Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/WPdgEZyIhyz-nwasy_4k2EIWjL8.roa
File: WPdgEZyIhyz-nwasy_4k2EIWjL8.roa (raw, json)
Hash identifier: LASfkB3fgtWw9JX8FUQXCrCdmqvCz0fYESdNQ0LwZ7w=
Subject key identifier: 58:F7:60:11:9C:88:87:2C:FE:9F:06:AC:CB:FE:24:D8:42:16:8C:BF
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0189D57281AD4C6633C9FB7850B6A1E3E08D
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/WPdgEZyIhyz-nwasy_4k2EIWjL8.roa
Signing time: Tue 08 Aug 2023 13:59:58 +0000
ROA not before: Tue 08 Aug 2023 13:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 185.151.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:72:81:ad:4c:66:33:c9:fb:78:50:b6:a1:e3:e0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Aug 8 13:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58f760119c88872cfe9f06accbfe24d842168cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:c6:77:74:c4:e7:42:cf:9c:20:ba:09:93:
b5:82:97:eb:ac:79:9b:72:e2:ec:e8:16:9c:eb:e0:
10:58:c3:ee:06:ee:0b:d7:62:4c:a4:ed:86:fa:ce:
07:40:53:99:ed:68:d5:e2:a9:54:74:17:c8:f5:f1:
53:0b:00:58:0a:39:7d:ac:5e:e3:91:6e:17:0c:df:
e1:4d:00:5f:0f:ee:bd:09:3a:e2:e9:90:68:6c:42:
cf:e7:35:e5:a2:4a:86:c2:10:51:31:67:fe:ac:3f:
54:02:52:64:b2:80:f7:74:60:59:f5:83:6c:e7:bc:
1a:64:ce:f1:e2:21:92:82:af:b4:42:8d:2b:66:a2:
fe:bd:78:3c:cd:42:10:1f:cb:5d:44:47:a5:1b:2a:
a5:18:2c:3e:64:00:b9:61:6c:a4:fe:95:52:07:a5:
66:5c:91:0b:f8:29:24:a9:08:11:34:d0:d4:6c:9a:
cc:be:2a:d7:83:00:ee:77:c5:8a:2b:c5:6c:0d:dd:
09:d1:a6:6f:55:6e:c8:b7:07:9f:19:d1:75:ea:72:
f0:bb:4c:e2:84:fc:82:f9:27:56:fe:0c:5d:9c:eb:
7e:40:d5:7a:d2:f4:6b:c0:52:74:fb:c4:07:01:f7:
f7:af:81:34:32:58:8a:de:38:e5:8f:72:40:68:bb:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:60:11:9C:88:87:2C:FE:9F:06:AC:CB:FE:24:D8:42:16:8C:BF
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/WPdgEZyIhyz-nwasy_4k2EIWjL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5b:59:c5:80:d6:b9:7b:2f:23:31:58:a8:56:21:70:38:70:
09:92:e9:ea:d8:c5:ec:17:ee:40:76:74:58:d5:60:6e:f9:c3:
6e:15:b1:c5:cb:c4:51:8d:08:af:58:71:79:30:75:8d:a6:1a:
bd:37:c9:49:15:d7:05:97:63:b4:d1:bd:33:e7:90:92:d7:8e:
8e:4b:66:88:58:96:d1:6b:d6:14:9a:6b:5c:4d:2f:9a:2a:ad:
9b:4d:e0:85:a7:69:23:30:dd:5b:76:7f:bd:02:ad:3a:77:2c:
89:78:ff:dc:91:24:69:90:3d:7a:a3:3e:76:e6:6d:c5:0e:00:
26:3a:5e:f5:8b:bb:a8:23:00:21:1e:cb:47:6d:94:f1:40:99:
5f:31:a7:ce:61:d7:df:f8:03:34:9e:65:ee:07:a9:5f:6d:06:
10:03:a2:bc:e8:d3:cd:13:08:94:e4:ef:df:f5:98:16:28:f9:
45:97:28:f7:20:58:05:df:94:5b:81:fd:25:00:81:92:22:57:
84:28:9c:7e:3a:35:8b:1b:bb:a0:9e:1a:03:dd:73:48:6d:d3:
19:8a:dc:af:dd:f2:4b:8b:7d:fb:83:b2:89:12:f6:01:89:2b:
08:aa:79:f2:e5:c1:ab:d0:da:b0:8c:8c:18:61:56:2f:4d:11:
0d:56:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org