Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/WjcPWTzDb1s9gByNyDFJG65UDSM.roa
File: WjcPWTzDb1s9gByNyDFJG65UDSM.roa (raw, json)
Hash identifier: qE2/7pvyHkmcBOO5mBmybnBT3jinoVrd429aHPjhpm4=
Subject key identifier: 5A:37:0F:59:3C:C3:6F:5B:3D:80:1C:8D:C8:31:49:1B:AE:54:0D:23
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 01862B59C8C17A1BE58F75C9D6C062E71DB5
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/WjcPWTzDb1s9gByNyDFJG65UDSM.roa
Signing time: Tue 07 Feb 2023 10:09:09 +0000
ROA not before: Tue 07 Feb 2023 10:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199744
IP address blocks: 185.48.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:59:c8:c1:7a:1b:e5:8f:75:c9:d6:c0:62:e7:1d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Feb 7 10:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a370f593cc36f5b3d801c8dc831491bae540d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:de:39:7a:ef:88:c3:37:63:d0:e7:86:84:
c2:93:36:9a:29:9b:17:a9:87:28:f2:37:e5:3a:48:
3a:12:35:42:a8:40:00:3c:8e:3b:5b:78:d7:4d:17:
a0:8e:75:89:6d:ec:ce:50:92:09:be:89:01:27:f3:
72:a8:0a:71:69:f8:ea:b3:4a:41:35:09:58:b3:3f:
09:29:f7:fd:10:77:e0:15:42:3d:b0:93:34:ec:ec:
27:93:e8:8a:2c:38:88:33:46:00:7f:0a:56:7e:f0:
80:b7:39:31:68:c4:1c:d9:07:d8:a7:7e:ea:0f:70:
d6:29:05:87:d1:b5:d7:ba:a9:14:5f:c3:12:d7:49:
2a:6d:7f:42:b3:24:06:da:fa:24:29:c3:dc:b7:3c:
50:d5:31:c4:ef:b3:bf:64:8d:b7:34:b3:5c:90:7f:
6d:61:8f:f7:f8:eb:8c:28:80:b6:d2:64:6d:58:44:
d9:78:1c:62:46:1f:59:42:f4:98:12:af:19:84:8d:
b4:b9:7f:5b:bd:7c:7b:8f:57:b4:7d:cc:03:ba:54:
a3:e7:25:bb:ba:37:49:25:55:ef:37:91:2c:cc:a6:
8a:e3:48:23:2f:29:c4:04:0a:d5:c7:d6:e5:ec:53:
39:48:bd:8b:a1:02:e0:a1:33:df:0e:28:e3:63:6f:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:0F:59:3C:C3:6F:5B:3D:80:1C:8D:C8:31:49:1B:AE:54:0D:23
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/WjcPWTzDb1s9gByNyDFJG65UDSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ea:76:43:e5:2a:56:b5:89:af:12:71:81:04:19:ea:77:e3:
61:5d:96:f4:71:71:1f:e5:75:aa:11:77:8f:c9:6f:bb:55:f5:
c2:2c:d0:d4:64:e1:21:13:74:d2:41:09:67:fc:2b:b2:a6:ee:
7b:c3:1f:73:26:3a:68:2a:05:3d:04:78:d2:4a:df:9b:e8:7e:
52:0c:cb:d6:bb:c5:91:14:61:f3:d8:fa:d6:15:64:63:8a:68:
c1:d3:d6:e2:37:50:0e:af:5f:c5:f3:04:02:17:d2:75:f3:76:
d5:53:39:f3:cf:18:ac:e5:c4:ab:51:64:96:f3:d5:3a:90:f8:
db:7a:ac:01:f0:06:20:03:ae:2d:28:00:17:84:82:e7:2c:8f:
18:ed:6e:3a:bb:63:c2:f8:d7:f2:b0:6f:3b:f5:6e:5c:3e:7c:
5a:2e:b1:f7:22:a0:77:38:37:dc:a6:db:14:ee:8e:dd:74:b3:
63:ad:8e:0d:01:bc:14:40:c5:8d:9e:a4:ec:57:d3:d2:95:f9:
95:7c:cc:f9:03:0c:4e:8e:a2:30:f8:dd:f1:1b:27:3e:a8:63:
fd:3f:ef:de:1f:e0:29:e3:7b:83:4a:d0:83:88:93:1f:c0:f1:
8f:69:fb:8e:f0:b6:c9:10:e8:f3:a3:81:11:c9:56:2d:b8:65:
e1:d5:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:45 2024 by rpki-client on console-ams.rpki-client.org