Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WCkbsCk0fteIANoyG641sfxrfmI.roa
File: WCkbsCk0fteIANoyG641sfxrfmI.roa (raw, json)
Hash identifier: t3mNB+81uzm0zQ+VsYV0lL/Cnok7xoLDAvtzW+NPdA8=
Subject key identifier: 58:29:1B:B0:29:34:7E:D7:88:00:DA:32:1B:AE:35:B1:FC:6B:7E:62
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD529C6BAE4093EFF68B618A91E34EA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WCkbsCk0fteIANoyG641sfxrfmI.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50322
IP address blocks: 188.210.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:29:c6:ba:e4:09:3e:ff:68:b6:18:a9:1e:34:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58291bb029347ed78800da321bae35b1fc6b7e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:39:20:50:a4:49:64:b7:5c:2d:d3:ae:6e:
fd:08:b5:f7:da:fd:7a:70:de:c4:a3:03:fa:a1:b3:
6c:4b:f9:f1:68:94:13:f3:a2:e6:48:e8:9d:3a:a1:
e1:4e:9e:b9:f7:fc:cb:87:55:d1:f1:6a:e3:90:ae:
3e:1d:fa:24:dc:48:cf:a5:e9:7a:db:4d:7d:31:e9:
8d:34:10:31:a0:9b:35:35:0e:9b:61:79:58:73:61:
6a:2d:45:6a:47:94:a2:67:a5:69:da:99:f6:ec:85:
e6:06:49:d8:9c:ff:12:db:2b:82:87:66:19:c8:99:
cc:b8:3a:fc:24:57:96:fe:fd:56:ae:0f:32:a4:5b:
08:ec:51:9b:6e:8c:ca:1d:ee:3d:cf:21:c8:c4:5c:
36:4b:d1:b7:37:c2:0b:0c:b3:85:e9:cc:7b:76:92:
c5:e0:0f:aa:3f:b3:95:25:ba:df:54:8b:23:2a:b7:
08:1a:9f:3a:80:b8:cc:b0:48:36:08:98:c9:11:4b:
88:b6:89:de:dc:02:9b:e6:b9:21:67:82:98:99:46:
6b:2c:76:9c:b1:91:a0:d9:70:65:c7:79:25:6c:bf:
6d:2d:fb:d9:7b:96:71:b2:eb:62:ef:2c:0b:fa:aa:
92:39:ae:70:06:2e:16:0d:e2:ca:f4:e8:2e:a3:33:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:1B:B0:29:34:7E:D7:88:00:DA:32:1B:AE:35:B1:FC:6B:7E:62
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WCkbsCk0fteIANoyG641sfxrfmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.90.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2b:dc:82:82:28:3e:b7:d8:b9:6f:14:58:d3:6f:96:e0:9e:
57:f2:76:0b:f1:e0:2a:d1:ee:bc:17:8d:f1:a0:9e:64:65:61:
77:ed:28:6b:a2:dc:83:53:f9:03:37:6d:21:18:91:d3:07:88:
58:16:3f:5d:48:3d:3b:d1:bf:d6:2f:8a:d1:3c:aa:61:9e:95:
09:4a:c6:56:91:e3:1a:f1:82:7d:98:ce:e4:2a:93:a1:17:9d:
07:3c:ea:50:26:c9:41:c0:2f:69:cc:95:ca:c8:9e:61:4e:1c:
d3:2a:01:d8:83:6c:eb:3c:2f:58:d1:55:25:40:9c:a7:de:8b:
0a:a1:71:61:88:ec:a7:b9:ad:de:31:df:d6:01:4b:11:45:26:
fe:8e:89:5d:e6:0d:17:2e:c8:4d:ca:80:22:21:8b:d0:6e:72:
ee:3d:34:0f:96:8d:4d:2d:de:0b:9e:2f:ec:42:98:57:11:2a:
db:7e:05:d5:8d:dd:67:88:64:42:ee:2a:be:60:90:9e:0d:58:
d0:2b:c9:b0:ad:8a:8d:28:54:90:91:8d:aa:09:50:db:6b:12:
9d:df:b5:a3:9a:df:b1:81:4e:9e:f1:55:02:99:01:61:d2:36:
40:a2:73:4b:de:f5:6e:2f:67:37:45:19:83:75:cb:0d:91:e7:
9c:04:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org