Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/WRIySp7YDa0fgX6K2WmW7Feja8w.roa
File: WRIySp7YDa0fgX6K2WmW7Feja8w.roa (raw, json)
Hash identifier: enI0iiFZBD/g5oGb66VIgWBSYIwUVHcbvTG9lFv+uIo=
Subject key identifier: 59:12:32:4A:9E:D8:0D:AD:1F:81:7E:8A:D9:69:96:EC:57:A3:6B:CC
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 01856B934C0F88BB928D35A7622F8940455E
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/WRIySp7YDa0fgX6K2WmW7Feja8w.roa
Signing time: Sun 01 Jan 2023 04:24:53 +0000
ROA not before: Sun 01 Jan 2023 04:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20647
IP address blocks: 2.57.160.0/22 maxlen: 22
2a09:ce40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:4c:0f:88:bb:92:8d:35:a7:62:2f:89:40:45:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jan 1 04:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5912324a9ed80dad1f817e8ad96996ec57a36bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:7f:eb:c5:a2:fe:ad:81:37:31:80:0e:f2:
a1:8a:ff:ca:0c:0d:ab:d9:4d:4e:c4:ae:cb:7c:a8:
36:50:3c:db:89:b1:50:04:e5:50:53:53:0a:ed:91:
64:9e:65:fc:78:4a:cf:05:34:96:6e:f7:ee:ea:ec:
41:6a:f2:9c:1e:46:5f:ac:45:f9:66:d2:89:d2:3e:
b2:98:fe:0e:b6:71:3b:1e:0b:cf:69:1b:43:a3:86:
05:cf:89:16:c7:96:89:ee:ce:9f:44:ea:20:52:7e:
6a:ba:dd:cb:aa:6e:7c:98:25:fa:7e:76:e0:6e:d2:
6c:ff:dd:cf:ea:70:46:31:91:94:93:52:d9:0c:1c:
c7:26:67:82:b7:40:cf:d0:71:e8:63:23:2f:5c:32:
90:b3:57:d6:88:dd:c2:93:6b:9b:be:77:e0:08:22:
82:8c:7d:96:dd:45:3e:f9:f1:83:53:80:2c:1e:32:
64:b4:a6:72:74:9c:55:7e:91:02:84:16:24:65:b1:
ab:b8:da:59:bb:d8:ce:7e:25:18:15:09:86:29:01:
b4:8a:a3:aa:88:02:bb:91:58:e5:d9:7f:c4:48:5a:
a8:80:13:a4:28:93:47:0b:72:70:fd:34:2a:e9:fa:
50:6c:2e:0a:c2:c6:28:d2:10:15:14:db:a5:eb:3a:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:32:4A:9E:D8:0D:AD:1F:81:7E:8A:D9:69:96:EC:57:A3:6B:CC
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/WRIySp7YDa0fgX6K2WmW7Feja8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.160.0/22
IPv6:
2a09:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
aa:4e:4c:62:a1:9a:6c:f4:b4:21:7b:84:db:dc:ce:da:c8:26:
84:c5:ca:e8:8e:3e:45:79:42:d5:c8:e5:38:54:5e:45:e5:a3:
4d:ae:7e:c3:d9:ac:9d:72:8a:67:02:db:08:94:f4:ea:0d:8f:
76:50:ce:e9:4f:a3:6f:62:54:bb:4f:b6:67:54:4f:97:70:3a:
2f:9d:2f:86:e9:47:8d:96:3a:81:7f:bd:c7:72:63:59:f5:7f:
09:a4:c2:f9:11:14:b9:e5:b6:fd:f7:62:74:15:ae:41:67:09:
9d:05:e7:e8:50:bd:27:c3:59:40:fb:04:1f:54:9f:c3:97:5a:
4d:38:5a:fa:6d:0b:0c:a4:cd:08:62:8c:d1:b7:70:eb:ff:7f:
a4:2a:66:14:d6:49:c3:a1:10:6f:97:ec:9b:10:12:c5:b9:86:
fc:ed:c8:ee:2f:b4:ca:5d:77:d2:61:4c:d4:10:01:57:d6:73:
df:83:0b:13:75:0b:9f:c2:b1:43:ad:c3:b4:be:d0:78:94:66:
e4:62:7e:a4:a5:ef:24:bb:9e:2a:73:4a:d1:f9:7b:a9:fd:93:
f1:30:80:04:5a:9d:e4:d0:55:2c:54:48:2d:bd:c1:8c:f4:4f:
a0:7f:85:1f:bc:f6:43:3c:31:32:66:4f:b6:08:e9:a2:9f:fe:
1d:4c:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:17 2024 by rpki-client on console-ams.rpki-client.org