Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WuVJxWDGBlQOa8qlvfRLmaSTkI8.roa
File: WuVJxWDGBlQOa8qlvfRLmaSTkI8.roa (raw, json)
Hash identifier: 7WoKPiZcd9cDSAJiqkHXna4ELO0SnmXb5SaTxi+SPg8=
Subject key identifier: 5A:E5:49:C5:60:C6:06:54:0E:6B:CA:A5:BD:F4:4B:99:A4:93:90:8F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01865AAC29CDEE3FC2570354D4ECD2156A97
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WuVJxWDGBlQOa8qlvfRLmaSTkI8.roa
Signing time: Thu 16 Feb 2023 14:41:17 +0000
ROA not before: Thu 16 Feb 2023 14:41:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59903
IP address blocks: 141.101.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 15:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:ac:29:cd:ee:3f:c2:57:03:54:d4:ec:d2:15:6a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Feb 16 14:41:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae549c560c606540e6bcaa5bdf44b99a493908f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:9b:06:8a:c1:39:83:84:f8:10:24:68:fc:
d7:6d:f6:92:0c:a9:1a:d7:93:6e:d7:fe:88:5a:7d:
4c:9a:87:94:d9:52:f1:ed:d6:70:c5:b3:77:80:93:
ba:14:4f:f1:0e:72:be:db:c8:43:af:8b:88:26:99:
10:42:d4:fa:3b:ad:19:90:1d:63:ad:94:a1:f1:13:
0f:ed:5a:cf:31:7c:b8:ac:c3:c6:07:cb:fd:e7:35:
ae:14:db:02:3d:19:8f:4a:e1:3a:d4:45:25:83:f0:
d1:77:33:b8:92:7e:08:02:d1:3b:5a:37:fe:81:d7:
89:87:71:57:df:c1:2b:cc:61:82:61:9c:c8:b1:5c:
60:d5:45:a1:b7:61:86:f5:da:9a:e4:8f:2c:e1:9c:
f7:c0:b4:bb:95:4b:86:fb:a1:d5:c5:57:fa:4e:12:
d3:13:f4:fd:20:18:5d:7e:d2:56:d0:7b:ec:4c:da:
53:44:77:44:14:55:e4:bf:23:23:7e:80:2e:5f:0b:
09:2d:c4:d0:2e:f3:49:10:7a:e4:8f:2f:51:64:7c:
2b:22:86:55:46:0e:19:78:a4:98:b0:fc:04:83:d3:
9b:8f:83:57:fc:4e:e3:65:16:eb:a0:70:3c:e0:00:
96:33:25:57:75:19:ef:51:9a:09:00:24:18:c9:cb:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:49:C5:60:C6:06:54:0E:6B:CA:A5:BD:F4:4B:99:A4:93:90:8F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WuVJxWDGBlQOa8qlvfRLmaSTkI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
43:6e:77:c6:d5:8f:15:02:44:15:14:48:c3:5b:3c:47:8d:53:
c1:01:75:07:59:7d:5a:bd:f9:0e:dd:b5:ad:96:cd:2c:c7:ea:
18:8e:11:65:05:39:3b:84:dc:40:4f:1c:10:1a:59:15:b6:bf:
07:68:ea:8e:71:d8:a7:8c:54:54:88:eb:2f:68:03:78:fa:fa:
d3:b6:b2:19:19:48:6b:73:20:db:b4:ba:46:95:ee:50:bc:8b:
b3:fd:e0:19:f0:3d:64:bd:92:5e:28:41:0f:10:96:53:3a:9a:
1f:61:cf:f4:0a:83:89:73:43:62:35:cb:e1:fd:72:e6:8e:e5:
95:46:53:c1:ed:68:d5:5f:85:36:92:ea:38:0c:01:f4:e5:73:
33:5c:57:b6:a4:22:6e:94:05:de:83:a6:1a:f5:66:2d:29:4d:
cc:67:9c:a2:55:f2:d2:0e:29:5e:69:4c:eb:8d:2e:bf:0c:48:
80:ec:cc:61:94:d5:3a:58:ae:39:41:83:e1:c9:79:94:a6:6d:
63:63:fa:eb:56:1e:45:d4:e1:c1:06:32:d9:c4:80:e5:49:52:
20:43:4a:b6:10:e5:95:27:68:8e:49:c6:56:75:2d:33:55:b1:
3d:e8:66:9d:61:4e:df:ba:a3:ec:53:af:ec:65:93:f8:f4:0e:
45:01:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org