Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wXzg2kdU_EOpCwMTjx338xR7hnU.roa
File: wXzg2kdU_EOpCwMTjx338xR7hnU.roa (raw, json)
Hash identifier: Xg/hPBrE/5xj3bDCyoXHlE+9A/Fi2ywajMYbl8kKhOg=
Subject key identifier: C1:7C:E0:DA:47:54:FC:43:A9:0B:03:13:8F:1D:F7:F3:14:7B:86:75
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185A6955E8BC6101C30C500804B7AFA23A8
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wXzg2kdU_EOpCwMTjx338xR7hnU.roa
Signing time: Thu 12 Jan 2023 15:24:44 +0000
ROA not before: Thu 12 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25227
IP address blocks: 185.106.95.0/24 maxlen: 24
185.244.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:95:5e:8b:c6:10:1c:30:c5:00:80:4b:7a:fa:23:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 12 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c17ce0da4754fc43a90b03138f1df7f3147b8675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:d4:96:8c:ff:af:1b:52:69:64:d8:74:bc:
44:90:34:6b:2c:ee:16:8f:ff:a3:9f:d2:88:53:2b:
a8:7f:b3:ca:38:1c:e8:83:03:c9:d6:46:f6:4b:d7:
bb:f0:78:98:4f:9e:7e:f8:f6:6c:11:7f:98:32:65:
b5:27:fa:2c:8b:41:a9:86:fe:80:51:9e:6d:8a:c5:
06:9c:a8:bb:53:ae:a0:0c:19:cb:1d:1b:ab:a9:ce:
83:cd:29:9c:70:c3:33:a1:e6:75:1e:3a:67:81:8f:
72:a9:8a:a5:df:95:d8:c3:f6:93:f1:70:bd:61:00:
37:53:c4:20:fc:9e:b9:28:30:87:60:84:62:aa:af:
bc:a6:1d:ed:24:b7:99:9c:0c:9d:59:f1:3b:12:82:
1d:67:ab:cd:00:b3:c0:4c:3f:19:e4:76:f1:8e:42:
26:60:e0:0e:8e:09:69:37:d6:4b:5b:e5:48:a2:4c:
eb:f4:ce:2c:c7:46:5e:a9:f4:03:13:bd:07:bd:74:
b5:c1:f7:8e:2a:b4:b9:1b:47:f8:43:64:cf:88:9c:
55:c2:27:5c:b8:16:eb:ee:6f:1c:b9:c8:13:32:59:
50:ea:53:7d:ba:97:7f:8b:99:7a:b0:e4:56:98:3d:
af:ab:06:ae:7d:7e:41:9c:8a:ea:eb:36:54:45:b9:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7C:E0:DA:47:54:FC:43:A9:0B:03:13:8F:1D:F7:F3:14:7B:86:75
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wXzg2kdU_EOpCwMTjx338xR7hnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.95.0/24
185.244.175.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9a:63:b1:17:2b:9c:a7:c5:c2:cb:72:87:f1:5b:61:45:51:
40:a5:ac:9c:ca:7c:a0:87:03:96:15:df:1b:65:07:17:53:48:
98:96:ab:8c:fb:00:fb:54:f6:bf:99:b6:da:7b:cc:d5:7f:c3:
0b:f9:b1:a0:3d:a1:13:1b:73:07:10:65:12:c1:7e:50:93:b4:
b6:52:c8:2b:7a:1d:1b:94:02:dc:62:50:df:40:89:c8:22:01:
b7:8e:4c:7d:c6:a8:41:15:2b:c1:f6:a9:d1:9a:ea:d3:7a:ed:
d9:38:c5:78:f6:2f:2e:d7:5d:8e:27:1a:9e:45:f4:6b:60:0f:
49:6f:c2:26:e5:d9:a8:ac:e8:ea:61:59:02:e3:ef:07:9b:4c:
75:00:02:55:05:28:15:f8:54:b5:4f:ce:35:c9:31:b5:1b:1f:
3f:bf:63:2c:1a:38:8a:2f:ab:78:b9:21:51:f5:af:90:de:6e:
08:e5:e0:0e:cb:21:ba:e6:84:5a:17:ba:fb:c0:9e:11:04:ac:
12:87:87:fd:2f:ea:04:c2:0c:f5:bf:21:d9:c5:72:79:c2:30:
bf:37:0f:17:77:3e:92:b8:74:01:24:8d:8b:8a:55:6c:ba:ce:
3e:af:51:a1:0a:f4:41:87:b9:8b:82:01:e2:56:72:97:1c:49:
d1:83:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org