Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WG748xR1YcvB9g6diTV6YOCu4kE.roa
File: WG748xR1YcvB9g6diTV6YOCu4kE.roa (raw, json)
Hash identifier: KR6EiL96dSymeSFDDANZqrMY17z5APU8ILjdpNyqbLA=
Subject key identifier: 58:6E:F8:F3:14:75:61:CB:C1:F6:0E:9D:89:35:7A:60:E0:AE:E2:41
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018DD15BC39D8FF590D2E11D33E2429D05D8
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WG748xR1YcvB9g6diTV6YOCu4kE.roa
Signing time: Thu 22 Feb 2024 15:07:48 +0000
ROA not before: Thu 22 Feb 2024 15:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 18:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:5b:c3:9d:8f:f5:90:d2:e1:1d:33:e2:42:9d:05:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Feb 22 15:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586ef8f3147561cbc1f60e9d89357a60e0aee241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:4a:f6:a5:09:c1:85:87:a8:9a:71:f1:56:
86:9d:12:e7:da:c3:53:31:7a:f7:11:79:a9:cb:6e:
34:05:7f:04:7e:90:ce:ec:bc:b8:13:3a:9a:00:fc:
a1:4d:d3:69:79:f8:88:89:5c:22:2e:66:2d:05:e7:
e1:8f:23:38:69:08:e4:75:3f:2c:ff:cd:aa:10:e6:
47:25:ec:9a:45:70:47:2a:ad:67:0e:d0:79:7f:9b:
11:bf:3a:47:ce:b8:f3:46:77:72:f9:4b:67:5c:81:
07:30:52:37:21:4e:ea:98:07:38:f5:09:a5:f4:b4:
1e:e7:7e:af:5b:26:2b:99:10:3c:ad:30:5d:c7:5f:
72:35:76:3c:fc:e9:fa:f6:d1:40:95:8e:50:00:29:
6a:42:37:9f:12:a6:8b:fc:2a:0a:a5:13:48:3c:44:
c5:c5:52:f8:e8:5c:6c:8c:4f:d1:6b:d6:b2:2d:cd:
21:09:b4:45:0e:b0:0e:f9:38:75:17:9c:2a:e4:a1:
39:d2:3a:cb:98:27:4c:d3:ca:74:6a:17:54:04:6f:
e3:c1:8d:92:c7:fe:6c:e1:13:03:ce:39:c6:7c:b8:
ad:1f:36:b6:0c:e0:69:ca:85:b2:81:df:52:18:54:
e8:f4:7e:ac:52:a5:c4:af:2c:3a:cc:ed:29:e4:9e:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6E:F8:F3:14:75:61:CB:C1:F6:0E:9D:89:35:7A:60:E0:AE:E2:41
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WG748xR1YcvB9g6diTV6YOCu4kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:10:6b:4a:f0:9a:23:db:ae:7c:3d:7f:4c:8a:ca:21:60:80:
c7:10:10:bb:17:c1:a4:4f:60:b3:3d:ac:a3:15:20:a7:aa:c1:
c5:d1:97:de:4c:2d:02:4d:cd:29:e5:45:55:ed:73:a8:a4:45:
76:5b:82:60:f1:91:b8:0f:6a:a9:bf:a7:d5:30:4f:2e:28:7a:
7b:7b:51:76:ef:ac:16:eb:72:c8:eb:ef:01:5d:9b:52:c7:9e:
c8:fa:bc:01:c9:ff:44:40:c6:11:6d:a4:c3:c0:f4:f0:1d:e3:
9e:5e:f5:38:79:3f:c9:c8:d5:10:83:ad:c2:4b:d9:f1:a8:53:
52:a0:96:df:76:5b:d0:b1:3b:23:a3:d1:2c:36:01:69:11:1e:
01:26:5c:ec:19:9f:15:04:15:cc:0a:22:b5:43:e0:a2:68:6a:
dc:3c:f1:d9:ae:27:91:46:30:ef:21:38:33:76:a0:df:10:a3:
c6:d5:a6:f1:21:1b:2d:fa:36:4c:ce:fb:43:fe:4c:f3:62:65:
1c:58:0e:ae:b1:26:d9:cc:76:f8:bb:af:c6:f3:f1:b0:0f:a7:
c6:6a:f1:b4:9a:f2:db:9b:39:e4:92:47:67:fe:6d:39:59:68:
32:fa:2a:46:36:cd:53:08:47:20:3a:ab:66:d6:d0:94:23:2c:
c5:9b:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 22:57:21 2024 by rpki-client on console-fra.rpki-client.org