Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/WbBQeCx_7AdFS-6b07BxX8RJ79s.roa
File: WbBQeCx_7AdFS-6b07BxX8RJ79s.roa (raw, json)
Hash identifier: DPxlnNiQwf66NuQijgH8V8B7+QLWEtV54MxACOjvER4=
Subject key identifier: 59:B0:50:78:2C:7F:EC:07:45:4B:EE:9B:D3:B0:71:5F:C4:49:EF:DB
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 0189CF6482DED4DFC528ECE6BD3EDE0C0B38
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/WbBQeCx_7AdFS-6b07BxX8RJ79s.roa
Signing time: Mon 07 Aug 2023 09:46:57 +0000
ROA not before: Mon 07 Aug 2023 09:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 185.28.63.0/24 maxlen: 24
185.103.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 19:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:64:82:de:d4:df:c5:28:ec:e6:bd:3e:de:0c:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Aug 7 09:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59b050782c7fec07454bee9bd3b0715fc449efdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:1b:b4:8f:46:4a:16:cc:66:05:f7:c8:9c:
45:f7:04:46:e8:71:6f:4f:a9:8a:b4:ea:7b:60:06:
2d:8c:7a:d5:eb:49:bd:c1:8c:6a:55:e5:40:9e:21:
12:6f:e8:71:0c:5b:d7:c8:c3:ab:2f:dc:28:4a:b6:
ce:7b:3c:37:44:0f:17:37:6e:6e:1c:8c:a0:d6:01:
a9:f8:76:1c:6e:c4:8b:77:d1:44:e3:20:7a:ce:b1:
79:b4:20:82:15:5d:00:1d:4d:4d:70:4c:bb:8a:8d:
a3:d9:0c:e7:c2:10:6b:5b:9d:c3:52:57:42:4c:29:
eb:e5:f8:81:ae:8b:ee:87:7c:9c:4f:92:e1:3f:8d:
72:3d:aa:7c:eb:96:4b:be:92:fa:39:86:e2:c7:83:
7e:bf:58:20:52:c8:77:7b:3e:10:ea:91:14:af:b5:
38:8d:2c:fd:ff:77:9a:ac:dd:05:39:26:40:3c:76:
47:09:1d:63:c3:88:7e:77:73:76:52:89:f9:aa:25:
05:5d:f8:61:df:93:ae:58:20:9b:ba:df:96:73:92:
11:c6:24:49:7f:7d:39:99:b4:31:40:12:33:1e:56:
b6:29:8d:76:11:14:a1:44:1d:f5:a6:5f:e3:15:c4:
66:fe:35:e4:e4:25:cd:88:fe:75:06:c0:4b:d0:ec:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B0:50:78:2C:7F:EC:07:45:4B:EE:9B:D3:B0:71:5F:C4:49:EF:DB
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/WbBQeCx_7AdFS-6b07BxX8RJ79s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.63.0/24
185.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3d:c5:24:1e:2b:e5:51:fd:e3:fb:f9:0d:59:a8:db:18:39:
4a:f9:8a:6d:6e:65:b8:b6:b5:ee:32:b2:49:36:5d:9c:bf:2a:
c7:84:d7:72:7a:ca:34:c3:66:fd:49:49:cb:33:3e:b1:bf:e6:
a1:11:0d:5c:e4:b2:77:b5:c6:6c:3e:2e:c1:66:03:d5:4e:79:
cd:06:b7:cd:a4:c9:98:07:4d:b1:8d:fd:d1:b8:f7:25:65:5f:
b2:4a:d6:53:2e:6f:43:c3:d7:3e:78:75:e7:dc:7a:45:0a:4c:
fd:3d:7a:d8:5d:37:46:fa:05:cf:95:5f:9e:0a:3f:f3:c5:7c:
32:75:0e:2e:72:46:0f:70:43:b0:65:b8:a2:18:65:c2:90:8e:
d8:fb:d9:6f:19:1e:2a:09:e7:fc:ab:7c:ba:f4:08:4f:00:5b:
ed:e7:34:a7:23:d9:b8:4a:79:e8:16:31:ea:66:35:83:4a:e5:
50:cc:17:c0:7f:4d:27:d4:b9:bc:c2:ea:2f:20:ef:04:39:bf:
7d:a6:23:a5:78:13:4c:49:f2:0e:f4:f6:8d:56:ff:e6:28:e0:
e6:4d:63:9b:38:fa:df:67:cf:de:8a:3c:f2:30:48:b9:2d:17:
86:ad:33:51:cd:5a:43:ec:7f:5c:d0:6b:42:33:6b:9e:b9:30:
fc:84:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:49 2024 by rpki-client on console-ams.rpki-client.org