Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/wl9DG1HGPjSUPFk9FTHbS-3VI0U.roa
File: wl9DG1HGPjSUPFk9FTHbS-3VI0U.roa (raw, json)
Hash identifier: TMXHEmbMfnkhZiQvm6FvZXuRiLIDAgATOGxdML3wGsg=
Subject key identifier: C2:5F:43:1B:51:C6:3E:34:94:3C:59:3D:15:31:DB:4B:ED:D5:23:45
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 01857142D33B202A3E9A871112E0566CF9A5
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/wl9DG1HGPjSUPFk9FTHbS-3VI0U.roa
Signing time: Mon 02 Jan 2023 06:54:42 +0000
ROA not before: Mon 02 Jan 2023 06:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3163
IP address blocks: 81.88.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 11:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d3:3b:20:2a:3e:9a:87:11:12:e0:56:6c:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 2 06:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c25f431b51c63e34943c593d1531db4bedd52345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:5e:44:4e:84:de:14:98:96:97:d2:84:ec:
bb:c5:47:92:be:04:5d:eb:56:4d:17:76:4a:d3:b5:
33:34:f8:07:a0:4e:eb:10:85:8f:d6:29:ac:ce:69:
47:dc:55:7d:db:41:73:4c:c6:1d:bb:04:3b:27:41:
88:5e:95:27:4c:70:3e:ad:cc:90:c6:d2:e0:6a:cf:
02:ff:c6:87:7e:99:29:12:67:38:00:29:39:5e:f5:
ea:e3:b3:7d:ac:e5:91:b2:c6:51:14:4a:92:b1:0e:
d6:fd:8e:88:76:18:7c:a8:11:0d:ae:25:2a:24:a4:
15:99:e3:64:3d:4b:3c:39:03:5a:15:0d:d6:f2:dd:
8d:99:7c:25:50:4c:1e:29:e1:20:3a:c2:ba:1d:fd:
65:6e:cc:0a:6c:80:00:4e:09:da:93:cf:ff:fd:64:
c8:c6:d3:02:be:b7:7b:99:f1:8e:e0:25:73:dd:03:
e7:2a:8f:4e:91:1a:e1:c4:cf:77:9f:c6:23:cd:73:
bb:ce:ca:70:65:96:85:bb:ad:9f:0e:9d:6d:be:75:
85:86:ed:50:86:18:59:fd:2f:b0:d5:5a:de:1e:43:
ec:f6:76:49:6e:5d:e6:54:37:1d:6b:8b:3c:8c:b1:
19:7c:00:a6:7c:23:26:4e:c6:9a:69:8a:e1:b1:2d:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5F:43:1B:51:C6:3E:34:94:3C:59:3D:15:31:DB:4B:ED:D5:23:45
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/wl9DG1HGPjSUPFk9FTHbS-3VI0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:bd:73:b3:d1:22:56:40:98:73:2a:8e:28:b3:65:70:87:37:
b7:fa:a8:81:19:57:ff:1b:9e:40:84:13:ca:dd:1a:13:ab:a1:
d8:6f:e9:49:67:2a:c4:9e:8b:7d:d4:fc:ff:ac:ec:23:da:20:
ef:8b:54:46:c4:ca:20:74:9c:35:12:67:ca:f6:90:9b:2d:91:
d5:33:9f:08:a1:7a:03:9b:bf:d7:cc:52:c7:67:bb:93:d7:08:
50:d2:d1:62:78:b7:1b:ae:4e:d1:d1:26:03:17:a1:cc:ee:7f:
1b:8e:7f:76:7e:25:d6:1d:69:36:72:f2:16:df:ac:c8:00:70:
11:81:4b:f7:a7:ae:80:7f:db:af:fa:e8:d3:98:84:71:c9:2f:
3a:08:f3:1e:1c:15:6b:76:fb:5e:fa:7c:37:e1:71:6a:dd:65:
aa:19:7d:58:23:90:94:76:f7:a2:f6:00:6a:e7:b2:06:bf:1d:
3c:58:4b:aa:6d:7e:28:97:d4:0a:48:30:f0:b1:af:35:ac:a2:
3d:b3:60:4e:fe:52:2f:67:5f:4b:35:ce:f3:ca:1d:dd:53:4c:
cd:75:93:00:6f:a7:85:c8:1b:d1:12:8e:0f:eb:e2:3f:18:ba:
3a:27:cb:5c:ff:40:97:8f:27:8a:97:d0:0b:bf:be:03:70:71:
9f:71:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:44 2024 by rpki-client on console-fra.rpki-client.org