Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/wqSOkzSGlrCwJdTtU1Iixt0armU.roa
File: wqSOkzSGlrCwJdTtU1Iixt0armU.roa (raw, json)
Hash identifier: h5DhNIBUDyiKbtpYRhiLp3WyuIYe2Xxyuh0V/l3Tcxo=
Subject key identifier: C2:A4:8E:93:34:86:96:B0:B0:25:D4:ED:53:52:22:C6:DD:1A:AE:65
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 0187997DF4B819455B061E6328A821451EBC
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/wqSOkzSGlrCwJdTtU1Iixt0armU.roa
Signing time: Wed 19 Apr 2023 12:29:41 +0000
ROA not before: Wed 19 Apr 2023 12:29:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.142.145.0/24 maxlen: 24
185.142.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 13:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:7d:f4:b8:19:45:5b:06:1e:63:28:a8:21:45:1e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Apr 19 12:29:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a48e93348696b0b025d4ed535222c6dd1aae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:66:42:7c:7c:00:a8:57:4b:63:b6:f0:c9:
c6:d2:e3:75:28:51:3c:66:a4:5d:e2:d1:a2:ee:f7:
83:b1:a0:48:f5:43:03:f6:36:1c:44:d9:2f:51:f1:
2c:5b:cd:ee:c1:5f:9d:f2:9e:1a:ef:40:87:dd:13:
0a:1f:57:3a:bd:51:1b:77:11:ff:24:06:de:14:92:
d7:17:08:29:cc:7c:2f:30:63:f4:9d:65:4d:cf:3b:
e0:ea:61:2f:98:0a:85:02:88:94:09:97:e1:4b:e0:
9e:1f:0a:b8:e7:99:b2:51:b1:4a:c6:da:ca:c5:d2:
6a:a0:18:0d:04:96:53:6c:0d:3d:f9:2d:b7:6d:81:
f9:76:bb:7b:26:7d:77:ab:7b:0f:ef:b7:bb:04:67:
e9:ce:a7:6a:21:eb:44:1f:89:59:63:2a:b1:82:37:
77:76:18:3b:8d:98:dd:96:d1:b5:12:34:6a:75:df:
2c:c2:57:c7:4b:0f:36:a5:83:0f:62:19:fa:71:7e:
74:84:b4:f2:10:67:4b:cf:89:17:0c:e0:b5:8d:73:
1c:e1:00:99:2d:6a:5c:b5:61:59:7b:22:81:ff:60:
c3:02:14:32:bc:da:4f:dc:cb:47:27:1f:17:0c:ff:
0c:60:42:03:0b:fa:85:a1:c4:2d:5c:79:86:b4:6f:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:8E:93:34:86:96:B0:B0:25:D4:ED:53:52:22:C6:DD:1A:AE:65
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/wqSOkzSGlrCwJdTtU1Iixt0armU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.144.0/23
Signature Algorithm: sha256WithRSAEncryption
95:df:b0:21:dc:24:6f:46:8a:77:30:8b:f8:81:c2:e6:de:d1:
b4:de:80:bf:3c:ad:4a:2d:a5:50:37:49:3a:9d:da:70:c2:a7:
d6:6d:cc:d4:c1:b4:93:09:f1:03:50:7e:5f:c2:e4:49:30:12:
54:ca:b9:ea:1c:e5:8c:09:96:a9:61:94:a8:cb:46:b2:5d:0f:
04:f4:ff:ec:ec:f3:87:9d:cd:c1:cb:70:2d:00:54:4f:98:7e:
08:a2:93:79:b6:18:17:e4:73:75:c4:e8:ea:e2:b3:17:b4:92:
71:3e:eb:f4:fb:8f:5f:a7:55:41:d4:fd:f1:a0:b2:35:b1:2d:
0d:41:88:00:66:d6:28:f1:48:76:bf:9a:07:83:5b:78:f8:5b:
21:f9:9e:c9:f7:3d:db:16:45:8d:63:af:a3:a5:02:54:d8:cd:
6c:11:9e:38:2e:14:4c:78:ca:ac:4c:cc:92:63:20:23:9c:d8:
5d:49:ca:1c:df:09:44:45:e8:73:49:3c:33:f0:4f:1c:22:7c:
2a:b5:74:f9:94:20:f7:08:73:38:33:84:ac:d0:e5:b5:db:1a:
34:38:29:ad:62:68:4d:25:3b:64:3a:4e:5f:35:89:1b:f1:78:
97:49:40:ae:28:04:a3:eb:77:98:6e:56:a3:fd:5e:ad:90:72:
02:ad:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:24 2024 by rpki-client on console-fra.rpki-client.org