Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/WpBB2es3XAG_WBA6fg_sXGEvnTY.roa
File: WpBB2es3XAG_WBA6fg_sXGEvnTY.roa (raw, json)
Hash identifier: VsqZ0v1ROuYY+UMarZUkUHo56kflQgTnafHtJXjxm7s=
Subject key identifier: 5A:90:41:D9:EB:37:5C:01:BF:58:10:3A:7E:0F:EC:5C:61:2F:9D:36
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 01856F38F9AFA7BC9C5575033B57A9541DFC
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/WpBB2es3XAG_WBA6fg_sXGEvnTY.roa
Signing time: Sun 01 Jan 2023 21:24:42 +0000
ROA not before: Sun 01 Jan 2023 21:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 188.244.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:f9:af:a7:bc:9c:55:75:03:3b:57:a9:54:1d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Jan 1 21:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9041d9eb375c01bf58103a7e0fec5c612f9d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:a5:d2:40:e3:05:55:a6:a7:f0:c0:d7:7a:
c8:ab:42:c2:c0:e3:95:1c:f1:7d:2f:c5:88:98:3d:
bb:ad:e5:3f:bf:0e:af:55:4c:43:ca:c3:1b:e0:78:
c4:31:d2:bf:41:04:86:38:61:43:82:2a:3e:16:91:
df:33:71:ce:4e:6a:e6:7d:15:44:9a:82:da:25:09:
47:38:96:7d:60:7a:b2:1d:5b:8d:b5:95:96:01:71:
e4:09:0c:77:9f:b2:04:e2:14:f1:db:70:7e:b2:f4:
82:13:fb:cd:9f:13:f4:89:ee:ef:c1:97:d0:d9:f4:
1b:2e:cc:2a:ac:04:e3:f7:42:72:4f:c1:8a:4d:7b:
d5:b6:5a:b4:96:77:f5:9b:19:73:55:f3:df:ed:b3:
e4:0b:25:5c:96:a7:34:56:32:77:55:1e:3e:47:33:
dc:7c:3c:f4:b0:dd:a7:96:a5:91:cc:59:d5:b4:2d:
9d:03:38:01:5c:28:56:53:f8:06:60:80:bd:7b:a0:
66:73:4c:01:b2:78:ba:fc:e7:e4:3f:ed:ae:7f:de:
09:7f:d6:b5:aa:77:e9:57:df:4e:74:9b:82:46:11:
37:d9:02:87:f7:2a:09:e6:ca:f5:09:4f:f3:3f:6e:
c4:8b:78:07:ad:1e:2d:07:42:a9:d1:ea:8c:db:62:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:41:D9:EB:37:5C:01:BF:58:10:3A:7E:0F:EC:5C:61:2F:9D:36
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/WpBB2es3XAG_WBA6fg_sXGEvnTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.120.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f5:d4:1f:a5:51:75:92:d1:da:51:77:12:0c:b2:ac:e7:77:
32:e7:05:cc:b4:12:da:c8:30:d6:e0:86:81:2a:a7:7f:a5:5a:
52:be:59:ba:b8:88:6a:5f:5e:c5:31:d1:8d:63:3b:d4:45:4b:
14:52:29:20:cd:16:99:d6:ca:72:43:d6:30:4f:79:d4:f3:46:
2c:58:6f:dc:10:d9:0b:c6:5e:99:11:4b:2f:61:27:64:6d:d1:
bd:bc:df:fa:0d:e3:01:fa:c1:ae:88:2a:6e:12:da:da:64:a3:
ce:7a:6a:6f:c9:d7:52:8c:14:a8:d1:d0:90:24:1a:7c:ef:92:
81:29:c1:9c:69:6c:f2:60:30:e5:c2:bf:3c:ed:54:13:36:fb:
57:21:9c:16:fa:5f:4c:b3:b7:2c:b5:63:6d:6f:ca:e4:ea:ff:
64:f8:cc:4f:7f:4d:43:03:e2:82:e5:18:80:d9:dc:bc:9d:08:
2e:bf:1f:4d:7d:6e:0e:74:03:79:c0:bc:d3:7c:68:6c:2d:87:
ec:3e:cd:ca:6e:af:5b:a3:a1:33:7c:c2:36:dd:91:e1:cc:4b:
89:23:86:99:bc:87:57:e5:3b:ef:fb:cc:6d:12:1c:f0:19:44:
79:b0:ec:07:22:f7:13:8b:9e:3a:16:d6:51:87:69:bb:c6:22:
14:63:6c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:57 2024 by rpki-client on console-fra.rpki-client.org