Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/go1WbrLdraTYwFcshe7LqxKD7F0.roa
File: go1WbrLdraTYwFcshe7LqxKD7F0.roa (raw, json)
Hash identifier: ioJnyx063Gc829qGC76JmYoUdw3BlMMJJG16CFXfydM=
Subject key identifier: 82:8D:56:6E:B2:DD:AD:A4:D8:C0:57:2C:85:EE:CB:AB:12:83:EC:5D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A378C3787DDED6150EA2CAA974C13
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/go1WbrLdraTYwFcshe7LqxKD7F0.roa
Signing time: Sun 01 Jan 2023 03:05:04 +0000
ROA not before: Sun 01 Jan 2023 03:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61400
IP address blocks: 141.101.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:37:8c:37:87:dd:ed:61:50:ea:2c:aa:97:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=828d566eb2ddada4d8c0572c85eecbab1283ec5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:1d:24:a2:14:92:01:ea:aa:13:f4:86:59:
4d:21:7b:fd:ef:3d:b3:20:56:e6:82:b8:6f:c3:48:
8a:9b:0e:43:6f:8d:b8:bc:97:0a:42:95:3d:f7:5b:
74:ef:db:26:20:e8:ea:69:54:0c:d4:38:b8:ac:e4:
4b:e1:71:1d:5f:7e:79:ad:f4:64:8b:09:78:53:46:
f6:fd:1a:db:1c:5a:56:bc:26:94:53:b3:5e:fb:bd:
26:07:f8:d8:c8:bd:9d:e0:85:0c:b3:97:0b:22:41:
fc:97:2e:7b:5d:bb:3d:e1:42:b5:c4:58:e5:a2:ba:
79:ee:6f:34:0c:a8:03:72:60:e2:48:cb:18:0a:4e:
39:4f:2e:c8:a2:84:78:69:25:1c:06:dd:ce:49:12:
87:63:fd:39:a5:55:9d:3d:27:12:88:da:75:2e:8b:
66:24:78:61:65:12:a5:0d:35:64:70:11:dc:8f:fd:
26:5f:a4:0b:04:7a:8e:bd:2d:d9:c0:e7:bd:7a:65:
d3:61:09:cd:53:5d:ab:60:92:c8:52:12:62:a8:98:
44:ba:87:a9:9e:db:ac:9e:17:98:b6:f8:76:50:09:
f3:72:74:bb:cb:29:a1:e8:dc:5a:4c:f9:6c:d4:77:
81:76:60:b1:29:6b:0a:7f:ed:99:b4:c4:77:72:90:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:56:6E:B2:DD:AD:A4:D8:C0:57:2C:85:EE:CB:AB:12:83:EC:5D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/go1WbrLdraTYwFcshe7LqxKD7F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.255.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a4:f6:a0:23:13:04:97:97:1b:99:ac:df:96:e2:a4:c4:1e:
c8:87:f2:40:a5:ed:26:cb:61:1a:8f:c3:14:c8:84:a0:31:e0:
8d:14:97:6e:f5:db:00:f4:89:66:59:02:e0:a8:87:9d:37:f1:
bc:7a:0a:c5:82:e6:d8:38:cf:a3:7b:d0:af:cd:63:0e:b6:9c:
d5:f9:1d:5d:35:6c:b0:4c:47:13:4e:d7:59:63:cd:c8:74:20:
b5:c1:e1:ef:5e:d7:e5:09:1f:65:aa:9e:db:1d:6e:4c:28:97:
6b:39:0b:fb:f4:83:c0:55:c6:03:45:b3:6b:55:2d:a9:11:e4:
17:5b:9b:3b:6d:3e:bd:53:dd:93:15:74:c5:f8:65:57:6b:7d:
c6:26:0e:26:7c:1d:91:8d:61:9b:ec:a6:43:44:af:6c:bb:23:
3a:7e:41:f8:b2:ef:ee:7d:53:07:86:dc:71:b8:0a:53:6c:46:
ba:80:ec:fc:4f:9a:6d:7d:3b:68:0c:88:9d:06:0e:79:e9:34:
fa:7c:da:58:6d:ca:5b:24:35:b1:c2:f8:8e:a5:bd:6d:db:96:
66:fa:71:8b:2c:ff:0d:70:29:3f:5c:3d:3b:82:ab:65:b2:e1:
28:b6:25:2c:ad:83:db:ab:90:72:05:0d:a5:68:dc:b6:a7:cf:
0a:35:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org