Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/waCMJsuLP87Owy4PJLn84vB3yNU.roa
File: waCMJsuLP87Owy4PJLn84vB3yNU.roa (raw, json)
Hash identifier: BR7Xzxj/1vQg0CSpeQCZUH6wmQl4K1vmJ3p1PBA4Av8=
Subject key identifier: C1:A0:8C:26:CB:8B:3F:CE:CE:C3:2E:0F:24:B9:FC:E2:F0:77:C8:D5
Certificate issuer: /CN=c2e882c776c64fef5839be49eb8aca3fc75b10a7
Certificate serial: 01856FE712AEA623F8CC78F60FAB73B90A27
Authority key identifier: C2:E8:82:C7:76:C6:4F:EF:58:39:BE:49:EB:8A:CA:3F:C7:5B:10:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuiCx3bGT-9YOb5J64rKP8dbEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/waCMJsuLP87Owy4PJLn84vB3yNU.roa
Signing time: Mon 02 Jan 2023 00:34:52 +0000
ROA not before: Mon 02 Jan 2023 00:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 91.213.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:12:ae:a6:23:f8:cc:78:f6:0f:ab:73:b9:0a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e882c776c64fef5839be49eb8aca3fc75b10a7
Validity
Not Before: Jan 2 00:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1a08c26cb8b3fcecec32e0f24b9fce2f077c8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:00:0a:f1:89:a9:12:69:7f:9e:30:2b:a9:
8d:ef:ad:b5:0c:11:70:7b:aa:e6:c6:f2:be:00:73:
a4:03:d7:41:47:ef:68:46:81:2e:21:3e:7b:a6:92:
aa:ae:93:82:45:88:b0:aa:db:40:b2:19:b2:7e:ac:
c3:70:a5:87:b6:a0:d5:80:55:15:61:52:2a:59:31:
28:5a:30:e5:90:75:f4:19:82:e1:c8:a6:ff:ab:d4:
94:52:16:87:b5:ef:da:d6:b6:25:d7:18:74:7b:08:
b3:5b:41:da:18:2b:b3:34:c8:87:49:ee:89:d9:2a:
c2:48:e4:34:60:71:3f:79:02:70:62:64:fc:50:e6:
14:ee:18:e3:04:af:af:8d:c4:29:28:c0:39:68:52:
68:24:ca:90:b5:dc:2f:3d:47:a8:48:16:ed:00:30:
fd:bf:ba:f6:63:2c:9a:9a:40:92:5f:f7:b0:1c:5a:
4e:b2:74:d3:b6:2e:c0:14:94:f1:2e:fb:46:6d:ac:
13:05:64:50:05:85:b6:59:1a:1c:50:ff:7b:07:12:
29:30:5e:1c:2f:01:cd:d4:c5:35:06:2d:1b:a7:58:
26:6a:b9:38:04:26:75:0e:06:46:98:6e:46:a4:6d:
bb:8a:65:c2:8f:27:2c:1a:1f:94:45:80:00:3d:f7:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:8C:26:CB:8B:3F:CE:CE:C3:2E:0F:24:B9:FC:E2:F0:77:C8:D5
X509v3 Authority Key Identifier:
keyid:C2:E8:82:C7:76:C6:4F:EF:58:39:BE:49:EB:8A:CA:3F:C7:5B:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuiCx3bGT-9YOb5J64rKP8dbEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/waCMJsuLP87Owy4PJLn84vB3yNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/wuiCx3bGT-9YOb5J64rKP8dbEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.188.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3d:d6:52:8c:fd:bc:d5:82:4e:25:1a:5e:8f:85:5d:ee:37:
e7:9b:bc:d4:ab:f8:cf:14:f0:fb:67:9e:d8:75:06:d9:77:02:
e0:6c:cb:6a:90:ee:75:b2:52:58:52:39:57:c1:10:4a:a1:0c:
09:7b:aa:6b:17:09:ac:e1:3c:d5:3c:5d:50:c4:f6:87:3f:2d:
b2:83:12:55:fc:38:a7:be:49:63:91:54:48:16:85:c4:8e:e6:
dc:fe:06:a6:63:8b:78:41:b3:9c:58:ab:d7:18:f0:81:7e:9c:
cd:bc:de:20:fa:2b:ef:bc:03:77:40:a8:44:2e:89:f4:03:d4:
72:74:6f:76:3f:b9:7c:97:13:5f:3c:c3:8c:40:a2:a6:f7:01:
25:cf:f5:d6:8c:1b:1d:29:6a:1e:f7:af:51:29:ae:17:63:41:
a6:fa:9f:f2:8a:8f:2a:c1:0e:84:97:6c:d2:d5:5d:a2:0d:af:
87:0a:e1:a6:59:86:16:d6:c2:69:26:9e:68:6d:0e:70:e4:d6:
0a:69:62:02:b6:74:19:af:4a:6d:8e:f5:38:6a:4f:d7:f4:55:
c9:42:cd:81:29:0c:ec:0b:24:d6:92:38:0a:14:ef:08:4d:19:
4a:04:fa:f0:3f:d5:65:10:d3:9d:2f:fd:5b:ff:2d:ed:b0:6c:
49:ef:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org