Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Wwi-ZZOGS4VZYFOOKaNBoh35R7U.roa
File: Wwi-ZZOGS4VZYFOOKaNBoh35R7U.roa (raw, json)
Hash identifier: 0+J0qQ02mJ92V6CsWy1ml4YmylbLGLFK0kJFKNaFcNI=
Subject key identifier: 5B:08:BE:65:93:86:4B:85:59:60:53:8E:29:A3:41:A2:1D:F9:47:B5
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01856BC1152E05AECB1ACB8F05CD36C1FBA5
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Wwi-ZZOGS4VZYFOOKaNBoh35R7U.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.145.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Jan 2023 19:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:15:2e:05:ae:cb:1a:cb:8f:05:cd:36:c1:fb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b08be6593864b855960538e29a341a21df947b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:77:70:ee:25:18:5f:58:da:13:d7:1d:e6:
3f:78:f2:d4:48:1f:34:c9:ca:92:d5:c5:3c:09:64:
67:74:73:0d:fc:bf:6a:31:44:fa:4a:cf:73:f0:99:
fc:11:85:a6:59:18:0a:b7:c3:61:f9:7c:10:5f:36:
ce:d8:9e:cc:47:81:2e:19:69:38:9f:19:f3:28:38:
cf:52:33:da:5f:bb:4b:60:21:e8:c6:d2:e3:8f:28:
38:38:b9:17:0e:7c:25:59:20:60:1f:f1:42:49:77:
e7:b6:60:4a:ab:a6:d6:95:c3:f5:4a:a6:0e:b4:4d:
f1:16:04:11:75:d0:19:ed:9d:a4:5b:74:b2:36:79:
54:4f:fc:08:3a:b3:9f:9c:57:d5:61:52:7f:80:22:
4f:4b:0c:c8:95:3a:1e:8a:a7:cf:8d:06:dd:7c:7e:
a4:37:d2:ae:6f:5d:f8:10:4b:98:79:cd:fc:aa:aa:
17:fa:df:08:99:d6:15:34:e3:f2:98:b0:99:88:5b:
df:e6:4f:f5:d4:9c:43:85:c0:2d:7e:d2:eb:ae:03:
cf:dd:41:9c:61:17:94:65:31:c4:82:8c:bc:bf:0c:
b8:e7:b9:f1:9d:65:73:91:7d:bd:a1:c5:bd:eb:b5:
9a:44:62:1c:fa:87:9d:c8:52:28:ae:57:38:d3:77:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:BE:65:93:86:4B:85:59:60:53:8E:29:A3:41:A2:1D:F9:47:B5
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Wwi-ZZOGS4VZYFOOKaNBoh35R7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:29:d6:c3:82:3a:f5:ef:b8:f0:7f:82:a2:bc:84:0c:81:ca:
f4:0d:f7:9d:62:14:c4:4a:c5:cd:e5:26:e2:f1:1c:14:d5:89:
76:d9:90:92:4c:04:d3:cf:f2:93:29:22:df:39:00:a4:20:78:
73:87:47:a3:15:d3:f8:9f:6e:d8:0d:88:52:4c:e2:f5:40:21:
2c:2e:ed:8e:a6:f5:a3:7c:a7:dc:c0:5a:03:30:9f:10:8c:03:
50:62:0b:77:2d:26:e0:96:89:d1:b0:2c:7c:d3:94:fb:db:f6:
be:98:20:e4:26:89:1e:90:6b:a2:2a:49:49:e9:c1:39:b4:1c:
47:ec:3e:ba:46:31:93:e1:95:1f:44:ee:f1:c0:f6:91:8e:23:
a4:2b:c1:54:e8:ac:02:48:86:b2:54:25:4c:11:bd:31:fe:d1:
3c:ec:01:ae:1e:71:ed:94:41:a9:a1:37:09:57:5d:43:a5:af:
41:b7:11:0d:3d:dc:41:c9:d6:dc:5d:19:f4:93:4a:36:24:08:
fc:ec:3b:3c:68:5e:fc:66:49:81:3f:0d:08:f0:73:01:5b:e0:
a0:06:f9:0e:69:f4:a2:a1:a9:c0:ec:42:81:cc:9d:86:7e:24:
37:c4:4a:11:aa:32:9c:bb:cc:ba:30:7a:e3:f9:f6:a9:01:7b:
a7:5c:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-fra.rpki-client.org