Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/wfeomvVenM67t23z6agh1pBe7Sk.roa
File: wfeomvVenM67t23z6agh1pBe7Sk.roa (raw, json)
Hash identifier: egfBBnU6sOwB+ZzUtyc6OYpJAKZePXi1x4ZybxsTzTQ=
Subject key identifier: C1:F7:A8:9A:F5:5E:9C:CE:BB:B7:6D:F3:E9:A8:21:D6:90:5E:ED:29
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01856F5DA6B55DCD4A88448363A4A190F42C
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/wfeomvVenM67t23z6agh1pBe7Sk.roa
Signing time: Sun 01 Jan 2023 22:04:46 +0000
ROA not before: Sun 01 Jan 2023 22:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198912
IP address blocks: 57.191.0.0/21 maxlen: 24
57.191.224.0/19 maxlen: 19
57.191.192.0/19 maxlen: 19
2a0a:90c2:1000::/36 maxlen: 36
2a0a:90c2::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 05 Sep 2023 16:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a6:b5:5d:cd:4a:88:44:83:63:a4:a1:90:f4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 1 22:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f7a89af55e9ccebbb76df3e9a821d6905eed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:f5:db:65:73:e4:8f:05:24:07:70:7d:bd:
c4:d6:b2:b9:c7:7c:46:9d:54:ca:99:f4:ea:65:0e:
a5:63:85:97:e7:40:7a:4a:b9:33:02:1c:8c:23:9f:
ea:98:85:bf:14:e0:22:4a:bc:7b:89:27:1b:d4:ef:
9c:c1:9b:16:ba:9d:b5:07:26:76:54:3f:9b:97:b2:
54:71:63:c4:7b:09:fe:32:7e:4c:fd:40:be:28:a7:
90:20:39:48:50:8b:73:bd:c7:9b:40:9f:9e:7a:1e:
90:81:7d:ee:f5:e4:ce:a4:aa:0e:d8:46:7a:0b:5a:
ee:d5:4c:3e:ee:99:b9:db:3d:21:10:c3:03:bf:d2:
2c:83:16:ba:37:39:cc:cc:74:f2:d2:56:33:f9:e9:
72:9f:6c:8d:d5:85:9d:07:62:be:0a:af:78:d9:be:
cf:c7:ca:1f:02:39:61:57:9a:19:c4:52:7f:a5:8e:
93:66:3e:55:82:8b:4a:e1:0c:cd:f1:ff:60:84:5c:
f9:03:5b:c2:f5:5d:78:58:26:91:ec:c0:ee:5d:12:
46:8f:2e:29:86:31:ff:ad:27:12:1b:f8:d3:e1:9e:
78:14:b5:b0:0e:bc:b5:6d:5f:25:f4:f4:c9:74:5b:
da:0c:5a:96:53:80:c5:1a:6c:15:8c:14:a8:76:71:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:A8:9A:F5:5E:9C:CE:BB:B7:6D:F3:E9:A8:21:D6:90:5E:ED:29
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/wfeomvVenM67t23z6agh1pBe7Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.191.0.0/21
57.191.192.0/18
IPv6:
2a0a:90c2::/35
Signature Algorithm: sha256WithRSAEncryption
1f:3e:42:58:3f:78:88:42:ee:ae:a6:bb:07:51:e6:70:93:30:
35:53:45:36:b9:80:f9:6b:02:a0:95:61:9d:ea:b3:45:71:dd:
0b:97:3a:fe:05:f9:66:ca:11:ae:58:05:e5:17:73:67:c9:32:
0b:84:02:e2:1d:30:1b:37:d7:ed:4f:25:7c:57:1a:5f:47:7b:
62:25:3f:9e:09:06:41:93:7d:87:8c:35:f4:5d:7b:e7:5e:c1:
72:03:45:e7:9a:11:4c:03:b7:92:8b:7b:28:4b:b1:63:f6:16:
c7:0c:39:b7:a8:7c:bf:87:15:6c:d4:ff:8d:92:95:28:31:ff:
d6:c3:04:39:be:9b:81:8e:c2:9f:58:74:a8:12:a6:2f:f3:b3:
75:75:11:e6:9e:03:1e:d6:c6:85:b8:cd:a0:08:72:e0:c0:df:
e1:07:73:ad:47:e8:3b:52:a4:4b:ed:66:1b:25:7e:cb:a7:f7:
82:78:42:ae:f4:f1:e3:41:be:8a:83:9f:e2:af:d6:2a:27:9b:
0c:c0:5a:09:f0:eb:c1:72:5e:ac:26:77:fb:de:5c:9c:32:b7:
0d:cb:16:6d:ff:0f:9c:1b:ab:49:77:36:99:8e:78:d1:dd:77:
cd:d3:2b:7a:43:80:b6:d1:18:eb:da:da:a0:4b:47:4f:ff:1e:
09:3d:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org