Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/W8VYqvmHwJZry4gm8zVd7hx5w6s.roa
File: W8VYqvmHwJZry4gm8zVd7hx5w6s.roa (raw, json)
Hash identifier: V9j/8J3ZfrGcCKvsvEaTYmC4/7te/CfbcEmG6Qdhj+M=
Subject key identifier: 5B:C5:58:AA:F9:87:C0:96:6B:CB:88:26:F3:35:5D:EE:1C:79:C3:AB
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 018570B988BF3E15DF3A79A5E292203406B1
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/W8VYqvmHwJZry4gm8zVd7hx5w6s.roa
Signing time: Mon 02 Jan 2023 04:24:45 +0000
ROA not before: Mon 02 Jan 2023 04:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 91.212.235.0/24 maxlen: 24
2001:7f8:9f::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:88:bf:3e:15:df:3a:79:a5:e2:92:20:34:06:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Jan 2 04:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bc558aaf987c0966bcb8826f3355dee1c79c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:1f:f5:67:11:e0:d7:00:8f:9c:25:c5:6c:
d4:9c:99:62:71:1b:dd:b8:5c:89:a1:10:cb:14:98:
0c:48:6d:9c:ed:35:de:25:a0:20:bd:5f:0c:f1:12:
63:c1:1f:a5:c6:50:83:84:4e:39:23:e3:d0:0e:5d:
0b:4b:95:46:e0:c0:e1:b6:bc:04:fa:9d:4c:15:1d:
29:a7:42:02:c7:40:ef:59:5a:6d:c3:51:2d:aa:6d:
70:81:06:0f:16:6e:cc:17:04:49:c3:65:17:1a:40:
e2:20:f0:f2:f7:46:6b:25:9f:ca:bf:dd:c8:ec:1f:
6e:f1:77:2a:3d:c2:97:66:20:72:3d:a0:35:48:db:
76:06:23:64:4f:d6:e0:8d:aa:19:45:ea:38:05:cf:
1f:53:da:64:f9:a2:de:a5:de:bd:29:ef:53:bc:32:
62:f2:6e:6b:72:bf:a8:b3:28:2c:48:43:54:3b:41:
44:9a:d5:0b:cd:05:c6:f1:89:c4:95:4a:1e:e4:63:
ac:ed:63:f5:7b:89:91:85:60:aa:68:fc:33:74:c3:
4f:0e:33:30:75:b6:be:9c:05:a3:18:ca:8c:7c:96:
95:04:23:04:0e:15:43:0f:40:e0:a2:c6:15:b6:6d:
f7:76:5c:1f:09:ce:0c:54:90:67:07:11:ea:91:9f:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:58:AA:F9:87:C0:96:6B:CB:88:26:F3:35:5D:EE:1C:79:C3:AB
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/W8VYqvmHwJZry4gm8zVd7hx5w6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.235.0/24
IPv6:
2001:7f8:9f::/64
Signature Algorithm: sha256WithRSAEncryption
9d:5c:41:55:d6:34:14:ae:bd:62:a4:bc:f6:cd:ac:09:44:a4:
ea:94:9e:ed:a4:08:d4:10:67:94:92:cd:e5:b6:2d:97:95:5d:
65:bb:a5:0d:10:d0:67:4e:4c:40:5d:58:ba:a1:4d:6a:2e:85:
a6:28:1b:1c:cb:c0:7c:65:0c:23:86:4d:28:55:36:6b:e2:11:
b4:94:81:d9:af:ed:25:39:5c:bc:6b:d5:31:02:39:41:e9:76:
4d:95:4f:10:0f:0b:18:3a:ed:1e:b7:7d:0c:f5:d1:35:c4:5a:
95:a3:a0:9b:6d:d8:20:8e:5a:cd:59:e4:33:53:31:36:ce:e2:
f8:4d:c1:c9:0b:f2:98:49:56:ae:0d:62:db:42:2e:7e:6a:a3:
99:3f:64:24:bd:61:18:c0:fb:43:5b:8e:08:56:c9:aa:03:af:
99:02:a5:be:c2:1e:82:20:e7:de:3e:0e:94:ca:62:a1:30:be:
93:98:c1:eb:61:60:cc:ec:4f:37:e7:59:ed:09:07:e9:4b:e8:
3c:63:7a:30:fe:71:9e:8f:a7:ea:dc:db:25:85:02:3a:83:49:
92:b7:f0:f8:c7:cc:60:3c:37:1e:e3:b9:6f:bc:17:24:3a:59:
5a:9f:a5:e1:36:82:e1:f1:1f:06:13:81:8b:fa:da:9c:f1:de:
7e:3a:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:18 2024 by rpki-client on console-ams.rpki-client.org