Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/WOdDSIE_7HWhmCzu_qBpkZuQdJc.roa
File: WOdDSIE_7HWhmCzu_qBpkZuQdJc.roa (raw, json)
Hash identifier: GaArrQywSCXbPcWhsK7foc2aq93KwwRfYf1rwRPs0Ms=
Subject key identifier: 58:E7:43:48:81:3F:EC:75:A1:98:2C:EE:FE:A0:69:91:9B:90:74:97
Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial: 01856F429515D4A7A9926A303FA8B1F80451
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/WOdDSIE_7HWhmCzu_qBpkZuQdJc.roa
Signing time: Sun 01 Jan 2023 21:35:12 +0000
ROA not before: Sun 01 Jan 2023 21:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203443
IP address blocks: 185.134.48.0/22 maxlen: 22
2a07:6800::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:95:15:d4:a7:a9:92:6a:30:3f:a8:b1:f8:04:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Validity
Not Before: Jan 1 21:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58e74348813fec75a1982ceefea069919b907497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:47:16:ff:04:61:03:e8:e0:ec:b4:4a:cb:
a2:1a:a6:b9:1f:24:8d:2d:99:07:b7:00:70:29:b8:
78:e1:b3:71:a0:03:ef:38:88:04:56:c0:86:06:af:
bc:ea:db:0b:4e:27:58:30:4d:a6:da:24:9e:a1:5d:
69:8d:0a:22:8f:e6:36:72:1b:60:3c:cf:7b:f3:cd:
6e:fb:ed:91:60:dd:1d:b9:94:eb:26:0d:9a:d6:d8:
ee:d1:10:4d:d5:86:8d:34:e2:86:8e:4c:a2:35:59:
06:63:da:9f:26:37:66:f9:c9:03:ce:48:90:0c:fb:
6a:97:c2:3c:62:49:1e:75:ce:c4:97:c0:1f:ce:5e:
f5:5c:ef:56:0d:63:1d:6e:be:ec:c6:fe:d3:06:db:
b8:39:57:68:11:60:65:6b:2d:4d:e9:c7:1b:06:fd:
14:86:4b:57:4b:6d:e8:67:e3:80:72:4e:c2:ca:6e:
6c:27:5f:b7:e0:03:86:6f:a8:0c:d7:96:55:b0:f2:
87:b1:34:d1:dd:d7:00:d3:80:a8:13:55:57:08:c5:
af:71:33:5d:f7:35:5d:f0:7b:08:1a:6c:4f:d2:bd:
1e:cc:76:41:d1:05:c4:ff:2c:59:b9:c7:04:92:52:
78:24:e4:e2:a4:e5:65:23:39:36:70:bd:ea:7c:4f:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:43:48:81:3F:EC:75:A1:98:2C:EE:FE:A0:69:91:9B:90:74:97
X509v3 Authority Key Identifier:
keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/WOdDSIE_7HWhmCzu_qBpkZuQdJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.48.0/22
IPv6:
2a07:6800::/29
Signature Algorithm: sha256WithRSAEncryption
2c:4f:e9:e2:3d:a9:7e:ea:21:ae:f8:37:ec:d9:2d:ab:05:d6:
08:10:eb:69:f3:47:d9:25:fd:fd:6b:10:54:7e:28:d4:c0:76:
a3:32:b1:0e:43:aa:5f:71:12:68:e8:19:33:9d:f7:f2:31:32:
00:eb:36:ac:fd:fb:64:7f:2c:40:90:d8:88:f1:03:e6:8f:c7:
49:6d:d2:71:4a:c4:05:fd:f3:3f:79:7f:50:7f:58:0f:bc:6f:
9d:c4:aa:63:9c:a3:72:77:6b:2a:9a:f5:55:8b:8f:b4:e4:b3:
ce:95:b5:1f:b3:1d:08:70:ec:3e:5b:ed:86:0b:76:5a:7c:fb:
54:72:c0:79:37:f3:0b:c2:87:17:51:36:b0:70:77:b6:51:a3:
ff:0c:bd:9a:b3:6e:af:5e:3f:69:ef:69:93:bb:aa:6c:73:17:
ff:57:ef:47:2a:20:9e:ce:04:82:9a:b8:22:f8:e6:9d:a4:3c:
23:1d:e3:d6:10:a7:40:4a:47:b7:09:43:3c:f1:c1:7f:1b:91:
06:18:58:a6:93:d0:8d:a0:63:b0:b6:8f:b1:a3:6b:d3:87:b7:
64:d4:73:9c:bc:47:d9:82:a2:41:26:20:d7:c8:d3:34:65:d2:
78:fc:18:cd:39:ee:ac:69:87:4c:12:dc:fb:25:b4:df:be:01:
94:1f:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:13 2024 by rpki-client on console-fra.rpki-client.org