Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/WXDgXSurMNIkq7KxfV8OcgYlNxY.roa
File: WXDgXSurMNIkq7KxfV8OcgYlNxY.roa (raw, json)
Hash identifier: yjEzCfV6oqgEehbtRgtdIc745nlIZ3JdP4mgbynl+RA=
Subject key identifier: 59:70:E0:5D:2B:AB:30:D2:24:AB:B2:B1:7D:5F:0E:72:06:25:37:16
Certificate issuer: /CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Certificate serial: 018BAADFD6484A1508F9DAA5D8C58275D1F2
Authority key identifier: 18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/WXDgXSurMNIkq7KxfV8OcgYlNxY.roa
Signing time: Tue 07 Nov 2023 17:41:17 +0000
ROA not before: Tue 07 Nov 2023 17:41:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48685
IP address blocks: 94.250.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:df:d6:48:4a:15:08:f9:da:a5:d8:c5:82:75:d1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Validity
Not Before: Nov 7 17:41:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5970e05d2bab30d224abb2b17d5f0e7206253716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:87:50:bb:ac:8b:1b:c5:1d:ea:5d:bf:d3:
48:f6:f7:23:0b:97:2f:a0:71:27:45:43:3f:37:69:
00:c1:11:2c:e5:3d:09:78:78:b2:b8:c6:09:ea:96:
13:3f:20:12:e1:7e:68:07:96:68:21:86:08:72:71:
84:bf:7b:64:d8:5d:17:35:80:6a:c1:d2:28:48:89:
d6:0f:83:86:43:7e:df:03:9c:b4:b2:53:28:a5:7c:
0f:5f:9c:92:60:ca:6f:12:72:32:cf:fc:58:d9:29:
10:36:e1:fa:b2:5d:65:b5:7a:b8:4a:55:17:cf:76:
43:19:b0:3b:b5:84:c7:12:4c:29:1d:61:a5:64:3c:
ee:1d:4b:7e:d0:ce:4a:64:09:da:fa:ca:c4:4d:5e:
8a:b6:ad:d2:f6:d5:cc:9c:fd:0c:89:31:61:48:23:
8c:18:be:49:e2:a2:f4:4f:78:68:bb:45:ba:60:10:
60:6e:54:0e:e6:82:2d:a7:9b:af:66:b5:6c:97:a5:
40:f4:57:e3:fe:f8:e2:b6:bd:c5:a7:ff:40:cb:b4:
f3:c0:25:a6:e4:92:8b:6a:a2:cc:57:d1:89:3c:fe:
ef:01:b1:ae:af:c6:3c:02:2d:95:ea:3c:3a:0e:86:
0f:c9:9a:6d:27:4c:5a:26:0f:aa:bb:4e:9b:fd:1b:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:E0:5D:2B:AB:30:D2:24:AB:B2:B1:7D:5F:0E:72:06:25:37:16
X509v3 Authority Key Identifier:
keyid:18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/WXDgXSurMNIkq7KxfV8OcgYlNxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.244.0/23
Signature Algorithm: sha256WithRSAEncryption
31:d4:75:5c:2b:19:d5:32:10:31:84:1c:3f:be:c0:c0:da:1f:
5a:49:35:62:a5:75:89:ee:5f:31:c2:6d:9f:39:49:1f:23:9d:
0b:5d:45:42:42:69:7e:7d:90:e9:d4:48:ce:11:2b:af:81:f3:
5f:a2:1f:59:be:59:4d:fa:4f:67:ba:54:44:8c:28:91:de:5b:
2f:94:12:57:a4:d7:39:92:f2:af:92:b9:cf:89:f3:81:55:06:
67:77:c1:6e:8f:c1:10:93:8b:63:f3:d2:82:39:81:70:bc:7c:
60:57:cc:f4:24:dc:b6:bd:00:7a:99:7c:19:ea:2b:ca:b4:96:
cf:5e:81:05:36:97:ca:3c:5a:68:4c:61:9e:23:92:9f:09:6e:
d6:c1:17:53:88:15:2d:c3:6b:7b:c7:79:cf:b3:a0:04:f2:c9:
4b:1e:7e:ef:a7:db:c0:8a:6e:1e:a1:ce:8a:f3:6b:a3:3e:fb:
21:d4:72:33:0e:7f:2e:51:11:3a:3c:3f:50:4f:7e:04:84:81:
22:22:cf:55:54:25:3f:31:d3:31:e6:d0:24:4a:22:9c:fe:95:
a3:3b:a4:62:d0:63:f6:4f:e5:1a:c6:95:75:9b:0f:b9:14:84:
aa:cf:2f:e3:02:71:da:6a:31:98:4e:94:f8:5b:c7:05:9e:75:
15:bf:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:27 2024 by rpki-client on console-ams.rpki-client.org