Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Wmk4n1zaHIvmjTxM57N0E3kWuyM.roa
File: Wmk4n1zaHIvmjTxM57N0E3kWuyM.roa (raw, json)
Hash identifier: NJsXBZKs5zBETfZT3haiui5B5wfv60y5Vdnbi22HL34=
Subject key identifier: 5A:69:38:9F:5C:DA:1C:8B:E6:8D:3C:4C:E7:B3:74:13:79:16:BB:23
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DC724041D28F26F5EBEAB4FD8F51D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Wmk4n1zaHIvmjTxM57N0E3kWuyM.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6134
IP address blocks: 176.113.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c7:24:04:1d:28:f2:6f:5e:be:ab:4f:d8:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a69389f5cda1c8be68d3c4ce7b374137916bb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:81:c2:fa:95:aa:88:c1:c7:74:00:8b:4d:
f2:d9:93:e9:d9:dd:46:19:95:ee:e8:76:ce:b4:93:
15:50:6d:c6:09:81:89:34:f7:e1:6c:e1:83:c9:fb:
59:da:00:87:fa:d2:ec:02:b0:8f:c5:d3:e5:26:c1:
98:dd:43:ae:4e:16:a9:74:a9:5e:aa:24:94:be:f2:
b3:6d:7f:56:c7:7c:34:4c:2e:39:16:41:0c:10:69:
7b:26:b1:7e:3b:ed:82:ec:5f:d8:2c:fe:02:2d:6c:
ed:af:e6:c3:12:fa:02:75:93:ba:8c:36:2f:1f:e3:
60:68:71:59:89:ce:2e:5c:b9:0a:ae:27:7c:c5:e2:
f0:89:e6:ff:23:bc:58:88:2c:3d:64:00:03:58:95:
ec:84:f3:18:7e:9d:bb:e4:17:39:02:b5:2c:51:d2:
d0:32:47:d7:5d:b2:b6:bf:98:11:d9:70:3e:6c:6e:
c9:cd:fc:87:40:2d:09:c8:e3:bc:cc:a5:fe:d1:9d:
86:a7:92:90:c9:86:17:10:69:9b:9c:0d:66:57:9d:
c2:cd:df:b4:77:0c:3e:d0:87:6a:03:a9:2b:32:86:
8c:46:02:d2:46:3c:12:37:7e:6a:8a:f5:9e:f6:e2:
12:f6:04:4d:fb:e6:b1:e6:b6:4f:bb:fb:c3:cf:a1:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:38:9F:5C:DA:1C:8B:E6:8D:3C:4C:E7:B3:74:13:79:16:BB:23
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Wmk4n1zaHIvmjTxM57N0E3kWuyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.68.0/22
Signature Algorithm: sha256WithRSAEncryption
19:13:8b:c5:28:a5:d6:ee:a6:e4:7b:32:23:dd:bc:aa:b6:be:
9a:d2:98:bc:2a:c3:d1:27:7d:5a:38:e2:2d:97:04:5a:6c:10:
e1:41:96:92:9e:49:19:bf:51:1b:86:5e:d0:44:cd:5f:1d:e0:
ca:3d:52:33:93:d7:3d:6c:fd:d7:d9:7d:a1:d1:d4:f7:a1:bd:
bf:12:2b:ad:59:96:f5:b7:d9:11:f6:03:7e:8e:28:3a:3d:31:
d6:50:3a:70:33:49:50:52:2f:33:b9:69:95:89:5f:1b:ba:b1:
d7:19:51:34:32:8b:1b:84:e1:6f:5c:c3:a8:32:05:77:b1:0c:
6b:cb:da:45:9d:fa:67:5d:9e:4e:f8:89:02:b3:d9:1c:65:17:
ae:80:3f:ee:ec:90:ba:9a:cb:aa:84:d9:7e:65:95:2b:29:e0:
f4:c4:5d:ad:af:2e:5f:4a:31:ec:20:f7:65:98:b5:99:eb:b4:
35:87:70:1f:19:f0:6c:79:79:41:4b:ba:c7:ce:9a:85:b2:84:
29:3c:90:dc:10:62:7b:c2:b6:43:0e:6e:73:ce:1b:f3:72:c4:
79:5d:18:54:a8:12:59:f8:fe:f9:1c:a9:da:18:1d:de:52:18:
59:82:87:a0:03:7c:a3:4a:ad:75:b3:3d:83:65:d4:18:c2:44:
66:7b:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:42 2024 by rpki-client on console-ams.rpki-client.org