Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WoQ0P9A4cAxQ0EHK5HJKR0dlSH0.roa
File: WoQ0P9A4cAxQ0EHK5HJKR0dlSH0.roa (raw, json)
Hash identifier: Klm8pppJ2uLnTaLU1Vht3rePVWujS7sdhK56586vQc8=
Subject key identifier: 5A:84:34:3F:D0:38:70:0C:50:D0:41:CA:E4:72:4A:47:47:65:48:7D
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018AD5B5F88E765C5AD3276FE8D093C78423
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WoQ0P9A4cAxQ0EHK5HJKR0dlSH0.roa
Signing time: Wed 27 Sep 2023 08:16:27 +0000
ROA not before: Wed 27 Sep 2023 08:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.11.167.0/24 maxlen: 24
85.11.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 13:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:b5:f8:8e:76:5c:5a:d3:27:6f:e8:d0:93:c7:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 27 08:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a84343fd038700c50d041cae4724a474765487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:0e:06:dc:59:19:df:4c:fe:bb:52:ec:36:
3f:7f:c4:92:be:d5:16:b5:01:49:dc:51:b3:95:76:
94:a0:6c:80:f4:8e:d8:66:dc:ed:5d:99:86:ab:64:
c6:6a:dc:c2:23:d2:05:91:2e:66:fc:75:72:d9:9a:
f9:12:52:45:67:37:10:98:e8:0c:bd:46:ba:ee:67:
f9:d3:fb:05:6a:fe:56:2c:7c:89:8d:2f:08:a1:18:
fc:55:93:c2:32:53:bb:4a:48:5b:96:2b:33:38:e8:
6c:99:10:c3:19:dc:b3:0a:65:85:8b:e5:7f:2e:6f:
53:fd:e2:2f:57:66:28:98:06:a1:27:1c:dd:50:d2:
0a:ed:e6:5e:48:0e:c3:6a:91:c7:65:0c:cb:1a:6d:
b7:92:1e:19:e8:13:2d:d7:fe:ad:d9:ff:a6:1d:f4:
78:69:84:97:4d:3c:85:0e:e4:2a:77:7f:4d:73:9e:
a4:e4:1d:0e:83:b0:68:cc:39:97:5e:46:39:6d:d7:
24:4f:ad:90:24:6c:19:77:f1:87:56:c5:33:c9:a3:
38:1d:fc:af:67:20:b5:99:5d:8d:ac:83:4e:cd:c6:
f0:f6:44:f7:06:5f:6f:fc:93:51:ed:57:ca:f7:40:
09:c3:2b:e3:29:46:44:1c:ec:cf:83:f6:c6:5a:9f:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:34:3F:D0:38:70:0C:50:D0:41:CA:E4:72:4A:47:47:65:48:7D
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WoQ0P9A4cAxQ0EHK5HJKR0dlSH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.167.0/24
85.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b2:24:ab:74:bc:1f:d8:10:8e:f9:ab:40:36:c5:e3:5c:9a:
55:6d:46:9d:06:8d:b3:6c:a4:2b:b4:48:4e:96:58:51:64:fb:
00:96:03:08:25:fd:f1:3f:b0:99:86:fb:30:43:84:59:4d:4d:
d1:39:c1:e9:34:7e:04:13:17:69:35:6c:c9:82:77:2b:ca:c1:
1e:4d:d5:c2:11:cd:1e:8a:a1:07:c2:58:3f:e0:60:39:20:9b:
b1:f4:26:99:15:2d:39:d7:90:6e:70:a3:29:de:f8:70:bd:d3:
4c:01:86:fc:7c:d8:51:c3:0e:51:4a:9b:30:62:08:8e:3c:06:
ca:07:f2:4f:83:7b:f9:56:e4:99:20:4d:e3:f3:d6:70:e9:84:
be:c2:d2:cc:96:80:79:91:fe:ba:61:6a:d4:35:48:49:1d:7a:
eb:72:35:b6:50:f4:82:90:9d:5d:09:a7:f6:21:bb:fb:17:87:
1e:e1:58:1b:44:13:fb:e1:6c:a4:78:5f:45:4c:ba:38:74:16:
82:f5:d3:8a:cd:cc:88:d3:ec:9b:e7:a0:db:6b:64:7d:0d:9f:
a6:41:6f:56:b6:08:fb:ab:33:d0:c7:37:f5:46:07:5e:f5:7c:
e5:8d:e6:aa:25:b3:cd:21:65:eb:b8:37:99:2b:59:6d:d9:56:
28:84:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org