Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/wwX6Lz3RMK0Bz9CCGUeJiux9xjk.roa
File: wwX6Lz3RMK0Bz9CCGUeJiux9xjk.roa (raw, json)
Hash identifier: xjQKFai8AO1PnVxWPo2xs6bhozBdMwFeCwBs5fthsoM=
Subject key identifier: C3:05:FA:2F:3D:D1:30:AD:01:CF:D0:82:19:47:89:8A:EC:7D:C6:39
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0188C84EBF5BCA832B78BAF643D1BB4D2ED5
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/wwX6Lz3RMK0Bz9CCGUeJiux9xjk.roa
Signing time: Sat 17 Jun 2023 07:43:03 +0000
ROA not before: Sat 17 Jun 2023 07:43:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 185.138.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:4e:bf:5b:ca:83:2b:78:ba:f6:43:d1:bb:4d:2e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 17 07:43:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c305fa2f3dd130ad01cfd0821947898aec7dc639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:9d:bd:2d:95:d1:c3:eb:65:b0:1f:ca:2b:
5c:29:b8:99:87:fa:af:93:88:57:be:99:ff:ec:8e:
a2:d6:a4:63:70:b1:9d:ff:96:e2:e7:9f:3f:50:af:
65:49:6e:bf:20:49:55:b7:15:02:a2:ae:44:5e:fe:
6d:ad:5c:fc:90:7b:cd:67:16:25:65:c7:cd:12:26:
49:71:c3:3c:2e:10:ad:d2:5d:96:ce:6e:07:5f:22:
1e:49:92:56:39:f4:fe:f7:ae:23:2e:0c:e3:fd:a8:
bb:d4:36:f8:2f:55:4d:23:a9:88:72:cf:d9:3f:35:
47:67:54:e9:e9:66:5b:80:15:68:30:86:6b:7e:19:
e1:7a:8a:a5:41:84:df:33:a5:80:bb:87:63:62:99:
61:30:95:d4:c8:0b:6e:a3:4a:80:6e:5d:74:fc:63:
ea:fd:37:b1:22:e6:bc:1d:a0:ea:7d:be:28:ce:4b:
0f:c0:d9:ad:71:c4:d5:10:e2:46:86:12:d9:30:90:
ea:bb:a5:f0:11:a7:5b:72:8e:77:39:45:c5:56:1c:
41:fd:9a:c0:e8:77:70:dc:f1:d9:0c:46:87:e6:c7:
74:dd:62:0d:30:38:b6:9a:f8:5b:94:a0:30:91:9b:
eb:4c:4e:af:b2:dd:ca:e0:9b:f3:a2:00:07:4d:d7:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:FA:2F:3D:D1:30:AD:01:CF:D0:82:19:47:89:8A:EC:7D:C6:39
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/wwX6Lz3RMK0Bz9CCGUeJiux9xjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:57:0e:22:47:8f:97:c2:ae:26:b3:c9:91:41:dc:bb:c2:
97:9b:63:28:7b:f6:af:74:66:7c:ce:6c:6e:c2:19:99:34:44:
f1:0c:3a:c4:41:4a:7b:98:84:4a:4c:24:04:8c:23:0f:58:7d:
b9:4e:65:ce:43:04:cb:57:8d:cc:41:74:94:bf:f8:ca:69:a2:
e1:a8:75:8e:6b:9a:d8:83:9f:c3:99:61:a9:b8:f3:ad:9e:f4:
77:0f:01:69:23:ca:3e:ac:32:f1:5b:12:45:d3:bb:15:98:25:
0f:d3:ed:30:d5:18:63:20:cf:5d:13:59:74:7d:e8:6e:96:9c:
54:b9:f2:cb:78:d4:04:d6:3a:fc:3f:95:81:39:27:58:a2:91:
48:f3:e8:e7:b3:63:be:1b:7a:75:e4:13:37:46:33:8a:8c:28:
29:29:f2:a9:a0:56:ed:cb:a9:de:a8:06:33:19:fa:fb:13:b8:
ed:ed:1e:aa:e4:74:07:a7:c1:38:1d:42:29:a6:5c:0d:f1:46:
78:92:ac:60:ce:65:d5:f0:b5:c8:33:24:1b:58:e2:24:1b:85:
88:c8:b0:92:c9:c4:8a:6e:b4:f7:18:c1:58:d7:f6:8d:9b:e0:
06:78:20:aa:cd:9c:08:d8:14:6b:cf:b6:dc:a7:8d:31:d2:96:
c4:3f:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:21 2024 by rpki-client on console-fra.rpki-client.org