Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/WG1rETz5_AgLB-Av3kEttIqFk4M.roa
File: WG1rETz5_AgLB-Av3kEttIqFk4M.roa (raw, json)
Hash identifier: uerXUDo7qsLHzKUVUVOY560/vrcdydhcphIKWuBGMgA=
Subject key identifier: 58:6D:6B:11:3C:F9:FC:08:0B:07:E0:2F:DE:41:2D:B4:8A:85:93:83
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 0186A7DF63DBB7A36E8059EEEA360E5187D2
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/WG1rETz5_AgLB-Av3kEttIqFk4M.roa
Signing time: Fri 03 Mar 2023 14:28:00 +0000
ROA not before: Fri 03 Mar 2023 14:28:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31537
IP address blocks: 185.169.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:df:63:db:b7:a3:6e:80:59:ee:ea:36:0e:51:87:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Mar 3 14:28:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=586d6b113cf9fc080b07e02fde412db48a859383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:46:a2:56:6f:f6:6a:c8:a1:44:c0:54:f9:
1c:fc:c9:23:cc:08:80:16:f8:bb:be:5c:6a:82:f0:
c6:97:58:44:c2:79:8d:eb:cb:84:77:3d:ad:3d:e7:
23:d1:72:06:30:08:ee:8a:53:33:f5:6b:fc:c4:5f:
4e:db:2e:3a:5c:f2:68:49:23:5c:bb:c1:1d:37:54:
38:6b:7f:08:7d:e6:85:2f:d2:d4:51:5f:39:9a:97:
81:32:47:fa:6d:7e:00:9f:77:a4:8f:4a:d8:2e:28:
85:ab:e3:c5:17:90:20:db:b3:77:e2:d1:cf:0a:b1:
7c:a7:c1:cb:ef:1f:8d:58:a8:ff:df:fa:95:f7:27:
f8:1c:6f:83:0a:53:ab:30:66:cb:84:1b:6b:3d:e7:
2c:5a:9f:4d:70:2c:c2:5c:5e:3a:5b:a6:77:e6:8f:
cd:fb:e5:b3:20:31:1c:fc:a5:5b:dc:92:85:8a:49:
57:06:90:34:25:4e:c1:79:b0:e7:27:9d:e3:e0:a1:
60:00:ff:83:dc:93:cf:a7:6f:f3:66:fc:fa:0b:b6:
62:c8:95:74:6a:99:e4:79:d1:75:ae:cc:24:f3:68:
04:95:ca:b0:98:16:fe:32:db:31:b4:3f:77:c0:97:
2f:62:e5:d8:f6:14:89:fc:c4:3f:dc:c6:89:c9:28:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:6B:11:3C:F9:FC:08:0B:07:E0:2F:DE:41:2D:B4:8A:85:93:83
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/WG1rETz5_AgLB-Av3kEttIqFk4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c7:15:d5:9a:f0:e7:3a:3f:ac:34:be:0e:63:54:2c:4c:56:
5b:55:aa:2e:89:44:17:dc:fa:23:5b:b3:fe:c4:4f:f1:de:f9:
28:08:4e:5b:6b:f6:4c:65:1b:ec:d3:21:ad:e7:72:ec:c6:d8:
16:66:25:a8:54:0a:52:33:8c:e5:f4:4e:58:62:0e:82:7d:2d:
d6:71:75:54:14:73:50:32:b7:36:f5:44:b6:05:46:e9:63:94:
51:bb:1f:26:62:48:76:c6:6c:44:f7:8d:eb:7f:60:86:27:85:
e6:16:f0:a1:17:e3:35:2d:54:4d:c4:c5:76:1c:96:bd:8e:fa:
c2:92:79:c1:2a:5a:3b:d2:8a:f7:e4:43:d5:dd:94:20:b4:c0:
5d:6b:18:be:2c:8f:3b:01:06:0a:27:98:fc:54:8d:e3:58:7a:
8c:b5:50:61:e4:3e:81:53:28:ec:0a:45:7d:e3:7a:9e:1f:04:
3a:55:c0:2b:89:bf:67:ec:1f:d5:d3:69:52:c7:60:a0:48:c5:
2e:79:0e:e4:fa:6e:1a:1c:b1:79:23:e2:85:89:52:51:c1:97:
1c:eb:6c:29:bc:b0:9f:26:f8:ea:b4:32:b0:8c:d0:36:40:be:
26:38:ac:ab:0c:ad:2e:fc:07:eb:3c:a0:3e:96:f9:5c:c0:8b:
48:73:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:55 2024 by rpki-client on console-ams.rpki-client.org