08:d0:15:b2:54:07:cf:52:29:42:c8:6a:bd:d0:
f3:c9:ca:21:f1:ae:70:6b:6f:fc:88:a2:e5:3f:1e:
c8:cf:10:2f:2e:5b:52:3e:88:bc:11:07:a6:e7:27:
4a:b0:0e:be:43:83:6d:db:0f:0b:83:38:a5:ac:86:
f7:50:cd:ad:8f:93:bb:06:fe:0a:19:84:6c:09:57:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:41:F2:0A:C4:60:DF:19:3F:01:B0:D6:78:1A:F9:FD:33:60:63:0A
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/wUHyCsRg3xk_AbDWeBr5_TNgYwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.64.0/18
82.199.96.0/19
Signature Algorithm: sha256WithRSAEncryption
76:07:56:1a:13:15:c1:43:9d:ea:ab:b9:84:c7:42:62:2e:fc:
75:d8:a1:86:b3:c8:d2:15:d8:d0:d9:fd:e0:bd:d5:a1:19:6b:
80:e4:15:f6:67:21:10:61:a3:b6:54:81:34:99:af:d3:57:7d:
28:7b:a7:63:0a:19:44:95:fa:5b:4d:dd:3f:99:50:a5:8a:e9:
33:27:59:1b:31:70:cb:45:fe:5d:8a:05:73:9a:e6:10:ee:ad:
0c:1c:3d:99:db:10:be:77:9c:5e:17:64:64:20:56:ff:e0:cb:
b9:3a:af:5b:bc:a4:d2:6d:a7:51:85:29:12:da:d3:bb:5d:8e:
42:43:db:a7:ad:77:9d:e6:b4:48:c8:19:50:02:aa:19:f4:fd:
bb:60:a7:ec:db:59:d5:8e:21:89:b9:2e:25:76:8f:da:95:6d:
cd:99:43:b4:9b:46:3a:65:67:6e:8d:ba:c8:4f:13:9f:ad:a8:
11:9f:9d:3d:cf:28:3a:33:f1:39:42:c1:ee:c7:db:fa:f5:c0:
82:93:b5:67:82:ba:c9:8c:43:e7:17:0b:b1:6e:dd:b0:aa:77:
42:3f:0f:5a:16:3c:1f:5d:e9:ee:db:fd:dc:5a:b8:b9:69:d9:
d3:d0:84:a6:53:af:e8:aa:e9:b7:34:96:fd:bc:29:1a:48:57:
f6:e7:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:21 2024 by rpki-client on console-fra.rpki-client.org