Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/wLZcwMtxu6OwJQXQI1Jiz58ewYY.roa
File: wLZcwMtxu6OwJQXQI1Jiz58ewYY.roa (raw, json)
Hash identifier: tvKI/HrXZ3qMam1BU4E1s9WswwQrecbunV6IN9kxcvg=
Subject key identifier: C0:B6:5C:C0:CB:71:BB:A3:B0:25:05:D0:23:52:62:CF:9F:1E:C1:86
Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial: 01856FE728F0ABAA4E5504D2F608F1300195
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/wLZcwMtxu6OwJQXQI1Jiz58ewYY.roa
Signing time: Mon 02 Jan 2023 00:34:58 +0000
ROA not before: Mon 02 Jan 2023 00:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.91.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:28:f0:ab:aa:4e:55:04:d2:f6:08:f1:30:01:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Validity
Not Before: Jan 2 00:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b65cc0cb71bba3b02505d0235262cf9f1ec186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:95:60:b3:be:6f:f5:0b:2b:a0:ee:84:2a:
e6:52:07:79:1c:5e:07:6f:42:da:7c:8c:36:76:a2:
6b:0c:f8:5f:67:07:9c:6a:42:51:01:26:c5:49:bd:
1a:8a:ec:99:9c:5e:68:18:35:fb:f0:22:8f:15:4b:
16:f6:6f:87:b6:45:4f:60:7b:00:40:d7:10:78:80:
6a:c7:29:91:e6:11:23:b9:fe:49:72:f0:ca:8f:bd:
1d:24:da:0e:2a:9b:ae:89:22:5a:85:70:d0:77:06:
15:08:46:c7:43:65:14:1b:2c:90:6c:9f:0b:45:58:
1b:84:43:15:f1:71:1a:1d:de:62:43:bd:ec:3e:e4:
42:0a:55:30:a2:46:fb:f7:32:b4:eb:1a:a4:6c:5e:
1d:88:2b:48:83:d7:65:72:91:2f:5d:c4:e2:59:12:
58:62:7f:e8:93:db:51:98:2d:f3:55:0e:a2:5d:0a:
73:ff:5a:72:49:18:b2:49:95:4a:33:2e:11:0f:85:
cc:94:16:9c:21:11:dc:ad:d0:06:3e:e9:8f:54:0d:
7e:ad:a3:27:d7:5d:38:72:0a:05:de:09:6a:fc:83:
c0:72:e1:69:9a:2e:be:61:4b:d0:a2:bd:36:7c:d2:
fe:c1:ab:61:9f:42:f6:c8:73:7f:c2:04:5e:b2:dd:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:5C:C0:CB:71:BB:A3:B0:25:05:D0:23:52:62:CF:9F:1E:C1:86
X509v3 Authority Key Identifier:
keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/wLZcwMtxu6OwJQXQI1Jiz58ewYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:4c:4c:fe:a0:72:08:1c:01:ce:39:15:08:f1:19:2d:d0:e1:
23:5a:c2:dd:5e:dc:e9:90:fc:3b:49:7e:00:4b:03:81:9d:ec:
b7:f1:56:e1:00:34:6d:f6:36:9a:86:17:2e:5f:e2:56:9f:52:
14:b8:3a:f3:bc:b2:3c:b0:4b:58:bd:7f:8d:a4:32:e0:87:84:
83:f8:1d:12:bc:23:d9:20:9c:a5:6c:a9:f1:e0:ab:3e:b8:7d:
f9:80:6d:f9:d4:fa:8a:92:29:b6:ef:2c:f9:1f:86:14:d5:15:
c9:3a:c4:b6:8f:95:03:95:df:8f:d8:e0:03:33:a5:25:1a:36:
e6:64:07:6d:34:e0:54:62:a1:58:70:4c:e1:f9:02:eb:53:1f:
fc:e0:95:5a:8f:88:7e:15:bf:43:6f:65:87:f1:80:89:72:a5:
c2:4f:84:fb:f5:81:f7:b8:ff:8e:9a:09:2d:f3:13:5f:e9:c8:
51:43:c0:d3:1a:70:d6:4b:bf:12:dd:8c:4d:e6:34:bb:aa:7b:
03:da:cc:d3:b6:0d:07:49:d0:18:58:58:df:e2:e5:73:8f:d8:
17:ca:8e:5a:ca:19:82:96:07:8d:0b:05:aa:f9:30:e6:64:f3:
5d:9e:22:eb:c0:a7:86:03:1a:fd:08:d2:20:e5:a3:dd:74:b2:
ef:07:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org