Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/wpVMbQPCdZZ-q6mbIZ9KUR90XBw.roa
File: wpVMbQPCdZZ-q6mbIZ9KUR90XBw.roa (raw, json)
Hash identifier: ioPb48TiJorA3j+hp4CbpreRC2Fe/RR0MhuoSu7/Hck=
Subject key identifier: C2:95:4C:6D:03:C2:75:96:7E:AB:A9:9B:21:9F:4A:51:1F:74:5C:1C
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 0185714C488848581C346AA90A8FAD28B701
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/wpVMbQPCdZZ-q6mbIZ9KUR90XBw.roa
Signing time: Mon 02 Jan 2023 07:05:02 +0000
ROA not before: Mon 02 Jan 2023 07:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212830
IP address blocks: 193.57.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:48:88:48:58:1c:34:6a:a9:0a:8f:ad:28:b7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 07:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2954c6d03c275967eaba99b219f4a511f745c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:6d:7e:e0:e4:20:1d:58:61:e7:e3:ce:d6:
0c:68:2b:e3:11:71:2a:a3:0f:7a:d6:0d:93:17:fb:
99:04:20:fb:11:57:f7:58:99:89:76:f3:71:56:9f:
04:94:83:0b:cb:ae:f4:22:70:bd:5d:f8:66:f3:63:
5e:9c:af:8b:aa:c5:7b:53:95:f8:27:f9:59:cf:5e:
4e:df:35:db:f3:65:73:42:a0:9c:02:ab:08:73:e8:
a8:73:af:8e:51:12:d4:b1:6b:d3:6a:1f:fd:2c:45:
dc:04:3c:f9:00:84:2d:ea:d1:20:f3:cf:18:68:57:
28:3a:25:ac:75:8d:c3:69:a3:3a:b8:59:d5:a3:2f:
fc:22:57:a5:2c:08:cf:7e:59:50:44:50:85:13:af:
af:7a:b8:3b:f8:f3:d3:a0:ab:7f:0f:21:9c:e3:bf:
08:60:a3:9a:6f:e3:16:11:72:cb:00:75:48:30:1b:
69:f0:ab:77:6f:c6:1c:ca:b3:62:ee:91:76:a5:9a:
ab:8d:81:a2:1b:42:ee:2f:5d:66:5f:0f:32:2d:c1:
38:64:a9:99:16:58:72:63:4e:3b:9c:d2:3d:10:a1:
c9:ba:14:03:34:ef:ba:38:4f:ef:40:68:6f:1b:b9:
d9:65:1a:ee:0c:78:6a:d6:02:50:83:b6:d4:28:4d:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:4C:6D:03:C2:75:96:7E:AB:A9:9B:21:9F:4A:51:1F:74:5C:1C
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/wpVMbQPCdZZ-q6mbIZ9KUR90XBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.146.0/23
Signature Algorithm: sha256WithRSAEncryption
12:63:80:b9:9b:ff:a3:cb:17:e7:a8:1c:40:fd:d9:9f:ea:44:
5c:0f:58:52:7d:0d:4e:35:e3:cf:4e:aa:f8:dc:98:ac:bc:f8:
39:7a:39:83:a5:f8:32:6b:cc:b7:9e:e0:1b:e0:04:4d:4c:2b:
94:fa:43:e2:64:1d:38:6d:eb:76:36:8b:97:77:fd:9c:92:42:
a6:45:31:5d:24:2c:76:30:0e:4f:82:15:b7:02:7a:91:6b:8d:
0e:9a:b3:72:db:d2:11:a6:a7:5a:da:a3:aa:fa:56:3b:41:67:
bb:33:93:ee:36:90:e1:30:60:ed:20:be:ae:dc:51:85:1c:8d:
1f:73:99:b2:55:55:ec:1c:96:bc:e0:a9:aa:4a:fe:93:bb:bc:
01:3a:bd:ed:93:ee:31:d2:51:28:51:68:39:37:c5:98:50:9a:
e0:1a:31:68:b3:39:9a:22:80:b1:95:d8:5f:2f:ed:13:d9:43:
e8:b3:d9:dd:22:ff:2c:50:91:b7:b5:28:64:1a:ae:be:16:bc:
4a:af:49:43:d2:19:9d:58:09:2c:60:3c:f2:c7:83:f8:3c:ee:
e6:14:61:75:36:21:71:d1:77:e5:af:41:03:5f:ba:64:7d:e6:
f6:b3:42:ec:96:ae:eb:9c:5d:16:00:d6:6c:a6:f5:2c:0b:05:
59:28:31:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org