Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/W_0j5eaJzGYItR_2nLl-05gnE6U.roa
File: W_0j5eaJzGYItR_2nLl-05gnE6U.roa (raw, json)
Hash identifier: Oux5uH/t31/BaD59jFYNPQde+RTZjN9G5CXaM/RSjxY=
Subject key identifier: 5B:FD:23:E5:E6:89:CC:66:08:B5:1F:F6:9C:B9:7E:D3:98:27:13:A5
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 018A2BCC3C137DB3C20CBFEDDE614839D88C
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/W_0j5eaJzGYItR_2nLl-05gnE6U.roa
Signing time: Fri 25 Aug 2023 08:25:19 +0000
ROA not before: Fri 25 Aug 2023 08:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 62.132.26.0/23 maxlen: 23
2001:698::/47 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:cc:3c:13:7d:b3:c2:0c:bf:ed:de:61:48:39:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Aug 25 08:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bfd23e5e689cc6608b51ff69cb97ed3982713a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:ca:c2:39:a6:21:9a:db:59:f3:35:66:90:
c9:67:25:f5:83:05:2f:0a:3d:70:84:76:b8:05:a1:
aa:89:61:cf:09:ff:34:27:ae:17:8e:79:9d:77:29:
2c:11:3c:8a:18:ed:39:09:fa:ee:b9:30:cb:61:2d:
fa:0d:d5:e7:ea:42:22:66:56:f3:cf:c9:13:1e:14:
21:b7:c2:d5:31:ac:99:38:df:f3:fd:ad:0d:46:1c:
9b:cb:a1:92:a5:00:9b:d6:0f:9c:b8:46:dc:3e:4e:
38:b9:c5:0e:18:ff:97:02:22:43:4d:33:e8:7e:40:
9e:f6:a6:36:37:27:7f:27:41:6c:6c:65:2b:af:12:
ad:64:47:c9:22:db:33:ec:06:4e:f5:9c:e7:eb:68:
26:17:48:b4:b0:13:1f:16:51:fd:63:51:41:06:e5:
84:83:28:90:f7:85:a3:e7:ba:2d:ee:23:10:e1:fe:
fa:c6:99:32:82:13:bd:8b:0d:33:5e:0b:f4:e3:44:
94:dc:aa:d4:02:62:26:4f:ec:f0:0e:ea:00:ba:10:
6c:8e:d6:96:fc:aa:7a:b5:d5:62:14:d8:70:38:ac:
f0:b9:93:0a:1b:5d:8a:ae:af:ec:d4:f0:1b:ae:6f:
ae:8e:50:de:0e:ba:cd:d3:06:0b:58:c9:4c:59:ea:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:23:E5:E6:89:CC:66:08:B5:1F:F6:9C:B9:7E:D3:98:27:13:A5
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/W_0j5eaJzGYItR_2nLl-05gnE6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.26.0/23
IPv6:
2001:698::/47
Signature Algorithm: sha256WithRSAEncryption
58:3c:8d:b3:2d:38:a2:3f:d2:01:b5:9b:6f:98:1e:00:e2:70:
6c:42:fc:25:48:79:44:3b:95:8c:91:f0:29:a7:ad:7c:f9:10:
4d:26:47:8f:87:97:08:00:94:65:62:4e:cd:1d:df:d3:32:9c:
98:ff:55:f5:57:59:dc:be:e3:0d:22:4f:8d:24:da:da:75:bf:
65:f0:a0:61:e3:04:9d:b6:1b:27:e6:e9:3c:55:fc:4c:0c:db:
0e:56:94:8b:55:f4:7f:74:5b:85:16:af:db:71:f1:8c:8e:ac:
9a:e9:72:3c:3b:9c:f2:db:d8:ec:a9:c2:ba:c2:db:1d:45:c3:
2e:0b:b8:a7:f6:e4:56:8b:25:af:bf:42:59:bd:19:3e:03:c8:
30:ab:ba:ec:24:6c:64:39:71:f5:eb:dc:89:f3:95:fc:17:21:
11:d8:96:b6:6d:5c:1e:91:56:62:62:d5:1e:ea:57:6a:b4:7b:
b5:a9:e0:18:61:f3:77:d3:ea:58:a6:eb:22:04:6c:8f:99:53:
b7:b0:ce:4f:e6:aa:93:20:63:d6:81:2f:d0:35:89:ce:ed:3f:
1f:ae:16:d6:7c:d4:8f:df:fd:6d:84:a4:e4:7f:f5:ab:87:d0:
04:19:ae:37:f4:ab:69:e1:6b:1a:32:4c:1d:bf:bf:d0:bf:27:
e0:0c:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org