Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/wx_3VfQ0_ughZho_HqJ7wZVGEKQ.roa
File: wx_3VfQ0_ughZho_HqJ7wZVGEKQ.roa (raw, json)
Hash identifier: FswFIYmfe3ujrt4Gc1CavBIjGd3aJqNMk5l1XOiF94g=
Subject key identifier: C3:1F:F7:55:F4:34:FE:E8:21:66:1A:3F:1E:A2:7B:C1:95:46:10:A4
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 01887C4A6BDBDD7007C329FE8428B8AFDD0E
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/wx_3VfQ0_ughZho_HqJ7wZVGEKQ.roa
Signing time: Fri 02 Jun 2023 13:27:12 +0000
ROA not before: Fri 02 Jun 2023 13:27:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.69.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:4a:6b:db:dd:70:07:c3:29:fe:84:28:b8:af:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jun 2 13:27:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c31ff755f434fee821661a3f1ea27bc1954610a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2a:b6:81:97:4f:c5:76:d9:13:9a:36:39:c5:
ef:81:3c:cd:3b:65:5d:e1:e8:76:09:a6:ed:05:73:
3a:03:93:01:36:bd:fe:cb:19:74:cb:4d:24:f0:96:
3e:b4:a7:b1:be:30:11:05:66:68:84:ee:11:8f:18:
1d:47:09:1a:34:2e:e6:bf:95:1d:40:1d:1c:dd:56:
91:a8:f4:5e:07:c6:5a:d1:03:13:7b:18:e2:fc:8f:
35:7a:7f:a0:14:b4:b3:8e:c8:80:b9:fd:df:4a:73:
35:31:27:21:0a:1a:2d:3b:9d:b3:ce:85:ea:60:6c:
9c:2c:d5:c7:a0:c9:f6:e5:c8:f4:6f:32:66:32:96:
7b:31:76:94:a2:9b:23:3b:89:dc:17:e8:09:a3:51:
7d:67:9c:64:78:55:c8:88:43:ab:05:fc:ba:65:ad:
de:eb:e3:73:19:8b:7a:36:ed:dd:ef:c1:b9:14:93:
46:99:85:26:65:e7:15:36:e7:e9:85:c8:f7:db:78:
34:37:d4:d8:c4:8e:ff:a6:08:35:65:ed:18:7b:05:
85:25:5a:45:b2:14:e6:30:65:cd:c6:bc:17:c1:61:
42:37:63:0f:b9:fb:d3:4b:7f:1a:dd:d3:1c:bf:86:
38:cd:3f:82:61:cf:9b:9d:f8:f7:55:4a:d5:d8:88:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1F:F7:55:F4:34:FE:E8:21:66:1A:3F:1E:A2:7B:C1:95:46:10:A4
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/wx_3VfQ0_ughZho_HqJ7wZVGEKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.220.0/22
Signature Algorithm: sha256WithRSAEncryption
55:1b:a3:ce:37:e1:65:7e:c5:67:36:6c:ab:0b:92:4b:c0:47:
4f:f5:6d:5f:2e:38:d1:62:a8:73:27:9e:74:50:1b:03:e6:42:
3a:23:ce:dc:93:30:87:d9:c2:8d:fe:9b:99:c8:58:6a:58:c7:
03:98:b8:50:04:d9:c1:e9:3d:3a:16:0d:1a:ca:fd:e2:2a:5e:
63:3c:55:f9:06:f2:fa:02:a1:94:92:96:9d:7f:a1:77:28:35:
76:dc:e9:63:c7:dd:9a:46:a9:93:d8:ce:7a:7d:68:66:8b:f7:
43:1d:75:85:47:81:ce:0a:65:05:fe:21:94:f3:b3:3a:bb:26:
97:ad:63:51:98:c5:93:d7:2e:a7:d3:69:5e:f4:0c:93:93:75:
f6:6f:99:81:a5:05:4d:aa:7b:31:20:61:da:ab:b0:36:be:d3:
63:29:7c:e8:d7:e4:dc:5c:12:f0:9c:27:85:ee:34:a1:76:a2:
46:64:51:5a:45:c1:98:9a:82:d1:9c:6d:83:eb:9d:2b:3d:5b:
90:0e:2d:d8:b0:41:cb:4e:2a:85:e4:fa:0e:3d:dc:29:59:ee:
8c:da:62:9f:48:77:ff:db:a4:f4:7a:fe:b7:21:45:7b:35:91:
d4:14:32:11:e9:8e:69:26:ca:c0:09:e5:fb:e8:54:ac:fa:cd:
7d:c3:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:40 2024 by rpki-client on console-ams.rpki-client.org