Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/WdsaGUgJvGXKYdwHta4DIBC5kso.roa
File: WdsaGUgJvGXKYdwHta4DIBC5kso.roa (raw, json)
Hash identifier: DhgE0wgfYrDstv0r7PeevAwCYe7JGCwb/DHQCsNGmEc=
Subject key identifier: 59:DB:1A:19:48:09:BC:65:CA:61:DC:07:B5:AE:03:20:10:B9:92:CA
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 0185720C729CE367056B36587D8B60242E4A
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/WdsaGUgJvGXKYdwHta4DIBC5kso.roa
Signing time: Mon 02 Jan 2023 10:34:56 +0000
ROA not before: Mon 02 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8767
IP address blocks: 2.56.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:72:9c:e3:67:05:6b:36:58:7d:8b:60:24:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Jan 2 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59db1a194809bc65ca61dc07b5ae032010b992ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:53:b1:c3:66:9a:ed:ab:49:c7:40:27:ea:
59:ff:6a:29:2a:a4:b3:99:3c:d9:0d:f1:94:bd:2e:
06:ca:a8:98:2a:6d:11:c8:24:22:96:d9:81:9c:3d:
26:b0:58:f6:4e:df:61:19:ed:ee:61:c2:cb:12:54:
21:81:4f:a2:d9:ac:fe:35:29:87:fb:0c:e4:f6:49:
2b:09:0f:f6:cd:f2:19:ae:27:f8:1c:42:51:08:2c:
01:4f:e9:c6:a5:1f:ac:1e:6d:56:dc:ac:4f:ab:46:
57:45:61:a9:c9:49:ef:6c:3a:42:53:35:02:00:f1:
c1:7c:2d:35:5a:14:60:95:47:fd:39:38:40:ea:fe:
94:06:49:52:dc:e3:76:52:7b:ed:21:57:44:58:06:
87:0c:51:42:87:5c:97:9d:85:44:33:ee:3f:53:f2:
5b:11:6f:2e:20:ab:94:e2:ff:6d:dd:24:cf:45:aa:
82:06:b5:41:39:44:fb:d4:e3:6d:9b:38:e2:f7:41:
a2:8e:ae:6a:55:8e:11:08:7a:19:6c:ff:e6:37:02:
6b:5d:ce:60:25:af:6a:cd:e9:42:d9:d6:f0:63:43:
f8:4b:47:c1:92:2a:7d:36:1b:a5:56:ff:7e:f7:ef:
4e:59:5f:31:4f:be:70:af:23:e6:cd:c7:78:9c:01:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:1A:19:48:09:BC:65:CA:61:DC:07:B5:AE:03:20:10:B9:92:CA
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/WdsaGUgJvGXKYdwHta4DIBC5kso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bc:ce:b7:bf:c0:07:66:37:98:07:57:b9:b2:d8:ef:6a:d4:
a7:61:8e:40:ce:30:3d:3e:32:ab:2c:80:06:03:b7:3f:b3:ea:
65:63:55:0b:cf:42:3c:e8:4b:f2:f1:72:9f:e3:56:1b:11:03:
a3:ea:c1:89:aa:3e:e0:f2:42:1b:a5:5a:ea:66:a6:d7:f5:31:
28:5a:c8:b1:40:67:b2:0f:6f:61:03:f8:1a:a9:63:29:69:5e:
df:5e:18:19:b9:78:82:22:6e:d2:7f:4b:8b:52:08:33:0b:34:
a6:dd:f5:84:aa:98:fa:97:3d:a4:d1:4a:47:b9:e9:8d:2e:77:
1e:27:81:b2:c2:c3:52:93:ee:84:5f:c1:fe:64:25:b3:b9:58:
ab:dd:36:5c:78:3b:6b:2a:27:24:8c:e1:96:fe:57:54:be:03:
7a:c6:9a:54:d9:2e:a0:b7:42:25:99:8a:ae:17:f9:2b:ff:8c:
65:82:19:3e:5d:fb:97:79:3e:7b:e0:cd:ae:46:95:c5:b4:5c:
19:a6:c2:0e:f3:57:02:7f:a3:2b:3d:65:88:d0:78:fb:63:ef:
86:c6:3f:09:dc:1a:ba:81:5b:8b:03:8c:dc:6e:66:0e:8a:c5:
0b:cb:3c:18:8d:cd:3a:74:bd:16:2a:b1:38:32:47:2d:03:ce:
37:41:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:13 2024 by rpki-client on console-fra.rpki-client.org