Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/WGjHT5sRojU1YR4miyRxCrHamjQ.roa
File: WGjHT5sRojU1YR4miyRxCrHamjQ.roa (raw, json)
Hash identifier: 76qlB6tC7b7AfDJrBP82t0rdMe2UXv+69nDwV+8VuYs=
Subject key identifier: 58:68:C7:4F:9B:11:A2:35:35:61:1E:26:8B:24:71:0A:B1:DA:9A:34
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AE712C82CEAED597A7786028E30B7
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/WGjHT5sRojU1YR4miyRxCrHamjQ.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9162
IP address blocks: 82.179.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e7:12:c8:2c:ea:ed:59:7a:77:86:02:8e:30:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5868c74f9b11a23535611e268b24710ab1da9a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:64:6c:2c:69:0b:6a:d2:fb:8a:cd:7e:7b:
3a:d6:9f:69:dd:7e:4c:f6:9f:a6:a1:5e:6a:9c:4a:
0a:ac:1c:71:b6:cc:57:c4:d5:bc:62:1a:77:cb:cf:
10:ed:ee:63:50:cf:31:26:4c:18:68:60:f8:92:18:
41:2b:16:6d:5e:49:0a:d5:8f:67:6d:ae:2f:ec:33:
ef:ef:21:03:a1:60:50:44:e8:07:b2:b8:3c:a7:dc:
51:6f:f8:db:c2:7e:f9:14:1a:d0:15:65:6d:d3:57:
c8:89:77:e1:5f:73:c4:b2:c3:0b:88:a0:24:8e:64:
8c:70:d6:43:11:73:9b:b6:da:df:ee:40:f1:ae:d3:
0b:60:ab:98:68:a6:80:c9:73:15:9f:65:85:7b:5b:
9b:93:61:39:7a:25:91:5a:5d:d4:58:93:b8:14:99:
d5:ec:83:7a:72:c2:32:c7:93:97:b2:4f:c5:7a:a3:
2f:09:ed:84:cc:85:af:b5:ea:1b:53:f0:6b:ad:07:
56:b2:c6:8a:ab:72:7c:9b:6c:19:e8:c0:32:da:07:
fd:3c:06:84:62:4f:88:87:1b:71:5d:87:54:1d:35:
c4:7f:62:7d:3c:6b:dc:16:b0:49:d8:0f:17:d3:f9:
b3:a8:36:34:07:75:c4:62:c8:45:8c:cd:95:98:44:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:C7:4F:9B:11:A2:35:35:61:1E:26:8B:24:71:0A:B1:DA:9A:34
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/WGjHT5sRojU1YR4miyRxCrHamjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.144.0/20
Signature Algorithm: sha256WithRSAEncryption
94:6b:81:4e:1c:aa:6f:e6:49:3d:4b:be:9e:dd:40:05:6c:ca:
0d:90:8b:44:ec:89:c9:f6:a4:7b:d1:d9:7d:f8:fc:60:c2:56:
1c:29:a9:02:f2:88:47:f1:3c:49:c9:68:c1:a6:bb:a5:bc:08:
1f:63:ff:34:9a:c9:f4:64:93:ec:68:60:3f:e4:87:45:2b:40:
80:42:74:a6:8a:f4:53:55:41:00:40:e8:92:00:d6:bc:96:e2:
7b:16:0e:1b:01:7a:a3:b0:95:00:17:7c:4a:59:52:09:e4:e2:
74:37:15:ee:1e:5b:c8:d1:d5:de:15:29:27:7d:3c:9c:45:3e:
dd:e6:d9:cf:f1:e7:10:cd:8f:49:18:6c:28:a1:bd:0b:c0:6a:
55:4c:94:2a:1e:57:08:a4:0f:b8:9d:cf:d3:09:69:b3:24:93:
0f:08:d8:f2:48:48:ab:a5:ba:f3:f1:bd:b1:92:5f:b2:77:65:
00:54:bd:38:61:0b:00:9d:3b:14:8f:19:c7:44:45:70:31:6e:
0c:de:5e:5f:ab:16:36:b3:54:c4:e2:fa:31:92:1b:54:4a:88:
0a:db:8a:9d:92:6b:e6:23:5c:b5:d2:69:57:fb:da:bc:da:89:
59:e9:63:f0:88:e8:89:45:bf:de:c9:14:ef:75:73:0c:51:f9:
94:4f:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org