Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/Wd1gPKQ8DQCsf0rN9T1XQrHKGqk.roa
File: Wd1gPKQ8DQCsf0rN9T1XQrHKGqk.roa (raw, json)
Hash identifier: aOTzcEUWgGDe7nUumuL8KOQH6vcXM1fMsiyu15IWEvk=
Subject key identifier: 59:DD:60:3C:A4:3C:0D:00:AC:7F:4A:CD:F5:3D:57:42:B1:CA:1A:A9
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 01881985584BBEED89E98C7BABCECF352507
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/Wd1gPKQ8DQCsf0rN9T1XQrHKGqk.roa
Signing time: Sun 14 May 2023 09:09:09 +0000
ROA not before: Sun 14 May 2023 09:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51175
IP address blocks: 83.230.40.0/21 maxlen: 21
213.227.68.0/22 maxlen: 22
212.106.161.0/24 maxlen: 24
212.106.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:85:58:4b:be:ed:89:e9:8c:7b:ab:ce:cf:35:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: May 14 09:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59dd603ca43c0d00ac7f4acdf53d5742b1ca1aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:cb:bf:e2:81:1a:97:e6:8f:b0:0a:a3:0b:
df:d3:24:54:f6:7c:8d:fa:54:11:b9:24:36:f5:06:
55:7d:a9:90:b2:4c:35:8f:0f:43:1b:01:4a:bb:ed:
fb:05:20:ea:0a:1c:fb:36:41:b6:b0:4b:f9:73:00:
d8:6d:b6:d6:f5:ee:7b:21:71:53:83:9c:0e:b9:11:
54:e6:70:35:aa:04:bf:26:33:7a:76:cf:1d:54:67:
3d:8f:3c:9a:17:60:bb:02:fb:5e:7f:01:51:7f:07:
27:6e:91:2e:ce:e8:4c:47:63:98:79:01:ad:d2:7c:
a4:cb:41:7c:b7:c9:6c:b2:b3:0b:61:d9:01:ff:6d:
e1:33:84:53:96:83:98:71:27:39:d5:4e:aa:3e:a6:
66:66:c6:47:ca:0c:78:77:5c:41:57:f3:38:3f:cc:
ad:9c:85:81:d5:db:56:fc:4a:ea:76:77:04:6c:81:
f8:0e:6e:29:4f:59:3e:f8:4f:e0:d4:06:d5:f3:ce:
05:bd:de:ce:c9:41:00:92:d5:ab:6d:c7:45:96:29:
69:04:5b:00:63:59:0f:df:49:8a:48:99:53:00:76:
fa:78:7d:0f:74:ee:5e:29:2c:dd:44:3b:49:89:ef:
32:24:a1:0e:7e:bd:91:1e:c7:4d:9f:d8:d9:17:e9:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:60:3C:A4:3C:0D:00:AC:7F:4A:CD:F5:3D:57:42:B1:CA:1A:A9
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/Wd1gPKQ8DQCsf0rN9T1XQrHKGqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.40.0/21
212.106.161.0/24
212.106.163.0/24
213.227.68.0/22
Signature Algorithm: sha256WithRSAEncryption
39:aa:d4:37:ab:f4:91:53:1b:22:ab:88:9a:18:3b:95:9e:59:
e5:c7:75:dc:5f:ac:c6:8c:1d:54:91:b5:16:65:23:1c:ef:45:
96:4f:bc:01:ff:e6:48:eb:d4:72:49:a2:3a:f2:52:97:e5:52:
fa:46:18:f1:be:76:eb:38:84:40:a9:d3:68:42:fc:aa:8c:f0:
cf:78:f5:f8:0b:c4:72:64:af:ff:30:31:84:fe:37:26:48:0e:
5d:50:41:ae:1e:be:6b:0c:cb:0b:fa:9a:d3:8c:14:96:f9:03:
b3:0e:80:b1:e5:b4:c8:22:b8:bf:36:49:bd:5c:a4:8e:1f:d7:
71:af:52:d8:cc:94:1c:cb:74:eb:2f:b2:de:8f:5f:68:b3:d4:
cf:ad:a8:38:60:6c:d3:d1:1c:a5:af:e2:a5:95:6c:bf:e5:0e:
f7:24:aa:9d:94:99:9c:44:5f:3e:71:5d:60:42:a0:50:b5:89:
cf:9b:f6:15:ff:3a:da:8d:51:75:c2:39:d3:36:c4:ff:da:d2:
1e:97:e9:ca:17:be:b3:34:27:0a:c1:be:8a:a4:32:bb:aa:12:
49:e4:0c:8f:7e:e0:12:a5:08:86:ff:1e:8c:ba:1c:89:0a:c0:
58:0e:f0:1d:86:cd:8c:5e:f6:bb:b4:51:8f:43:9b:a6:6c:28:
ba:1c:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:36 2024 by rpki-client on console-ams.rpki-client.org