Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/WKQSRP2RjrBasYP5W-PHjG657tk.roa
File: WKQSRP2RjrBasYP5W-PHjG657tk.roa (raw, json)
Hash identifier: yVYn/q6E0a/fc/4kY4EpUU/43DupBN5AgwkUrzP4Wi8=
Subject key identifier: 58:A4:12:44:FD:91:8E:B0:5A:B1:83:F9:5B:E3:C7:8C:6E:B9:EE:D9
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 018CC8DF14BA6C82395F6A157019EDA7E380
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/WKQSRP2RjrBasYP5W-PHjG657tk.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.115.89.0/24 maxlen: 24
185.115.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 11:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:14:ba:6c:82:39:5f:6a:15:70:19:ed:a7:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a41244fd918eb05ab183f95be3c78c6eb9eed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:98:66:f2:37:b2:2e:33:fa:17:c9:9e:25:
cd:30:77:87:02:1d:78:a8:51:9b:2a:64:37:24:3e:
31:85:3a:ea:4e:04:a9:be:bb:b9:d8:a0:30:4c:26:
c9:4f:4e:c1:ad:a0:f1:e0:b3:f1:89:b0:4e:ac:46:
75:f0:72:0c:61:74:29:a5:15:c8:19:54:1d:a0:d1:
b7:2d:ae:fd:c3:f6:fa:e9:e0:58:d7:6b:dd:83:bf:
ee:40:8c:12:15:c6:6d:be:87:85:ea:a3:d9:ed:e4:
d7:bb:e2:ca:e8:14:fb:ba:83:4e:aa:0d:32:c2:77:
cb:22:8b:eb:85:78:94:c0:87:52:13:20:fe:88:e5:
ac:c5:66:69:7d:8a:af:7a:45:cd:61:18:fa:13:67:
ae:c5:2f:d3:bb:15:cd:f3:25:6c:c1:d4:5c:4a:30:
3c:62:64:96:ab:af:a0:1f:6d:94:7a:18:fa:ad:69:
f6:fd:4b:1a:3f:46:92:38:95:5d:e1:fa:96:5c:1e:
37:36:32:61:1c:71:b9:06:e7:1b:4e:73:1f:b6:7e:
88:c2:dc:a0:be:63:12:f7:e2:f1:e8:d4:17:b0:60:
f9:89:08:41:89:f9:a4:c7:c9:73:0b:13:1d:b7:56:
f5:86:48:24:c9:7c:41:1b:2b:8a:57:ab:4b:7d:13:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:12:44:FD:91:8E:B0:5A:B1:83:F9:5B:E3:C7:8C:6E:B9:EE:D9
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/WKQSRP2RjrBasYP5W-PHjG657tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0/23
Signature Algorithm: sha256WithRSAEncryption
53:98:b4:5f:fb:e4:25:d4:74:b8:d4:21:44:ed:5b:ca:d3:fd:
48:81:fd:46:b9:0f:58:7a:c2:3d:9f:db:b6:95:45:52:aa:0f:
9f:41:95:eb:13:39:d7:9e:7c:12:97:5e:28:44:93:3c:31:41:
8c:a9:10:33:2c:89:a9:50:b2:2e:67:db:66:d3:45:37:e6:12:
db:a8:b7:e1:ae:ab:30:18:02:52:a9:b0:75:66:3a:c1:05:e4:
cd:5b:76:5e:fc:9c:ee:7e:e8:b7:39:b3:e4:45:07:08:db:87:
b1:ac:fb:5a:39:c2:c1:aa:ab:79:9f:66:18:85:af:33:b3:3f:
68:48:cb:98:66:76:09:c9:38:21:f9:a9:cc:5a:8a:19:44:31:
0b:5e:2c:c7:5d:f7:9c:41:ea:bb:f1:64:36:0b:5f:c2:c2:04:
5b:0b:33:96:3c:87:7c:75:08:8b:77:da:56:b6:89:80:d8:bc:
18:10:99:b9:ac:ff:70:15:9f:87:64:76:3f:50:5c:06:55:69:
fa:8c:93:c6:50:81:96:a3:f2:91:33:c9:b8:23:e2:c9:56:bb:
50:60:22:c0:e2:31:98:3f:8e:7b:66:70:80:a7:68:19:81:56:
26:46:a7:0d:c8:19:af:78:a8:91:7b:35:d9:66:e6:84:f2:98:
54:1a:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org