Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wy37QQz-Tde4UMMoUb6Gz6JZ3Sc.roa
File: wy37QQz-Tde4UMMoUb6Gz6JZ3Sc.roa (raw, json)
Hash identifier: fp8nvwKW/wxS/xwMpUiCUiDpnERpsT7I9uTiia8dMwE=
Subject key identifier: C3:2D:FB:41:0C:FE:4D:D7:B8:50:C3:28:51:BE:86:CF:A2:59:DD:27
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01856EC225A0D725AACAC8AAFC4DAEE94357
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wy37QQz-Tde4UMMoUb6Gz6JZ3Sc.roa
Signing time: Sun 01 Jan 2023 19:14:55 +0000
ROA not before: Sun 01 Jan 2023 19:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.182.198.0/23 maxlen: 23
195.182.200.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 20 Jan 2023 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:25:a0:d7:25:aa:ca:c8:aa:fc:4d:ae:e9:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 19:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c32dfb410cfe4dd7b850c32851be86cfa259dd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:32:96:2c:00:7e:ef:0e:bc:06:18:58:80:
d2:55:94:76:5f:cf:98:5c:ba:40:37:20:94:2b:ad:
01:88:f6:24:06:48:78:3f:b2:41:fa:78:52:dc:a0:
ad:14:b9:ca:eb:bd:af:a5:20:04:26:dc:84:b5:b3:
64:cd:74:4f:57:1e:ae:b3:36:e0:f1:64:1a:45:fa:
57:9f:a8:5a:98:7a:c7:d6:d4:ac:f8:14:58:b1:f3:
af:38:89:de:c3:b1:19:a7:9a:30:f2:5a:83:f1:d5:
95:cd:75:31:6c:73:e6:ee:d4:be:fc:61:83:c7:e0:
0d:5b:91:65:c5:6a:e2:7d:f5:eb:e6:02:8f:c5:09:
74:94:2a:7d:a8:03:4a:ef:fb:e1:bf:7e:0b:ae:da:
2a:74:09:d8:24:8d:a2:ee:ae:f8:7d:c1:d7:db:21:
fd:80:94:49:d0:47:af:3c:ab:62:52:6a:77:40:59:
ef:4c:32:4b:13:8a:b6:d3:ea:d2:5e:c9:fb:05:d1:
a5:e9:da:b3:f2:5b:7b:81:38:47:f3:fd:d6:cb:30:
d9:94:28:49:f1:6e:5a:97:a0:e4:2c:ee:bf:3c:21:
a2:7c:d0:e7:bd:60:1f:b7:59:f3:65:58:17:b3:50:
ad:92:05:7c:3b:4b:5d:ab:da:be:4c:23:9c:ad:97:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:FB:41:0C:FE:4D:D7:B8:50:C3:28:51:BE:86:CF:A2:59:DD:27
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wy37QQz-Tde4UMMoUb6Gz6JZ3Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.198.0-195.182.201.255
Signature Algorithm: sha256WithRSAEncryption
22:95:d7:87:48:c5:e5:18:ad:75:bd:0b:93:fb:07:92:32:b7:
90:e3:fc:05:47:60:8f:20:d3:5a:b2:a8:3e:6f:bd:0e:13:4a:
bf:4d:ca:a8:2f:f2:11:2b:64:11:e7:85:db:e5:b0:91:70:ee:
36:a7:1a:b6:81:ad:de:b2:ed:d6:d8:b6:c7:53:d9:b2:cc:b1:
84:af:f4:81:9e:3d:62:c0:54:de:1a:79:f8:7f:4c:c5:0a:f5:
c5:c7:58:85:50:f7:e4:0d:ef:1b:d9:cb:2d:4c:6a:ca:75:61:
2f:36:d7:cc:ba:0d:d6:ec:95:26:37:b1:85:9d:63:f2:39:3f:
f4:c0:da:c8:af:e1:61:c5:f7:c4:c8:ab:4c:7b:bb:1d:9e:5e:
b4:3f:5b:f8:5e:d6:09:6e:c2:ca:4d:7a:1c:33:fc:90:5d:74:
88:e9:89:d9:5a:6b:58:94:f7:77:eb:5f:40:b3:16:04:77:ba:
41:e5:de:b9:cf:cc:d6:2c:f7:f5:d5:b2:9b:9e:46:92:2a:23:
a1:11:24:fb:4a:c2:cd:24:14:f0:00:a4:33:f0:fe:0a:6d:33:
15:ae:f1:50:a5:2b:b8:e3:38:83:0c:33:f3:30:cf:74:81:69:
49:d9:a8:1e:b6:9d:51:0e:92:29:15:2c:46:03:eb:d3:6c:0d:
04:c1:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:14 2024 by rpki-client on console-ams.rpki-client.org