Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/WcWaSi5addf4ZCbRkh1inH3YfK0.roa
File: WcWaSi5addf4ZCbRkh1inH3YfK0.roa (raw, json)
Hash identifier: C4x9wGXtLrcdA4dg5MVEGk2DKE9ikyLrC4bvFQEybqE=
Subject key identifier: 59:C5:9A:4A:2E:5A:75:D7:F8:64:26:D1:92:1D:62:9C:7D:D8:7C:AD
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018A3B7BBC679D8CFDF29436C59D38816C2F
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/WcWaSi5addf4ZCbRkh1inH3YfK0.roa
Signing time: Mon 28 Aug 2023 09:31:19 +0000
ROA not before: Mon 28 Aug 2023 09:31:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198246
IP address blocks: 46.31.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:7b:bc:67:9d:8c:fd:f2:94:36:c5:9d:38:81:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Aug 28 09:31:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59c59a4a2e5a75d7f86426d1921d629c7dd87cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:d8:b8:27:30:80:d7:61:ab:b2:0b:f0:99:
bc:7f:a4:b6:bc:c8:0e:e4:0b:9f:0d:da:78:bc:59:
09:40:b6:2d:71:09:c3:76:dd:9a:c7:bf:c6:0e:9a:
f8:84:4d:f2:67:4d:84:f5:3e:f4:1f:28:42:60:35:
d5:84:99:11:cb:3a:cb:da:29:9b:6b:41:30:a6:67:
c9:1c:f0:26:ac:50:41:c1:69:47:05:78:d7:fa:90:
33:9d:f2:7c:0a:7a:3b:66:40:a5:4b:62:e5:27:46:
90:ec:e8:3a:9e:8a:9a:86:f1:e7:1d:fb:c7:a8:0b:
d4:3e:b8:69:15:19:bc:30:2b:3d:5c:db:ba:fa:39:
25:fd:37:df:74:c7:07:16:05:a6:59:9d:06:21:18:
8b:63:4d:53:3c:2b:7e:28:47:a2:6d:b0:fd:9d:e3:
b3:ed:ab:00:23:15:00:01:36:b3:6a:1b:e2:8d:d7:
87:ac:ca:7a:d1:8d:40:56:85:cf:62:e4:17:c1:5f:
10:35:90:ff:c2:ae:36:33:6a:89:bc:b0:d0:91:cc:
b2:cb:59:85:9a:3c:fc:8a:9b:67:86:28:93:6c:f3:
87:83:23:fc:a5:39:a3:dc:f6:53:8a:e6:a6:43:dd:
90:3a:73:9f:8a:e1:25:86:1f:b6:42:82:49:b3:73:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C5:9A:4A:2E:5A:75:D7:F8:64:26:D1:92:1D:62:9C:7D:D8:7C:AD
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/WcWaSi5addf4ZCbRkh1inH3YfK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:19:e7:11:ae:3d:f1:63:a7:a8:59:d7:a5:46:c8:b9:f0:32:
21:4d:14:37:b0:8c:e1:66:52:e2:99:84:2d:d8:34:80:4b:5c:
94:27:08:37:4b:6b:2b:50:eb:6d:36:4e:d9:62:c2:45:b6:cc:
89:0f:6f:18:37:48:86:3d:a4:60:da:3b:b9:b3:47:34:24:05:
65:b2:1b:68:dd:bc:45:bb:76:95:bf:1c:bb:d7:55:62:3a:81:
20:f1:2e:b2:ad:aa:fa:90:0e:03:e5:f3:11:18:de:09:1b:cc:
15:a2:2f:be:b5:41:7e:84:8f:69:ee:7c:65:1f:5b:90:78:d8:
b6:1e:d8:dd:31:5c:2f:cd:cd:e2:a7:38:0b:5e:b7:64:db:49:
29:b0:f4:4f:7c:ef:26:20:1f:cd:8b:8e:05:ed:56:c0:3e:c6:
9e:03:70:89:87:e8:94:90:b7:7f:37:7c:83:74:62:96:f6:56:
95:db:ec:54:30:d7:7c:bb:1b:16:17:41:fd:d7:57:1c:39:4b:
81:c6:09:25:86:3c:d0:7d:1c:c4:44:94:b6:e9:30:1f:87:9e:
b1:bd:1d:df:66:40:42:27:c3:e9:dc:e3:f0:3b:32:ee:74:a4:
ef:69:70:0d:53:b3:e6:e6:fe:bc:31:85:ef:26:fd:e9:80:48:
e0:d5:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org