Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/wgFuRbCDOMisMHnHhsVWy87_dY8.roa
File: wgFuRbCDOMisMHnHhsVWy87_dY8.roa (raw, json)
Hash identifier: uVt7+zTw7AbVAtKQN017/THjxDrqN1AbMWNzb0H6eLg=
Subject key identifier: C2:01:6E:45:B0:83:38:C8:AC:30:79:C7:86:C5:56:CB:CE:FF:75:8F
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 018BA43F55D96081B29463972955530D81B6
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/wgFuRbCDOMisMHnHhsVWy87_dY8.roa
Signing time: Mon 06 Nov 2023 10:48:15 +0000
ROA not before: Mon 06 Nov 2023 10:48:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210275
IP address blocks: 185.35.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 06:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:3f:55:d9:60:81:b2:94:63:97:29:55:53:0d:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Nov 6 10:48:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2016e45b08338c8ac3079c786c556cbceff758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:45:cd:80:c1:a0:ed:ba:ca:5f:86:75:67:
75:14:e0:ef:49:ba:71:46:ec:db:4e:b5:77:30:fc:
60:20:5e:c5:4e:f0:77:a7:52:a9:c7:0e:3e:bc:bf:
6c:70:5f:ea:ab:92:63:6d:7f:79:fe:9c:64:15:b8:
d9:ab:be:69:e4:1f:41:97:85:28:12:1d:a8:b4:81:
be:ef:47:17:96:8b:65:2a:01:ae:51:94:0c:ea:de:
70:a0:e9:d9:6b:df:df:66:c7:6b:5a:06:0d:40:eb:
c6:8a:cd:ef:9a:1f:f7:b4:54:54:be:9c:b5:ec:ee:
1f:33:4c:12:18:b5:de:95:ef:97:33:a8:3f:bd:fa:
89:cc:13:b6:61:bd:3c:11:9a:6e:ca:ca:c1:d3:e9:
83:30:dc:85:fa:7c:04:fc:40:9b:d9:d0:53:ce:4e:
fe:f3:35:46:3c:fc:92:17:28:e7:21:91:14:30:50:
bf:e0:89:f4:91:e1:6e:f3:67:cd:20:0b:a6:c9:d8:
7d:51:ad:1d:21:e2:40:88:6f:fc:9a:2b:0f:39:bc:
40:0c:29:74:4d:49:96:b7:29:5b:49:42:43:51:f5:
bb:79:40:8e:6d:ce:ec:d5:30:70:83:c0:90:4a:ca:
c0:9b:67:6e:1e:10:58:b0:a3:0d:76:00:bf:88:c9:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:01:6E:45:B0:83:38:C8:AC:30:79:C7:86:C5:56:CB:CE:FF:75:8F
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/wgFuRbCDOMisMHnHhsVWy87_dY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:66:c4:7c:a5:16:cd:91:a1:39:fc:2f:e6:1d:2e:4d:8a:69:
ef:8f:64:fe:e8:fa:a8:1b:2d:94:33:1c:6a:8a:34:50:52:c6:
b3:97:ba:24:12:29:63:2a:83:2d:cf:b6:32:82:4c:7d:86:6e:
0d:3e:9b:13:40:56:5f:64:a0:f5:ba:9c:9f:e8:a3:d9:19:b5:
55:47:83:28:f2:07:2a:d3:0e:75:78:1b:8a:05:ec:95:10:e8:
0d:e0:b0:e8:b5:74:da:c7:e3:00:cb:18:78:67:90:6e:d9:c5:
1a:52:f2:9d:cf:18:4b:9a:ea:a0:6f:06:51:9e:9e:1e:68:db:
b7:58:a9:40:be:8f:61:5c:3e:b9:6b:44:5a:a3:1f:1c:3c:25:
3d:06:4c:3c:a7:3c:cf:89:2f:ea:43:33:8b:6f:18:3e:c2:22:
b7:b3:a2:d6:78:46:9f:97:62:3f:39:8f:ad:f5:4d:da:aa:3f:
8b:11:c1:9a:58:de:19:ce:ba:d9:cd:ce:39:8e:a1:b3:ad:a0:
9b:03:7a:4f:cc:a3:85:27:f6:58:d6:10:ee:34:77:d5:18:75:
c2:9a:bf:01:aa:8f:a0:33:ae:31:53:bc:e6:30:ae:29:1f:cd:
d3:e7:39:f8:aa:3f:de:e7:a8:ea:bd:ba:cb:c3:99:57:6d:c6:
10:35:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:29 2024 by rpki-client on console-fra.rpki-client.org