Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/WQSm6ulj3AiveAq46Eveg45eLA8.roa
File: WQSm6ulj3AiveAq46Eveg45eLA8.roa (raw, json)
Hash identifier: WLWcjCXApgZHh+aVB+vhr/3MnQtMUjv5QvOpKYv6M0c=
Subject key identifier: 59:04:A6:EA:E9:63:DC:08:AF:78:0A:B8:E8:4B:DE:83:8E:5E:2C:0F
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 01857102DBA0D209C16F3356C5603D5EC722
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/WQSm6ulj3AiveAq46Eveg45eLA8.roa
Signing time: Mon 02 Jan 2023 05:44:50 +0000
ROA not before: Mon 02 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 185.189.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:db:a0:d2:09:c1:6f:33:56:c5:60:3d:5e:c7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 2 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5904a6eae963dc08af780ab8e84bde838e5e2c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:7f:50:24:22:00:18:26:c7:33:e0:f9:51:
45:2c:c2:f3:17:02:ff:c4:79:f8:7b:cd:bc:e7:7b:
ec:a5:63:2e:ca:0f:9e:d1:74:9a:8d:60:10:68:b9:
f1:cb:cb:aa:3f:6d:0a:3c:12:75:41:30:14:d1:07:
bb:04:15:91:b9:93:2c:bf:12:55:0a:3f:70:29:4c:
cc:0b:b8:95:42:6c:41:de:e0:31:3a:6a:75:e8:d4:
da:32:bf:18:12:5f:36:03:8e:42:3f:d2:5e:4d:12:
79:4d:e3:7f:41:48:06:8c:39:aa:53:e3:68:cd:12:
94:03:36:59:24:8b:2d:56:9c:8d:1f:7a:2f:7b:ce:
ca:09:34:7a:93:14:b3:92:3a:a5:1b:09:58:8f:f8:
07:94:56:a4:2b:a2:80:6e:a7:68:a9:af:91:32:43:
78:43:fe:60:3c:7d:fa:11:79:32:9a:d2:05:6e:a1:
bf:59:a4:32:7c:1c:b6:32:26:01:f1:c9:22:ab:c7:
35:34:20:c3:0a:65:99:42:1d:2d:6d:5f:91:ba:4c:
33:ff:bf:27:bc:3d:33:25:02:3b:92:72:ee:bd:1c:
fa:ee:e1:fa:ef:15:71:16:2f:a8:49:f0:e2:0d:cd:
8f:bb:bd:5c:a6:06:68:ae:34:a1:67:50:eb:d4:cb:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:04:A6:EA:E9:63:DC:08:AF:78:0A:B8:E8:4B:DE:83:8E:5E:2C:0F
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/WQSm6ulj3AiveAq46Eveg45eLA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:01:27:24:16:a5:5c:4f:ab:95:4d:37:6a:e5:e3:9f:47:94:
5f:5f:30:bf:fe:ea:db:b6:ad:7b:84:a7:61:1a:34:6f:44:73:
82:5e:d4:16:57:6b:c8:e6:0c:b3:b6:b7:9b:4b:dc:e8:bc:83:
ea:cc:75:53:8d:d5:85:ec:ff:c3:82:5e:28:cc:db:cc:31:41:
62:71:fc:82:f2:0b:e5:f7:01:4b:2c:05:1f:74:b0:c1:f3:97:
b2:e1:8b:2a:4d:19:09:66:05:75:18:0d:f0:e1:29:7e:6e:0e:
5b:01:08:bb:8d:98:4e:c2:8e:5d:09:07:68:23:43:f5:e9:ac:
d4:cb:e4:f4:4c:9f:25:8e:91:23:66:85:dc:99:ea:3e:10:79:
f8:20:ab:6b:e7:c0:fe:b6:89:36:71:32:23:e3:21:32:e1:17:
fe:c8:40:39:71:20:04:a3:f9:ca:c5:f4:ab:ee:96:a5:42:ea:
fd:36:84:83:c3:e8:5e:92:65:3d:1c:2c:c2:f1:47:db:ac:45:
e9:92:a1:63:4b:1d:85:1e:95:b9:53:d9:70:b1:c8:ac:8b:2f:
62:38:1e:56:0b:14:eb:23:f9:10:85:81:87:dd:a6:44:62:88:
74:8b:b2:ed:f4:a1:29:95:ea:c4:ad:4a:40:a0:41:87:7e:5b:
04:f6:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org