Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/wtyK47jq2phcFFx9g0miIniibfE.roa
File: wtyK47jq2phcFFx9g0miIniibfE.roa (raw, json)
Hash identifier: OlOs9M8ASN2ihUtvYZOq/ujkJDs4AbBKsSWrOR6K4Xw=
Subject key identifier: C2:DC:8A:E3:B8:EA:DA:98:5C:14:5C:7D:83:49:A2:22:78:A2:6D:F1
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 0185707076E72CC30A58814EDDA95E74604C
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/wtyK47jq2phcFFx9g0miIniibfE.roa
Signing time: Mon 02 Jan 2023 03:04:56 +0000
ROA not before: Mon 02 Jan 2023 03:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 146.102.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:76:e7:2c:c3:0a:58:81:4e:dd:a9:5e:74:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jan 2 03:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2dc8ae3b8eada985c145c7d8349a22278a26df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:e5:ce:41:a7:4f:1a:9a:82:2f:e7:8a:11:
35:7e:74:c4:e0:ed:13:42:93:4f:b5:59:c1:34:73:
4a:2e:ed:db:bc:4a:4d:8d:cc:24:a6:2a:c8:4c:ae:
99:35:46:70:f8:b3:db:c4:ee:e2:db:54:d3:77:2c:
06:a8:c9:5a:c8:d4:1c:1b:aa:7e:c4:1e:92:73:4e:
81:d3:8f:7b:b4:bc:e1:e7:7b:df:23:67:e7:bf:49:
b5:4c:d6:e6:b4:cc:79:e1:d4:2e:b4:d7:bd:f6:33:
0b:3f:79:c2:ad:a2:fd:38:65:27:ec:14:5f:ab:d3:
b8:65:dd:aa:39:4b:6f:2f:56:c5:35:54:af:3a:52:
2b:14:f9:d3:b0:79:08:b9:68:a8:8d:f2:1a:72:e6:
b0:c3:47:db:5a:bd:15:d3:cc:fb:59:eb:d0:01:6b:
9f:e9:a2:cb:0e:69:82:66:f6:e4:c9:f7:b6:e7:81:
af:56:b9:5e:9d:82:d0:5b:d3:5a:53:cf:63:2e:35:
f0:77:96:a2:2e:bc:7c:eb:33:56:e7:d0:3d:7a:6c:
3d:b6:2f:dc:35:45:f6:f5:26:d9:f0:d4:b2:08:a5:
01:dd:58:b2:44:44:98:02:32:73:30:0d:d3:c7:bc:
c4:31:95:09:c9:6e:89:42:b1:e0:d6:15:9a:12:e9:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DC:8A:E3:B8:EA:DA:98:5C:14:5C:7D:83:49:A2:22:78:A2:6D:F1
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/wtyK47jq2phcFFx9g0miIniibfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:eb:45:df:a8:78:25:63:4c:6f:cc:34:7c:bd:2f:48:f1:d6:
c1:56:e1:13:a3:93:f0:94:46:49:4b:cb:0d:b7:de:ca:6a:00:
38:7e:53:f2:79:a4:de:f2:f5:c9:11:71:11:54:ad:a2:19:cc:
d7:40:b6:1c:02:bc:bc:83:9b:ec:7f:86:9a:5b:75:f8:b1:0f:
c0:d9:74:8f:1e:43:e5:cf:8b:d6:d5:33:ee:a1:a9:a4:9b:79:
fd:7a:ae:8d:c3:8c:79:ae:62:8e:49:c6:09:09:49:4f:72:25:
32:d3:c4:61:8e:d2:f2:c4:06:fc:82:b9:3a:4c:de:70:d3:2a:
7c:5c:d2:d2:ea:da:ee:db:77:04:3d:19:26:a3:42:b2:74:11:
aa:1c:65:4f:d3:87:e8:ab:80:ba:87:70:6b:2b:ae:77:86:f0:
f8:78:f3:6a:c2:cb:26:1f:69:d7:de:d6:51:b0:44:cc:b7:20:
d8:d7:16:71:e7:fe:eb:95:24:a9:51:c8:23:b6:63:30:1b:7f:
e7:83:11:fc:92:02:36:d6:dd:39:ec:52:86:7d:c4:89:7b:42:
be:60:91:9d:72:8b:fb:d0:97:af:d8:d1:95:56:ea:02:4f:0d:
b0:85:e1:d0:2a:e2:df:e7:07:69:4e:ad:31:8b:7b:32:fd:fe:
1f:98:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:52 2024 by rpki-client on console-fra.rpki-client.org