Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wP4K5W4UUF53beOP3rRAlcJOFU4.roa
File: wP4K5W4UUF53beOP3rRAlcJOFU4.roa (raw, json)
Hash identifier: fBmTSoFuWSjKkzLrsqxuFTgOXXoBDEA1jr9D3X4q4mA=
Subject key identifier: C0:FE:0A:E5:6E:14:50:5E:77:6D:E3:8F:DE:B4:40:95:C2:4E:15:4E
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01884E5357553D73BD2781358EC881F29443
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wP4K5W4UUF53beOP3rRAlcJOFU4.roa
Signing time: Wed 24 May 2023 15:14:24 +0000
ROA not before: Wed 24 May 2023 15:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 185.114.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:53:57:55:3d:73:bd:27:81:35:8e:c8:81:f2:94:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: May 24 15:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0fe0ae56e14505e776de38fdeb44095c24e154e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:b3:11:23:bf:77:9a:b3:7c:e2:e1:05:d6:
99:86:b2:97:ee:3e:63:75:5b:a9:6b:6d:11:ab:73:
f7:62:b2:a4:a6:40:4e:e6:c0:67:83:c7:db:b5:af:
5b:f3:a8:ac:3b:fd:1b:10:ab:e4:3f:a0:97:9d:43:
79:b4:43:aa:dc:40:e2:a4:0b:5c:ad:02:74:b6:5d:
1f:b6:bc:0d:f7:69:0a:44:e8:d5:01:fb:da:ec:73:
7f:19:1b:5b:e1:13:c8:53:1e:bd:49:19:8e:0b:1c:
2d:9c:fe:36:ff:3e:33:69:e9:b8:de:cd:05:bb:03:
41:a3:7f:3d:4d:1a:db:dd:7a:2d:da:18:9e:24:2d:
97:e6:8a:c9:f3:ac:0c:ce:52:20:70:f9:72:47:ba:
2d:f8:f9:e6:5c:f5:9b:5c:f3:48:37:33:8d:08:38:
fa:38:56:7b:a2:38:54:93:12:77:2e:7b:aa:1e:8b:
c2:83:c0:db:97:18:07:d7:8c:86:fa:17:96:6b:ef:
ef:48:36:a9:9b:35:8f:4f:61:6c:bb:aa:92:b4:4f:
63:3f:3a:ae:bf:d0:af:67:ba:01:b9:cc:33:eb:21:
08:1d:82:c8:e8:a9:d3:96:d5:f5:3f:11:8b:77:00:
7a:e1:53:85:09:a1:6b:55:06:41:d2:b3:c6:ce:11:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FE:0A:E5:6E:14:50:5E:77:6D:E3:8F:DE:B4:40:95:C2:4E:15:4E
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wP4K5W4UUF53beOP3rRAlcJOFU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:d9:4c:31:be:d3:7d:8f:f2:6e:60:7d:6f:69:45:7d:16:be:
6d:cc:02:60:23:3e:3e:80:de:25:9d:74:af:d8:28:34:99:a1:
3c:33:4f:13:d4:1a:7d:84:36:7d:e4:82:eb:2b:68:a9:0f:38:
7c:ec:36:8c:ba:6b:a5:70:68:61:24:2d:4b:ba:61:cd:a8:a4:
1c:da:e0:7d:cc:6a:59:15:51:1f:ed:cc:d6:ae:fa:39:05:4e:
a6:72:bb:b0:7b:97:f5:1c:45:f0:d5:11:68:8f:88:f7:3b:10:
7c:d9:72:e6:87:40:3d:2f:dd:b3:2b:5a:f0:2b:1f:eb:f7:ab:
30:bf:e2:b9:53:7e:f8:89:14:d8:0f:48:c0:38:51:2c:d7:04:
e6:0d:66:2c:84:8d:7c:20:97:a8:0e:1b:b0:5a:40:74:28:ca:
ba:e3:f8:32:25:a5:c8:9b:78:06:0d:95:b3:23:82:e9:27:d6:
c2:28:80:09:7e:06:a3:ad:35:8c:d4:24:47:17:fa:45:f7:e3:
e6:52:22:f4:fb:c0:14:f3:d8:6d:35:07:64:0d:ac:7c:fb:aa:
6d:a5:42:cb:6e:f4:32:a4:11:7e:7c:bd:6c:b8:86:bb:3b:1d:
a7:20:e4:14:bb:9f:ba:56:7f:32:e7:2b:1f:52:33:21:de:34:
b6:63:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org