Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/WJx2TIXxReQEFo210tWtDNL9dbY.roa
File: WJx2TIXxReQEFo210tWtDNL9dbY.roa (raw, json)
Hash identifier: hk0RI2yBtipciZlYTXwbup0VqOeyMCJn+lRpM2jaNO0=
Subject key identifier: 58:9C:76:4C:85:F1:45:E4:04:16:8D:B5:D2:D5:AD:0C:D2:FD:75:B6
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 018B2896D5D686CBFE768E4E7ADE93377F3C
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/WJx2TIXxReQEFo210tWtDNL9dbY.roa
Signing time: Fri 13 Oct 2023 10:30:55 +0000
ROA not before: Fri 13 Oct 2023 10:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3920
IP address blocks: 117.55.202.0/24 maxlen: 24
117.55.203.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
2a13:adc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 22 Oct 2023 08:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:96:d5:d6:86:cb:fe:76:8e:4e:7a:de:93:37:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Oct 13 10:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=589c764c85f145e404168db5d2d5ad0cd2fd75b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:2b:9a:6d:35:ed:b6:e1:cb:86:42:3c:ba:
5b:46:2e:db:bb:71:ba:29:f8:30:c7:c5:47:19:59:
9b:91:f5:b2:ef:1f:97:82:39:8a:54:50:ed:5b:31:
34:28:01:48:90:2c:26:94:81:7a:5c:9f:69:c8:27:
11:20:3f:bd:41:48:92:21:1e:21:ea:ee:6e:24:5f:
3b:3e:ea:3c:e5:19:08:d8:05:ec:b6:fc:7d:b9:4c:
19:35:f3:8c:0b:c7:cf:8e:d7:93:d7:fc:62:8e:5e:
b4:27:71:70:95:88:55:3d:c0:db:4c:c0:f2:41:d4:
f2:12:1e:f0:2d:69:6e:07:7c:6a:fd:72:4b:dd:55:
ce:05:f5:89:9c:a9:14:f8:1d:b7:03:5d:66:fa:ea:
61:c6:cd:65:2f:1b:fc:a0:36:36:47:15:0e:f8:63:
78:65:de:19:be:01:84:ff:61:e6:a8:54:53:80:5f:
d7:77:f3:9c:20:d0:83:20:e7:56:a7:81:f8:6c:55:
f0:1f:f9:b6:e7:c1:e6:ca:66:03:1f:12:61:c9:b6:
dd:77:ea:da:4b:64:68:c2:09:be:6c:4e:fd:35:5d:
57:56:d3:8d:eb:91:75:a2:0e:39:99:6b:c7:38:06:
d6:b0:45:3b:b3:a4:bc:b0:f2:54:70:11:75:c9:18:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:76:4C:85:F1:45:E4:04:16:8D:B5:D2:D5:AD:0C:D2:FD:75:B6
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/WJx2TIXxReQEFo210tWtDNL9dbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.55.202.0/23
212.237.231.0/24
IPv6:
2a13:adc0::/48
Signature Algorithm: sha256WithRSAEncryption
9b:30:b5:40:32:60:21:4f:53:7c:f4:d9:3b:f2:df:3b:1d:79:
e5:38:36:bd:1a:75:22:85:68:fc:c1:b9:c1:e0:fe:5c:75:96:
72:2a:59:8e:4e:64:49:66:17:25:1a:52:de:76:88:35:9b:4c:
c8:4a:25:6e:71:a6:be:f1:7b:bc:ae:3e:12:82:d8:dd:9e:a2:
f2:92:61:dd:a8:78:23:9b:b0:8a:e9:6d:18:04:74:86:9b:b1:
27:0a:a8:a8:71:3d:63:02:73:61:3a:b1:61:b8:9b:67:bf:ea:
84:78:14:16:e2:34:ad:49:44:4e:99:ee:09:ce:b0:9c:82:ca:
cd:d9:a9:18:af:b4:2a:50:d4:24:ba:49:a9:a7:15:39:1e:60:
b4:50:45:4d:e6:9f:57:f3:4d:96:65:10:9b:d7:95:b8:8d:d8:
45:9d:b7:ef:b6:0a:5b:c5:19:60:6a:1d:ec:08:bf:9c:25:ac:
45:d9:29:00:57:d4:86:2d:33:b6:ea:70:b9:fc:b3:2f:57:dc:
16:0e:c2:4c:2c:d9:24:ae:22:fb:9a:72:cc:94:4e:13:25:06:
73:6a:d3:34:bd:cc:0a:49:01:dc:70:a3:a5:d0:33:57:9c:0f:
80:44:87:d1:97:70:82:46:2d:09:5a:ee:26:a0:bf:a9:85:58:
d0:d8:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org