Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/WvG1p-MM5fsbYW7KdwEBryETO58.roa
File: WvG1p-MM5fsbYW7KdwEBryETO58.roa (raw, json)
Hash identifier: TyhYVNa84QOACz8VxbVxYR70Pq6GC6xo6+A4sCG0tQQ=
Subject key identifier: 5A:F1:B5:A7:E3:0C:E5:FB:1B:61:6E:CA:77:01:01:AF:21:13:3B:9F
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 0187E0B83C8D2972EBCCDF857391B00B8B4A
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/WvG1p-MM5fsbYW7KdwEBryETO58.roa
Signing time: Wed 03 May 2023 08:26:23 +0000
ROA not before: Wed 03 May 2023 08:26:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51514
IP address blocks: 37.221.216.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:b8:3c:8d:29:72:eb:cc:df:85:73:91:b0:0b:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: May 3 08:26:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5af1b5a7e30ce5fb1b616eca770101af21133b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:6b:6d:22:c2:ad:86:25:ea:ef:65:bb:b6:
00:58:f8:8a:be:4b:48:fb:4c:2b:96:76:99:af:37:
71:d5:90:7e:96:ec:f3:b0:b9:42:0e:a2:c4:52:e8:
c9:a3:e6:04:55:0e:fc:8a:b5:e6:6b:72:1e:0b:ab:
f7:a6:e1:f1:f9:fb:e5:39:a9:a9:a1:45:f9:81:85:
3e:45:95:24:48:ed:cb:7a:b7:7c:61:1c:60:18:9d:
7b:e7:05:a9:32:f2:0a:76:17:83:1a:c0:71:3e:e9:
9b:5a:10:08:2c:57:34:2b:0e:67:f5:35:2a:89:26:
ad:e7:a2:35:4e:10:13:71:7f:a3:4d:70:92:9f:61:
7a:5a:51:52:07:94:de:c8:6b:bd:eb:e9:20:0d:8f:
98:ab:88:de:70:aa:f6:2a:6f:b0:ad:6e:53:71:4c:
60:a1:2c:ae:c3:6f:f8:8d:db:87:17:ec:39:9f:54:
f9:2f:ad:0a:02:c8:ea:d9:b1:81:dd:12:22:31:91:
30:a2:eb:59:48:9c:91:49:c8:c9:a1:7c:bd:1f:b0:
93:6e:53:4a:2a:3e:6a:71:47:68:9a:38:39:90:91:
7b:90:96:86:eb:5f:a3:08:4a:76:57:66:1f:57:19:
b9:72:05:b6:f5:b8:9f:ec:51:23:55:75:53:a2:93:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:B5:A7:E3:0C:E5:FB:1B:61:6E:CA:77:01:01:AF:21:13:3B:9F
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/WvG1p-MM5fsbYW7KdwEBryETO58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.216.0/21
Signature Algorithm: sha256WithRSAEncryption
61:10:43:d0:92:0b:05:a3:97:fc:af:3e:6e:5b:cc:90:95:e6:
d9:1d:15:e3:d9:53:45:a2:1d:20:1f:24:c0:8c:32:92:e5:00:
a7:26:3c:fe:56:6a:29:90:f9:93:d9:c4:ce:94:14:13:97:ab:
27:57:b6:9f:7d:86:8d:d4:c9:22:2c:ea:c1:cb:1b:57:fa:55:
17:a7:a6:e1:98:ab:2c:e3:d4:b3:ce:a9:3f:47:a2:0d:47:41:
9f:92:bd:93:5e:9f:d2:fa:cd:ef:f6:7b:d3:2b:4b:54:62:2c:
87:92:8b:26:fb:f8:e4:d6:74:80:db:2c:67:4d:c9:f2:5c:87:
e5:1a:c5:0c:55:23:aa:32:b2:46:e4:aa:57:a2:42:ab:a4:db:
49:8b:d3:ca:c6:0e:a5:91:06:30:84:4d:64:9b:35:39:a7:e5:
a3:d4:d4:f0:bc:5e:95:1d:71:9c:88:a8:1b:8c:a1:96:3d:e0:
a2:a3:93:ff:a2:93:82:4b:51:7f:61:2e:5d:66:bb:fd:e3:e9:
7c:3b:18:04:28:74:fc:2e:34:f9:8c:39:8e:b9:9e:04:17:2f:
e2:51:47:8b:ee:3f:b5:55:20:2d:ab:c0:dc:a9:b7:e4:a3:7d:
d0:6b:94:e8:41:71:57:34:52:b9:2f:37:3b:a8:fe:96:3a:92:
62:fd:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:56 2024 by rpki-client on console-ams.rpki-client.org