Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/WdPMZGeBoivI9rHyfjUqF4FXsKE.roa
File: WdPMZGeBoivI9rHyfjUqF4FXsKE.roa (raw, json)
Hash identifier: MmSRWUDivhC7SO9a29Cn7yAzJB5ouAwkbq+VI1pO3to=
Subject key identifier: 59:D3:CC:64:67:81:A2:2B:C8:F6:B1:F2:7E:35:2A:17:81:57:B0:A1
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 01921DF37AAC0BEFA228828B7556512E75CF
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/WdPMZGeBoivI9rHyfjUqF4FXsKE.roa
Signing time: Mon 23 Sep 2024 08:15:48 +0000
ROA not before: Mon 23 Sep 2024 08:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15596
IP address blocks: 85.153.76.0/22 maxlen: 22
85.153.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 25 Oct 2024 14:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:f3:7a:ac:0b:ef:a2:28:82:8b:75:56:51:2e:75:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Sep 23 08:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59d3cc646781a22bc8f6b1f27e352a178157b0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:04:6b:cc:5c:a0:db:47:96:cb:8c:90:7a:
c2:1d:bd:c2:5c:11:69:07:9f:6e:a9:cf:b2:67:fd:
97:83:21:a8:c3:e5:1b:fa:f4:46:c8:7c:bd:9c:d7:
98:9b:0f:8f:30:fb:a7:26:69:be:95:11:0f:37:8d:
ef:2d:5e:aa:30:eb:fb:6c:fb:0b:c9:f5:b0:63:b2:
e7:fc:2e:92:60:e7:a7:f1:ba:bd:ce:73:5f:e9:63:
e2:60:d3:ec:47:12:76:07:b9:04:3b:57:92:a9:e9:
ad:80:30:e8:11:6e:f9:7a:4b:ff:64:18:72:58:ce:
d8:44:d0:e8:f9:be:96:ba:80:ba:6a:d6:ec:40:2b:
18:c8:88:83:48:5c:6b:fe:5f:59:07:6e:d1:cc:5f:
b6:6d:4e:01:99:02:1a:29:31:eb:e5:84:4d:a7:01:
85:f7:65:b5:76:82:41:42:42:80:bb:84:a0:84:4e:
61:94:18:98:31:68:be:59:1a:ea:07:c0:22:2f:f9:
6c:a3:49:e3:f2:85:e7:61:8e:c5:f6:2b:3e:7c:f5:
c9:8e:fb:a9:0b:8c:c1:fa:12:1d:b7:d7:eb:d0:a3:
23:27:e1:8a:6d:18:15:75:0b:47:1b:82:a2:6c:e6:
30:6e:cc:a6:6f:92:85:c3:dd:c5:d0:c7:56:ab:2e:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:CC:64:67:81:A2:2B:C8:F6:B1:F2:7E:35:2A:17:81:57:B0:A1
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/WdPMZGeBoivI9rHyfjUqF4FXsKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.76.0/22
85.153.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:9b:4e:e8:19:3f:05:28:e4:1d:ce:a2:42:90:b3:5c:e7:ef:
c8:97:ee:8c:a8:1d:0f:e5:81:d2:d5:18:e2:2f:8b:71:e1:64:
02:b1:21:b0:b3:7a:94:69:04:39:84:96:84:7e:5d:79:b0:62:
0c:27:f0:ba:21:8a:41:4d:a2:b8:5f:ec:76:1a:97:68:bb:2f:
a6:fc:4e:d3:a5:e3:44:2e:03:eb:87:11:9c:dd:3d:35:b0:2a:
44:aa:7c:9c:b8:73:da:55:a1:3f:63:45:87:68:e0:e0:63:8e:
8e:63:f7:d0:51:15:33:01:84:6c:d0:3a:1f:42:de:28:a6:d8:
24:ae:bd:93:21:62:7e:8b:09:5a:99:12:38:78:9d:ca:47:29:
4f:03:68:a0:8c:24:0e:f5:50:bf:76:ff:f6:b8:0d:c3:e8:71:
9a:60:57:51:be:8e:16:0d:e6:97:dc:a1:a1:9e:a3:75:11:19:
ae:02:7a:51:78:44:fd:92:cb:5e:ea:81:bc:96:85:97:43:0d:
90:f2:75:49:29:7b:34:ee:e6:d6:95:23:0d:d7:8d:03:e2:e6:
58:17:8f:7a:4f:47:93:b1:6e:37:07:4b:a4:f1:92:3f:b6:25:
df:e9:68:07:67:29:c9:3a:7f:e2:eb:b9:6a:54:bd:5c:9e:30:
0e:09:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 17:39:20 2024 by rpki-client on console-fra.rpki-client.org