Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/whJriQE_VJWsw-rtGHn5ZhSLn4Y.roa
File: whJriQE_VJWsw-rtGHn5ZhSLn4Y.roa (raw, json)
Hash identifier: NuM5jcoO/zt56wI4oKBFsh6DwyTAoyDyrNEy33v/zbE=
Subject key identifier: C2:12:6B:89:01:3F:54:95:AC:C3:EA:ED:18:79:F9:66:14:8B:9F:86
Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial: 01856E6FB5990DE8D386EE760806A5891D0C
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/whJriQE_VJWsw-rtGHn5ZhSLn4Y.roa
Signing time: Sun 01 Jan 2023 17:44:52 +0000
ROA not before: Sun 01 Jan 2023 17:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43573
IP address blocks: 185.32.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:b5:99:0d:e8:d3:86:ee:76:08:06:a5:89:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Validity
Not Before: Jan 1 17:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2126b89013f5495acc3eaed1879f966148b9f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:c5:98:41:d9:ce:1c:73:5d:f2:da:a8:00:
8d:18:63:62:c8:be:c2:16:98:1e:3c:7c:fe:9e:e6:
b3:fc:35:d2:4d:9d:67:19:b2:5b:66:5c:51:fe:7a:
87:4f:09:52:ab:91:b4:33:ee:03:8d:3b:4a:e3:51:
01:09:78:52:25:c5:09:d8:90:d5:d4:2b:ba:7c:97:
a1:ac:e6:09:d1:49:6f:f3:e4:df:eb:ba:c4:03:fd:
7a:0f:da:fa:4b:0d:2f:e3:d7:48:99:c0:41:df:3c:
ab:22:94:dd:25:26:6c:f6:cd:1a:e8:ce:44:b2:56:
50:a5:ca:9a:15:a3:3b:25:99:8d:1d:ae:f6:bf:4a:
87:c0:38:f6:c2:d3:03:a9:fe:e5:c4:0a:30:2c:fb:
57:02:8d:b0:00:8d:e3:d7:53:f6:a7:5f:f2:00:a9:
e3:a8:3c:59:0b:80:e5:d5:8f:ac:7d:25:01:c7:75:
a8:79:f2:82:3f:4a:ac:9d:22:cd:b7:6f:53:4c:e8:
07:0f:bd:24:bc:25:cd:cc:0b:19:ac:f1:d8:17:e7:
f9:6e:02:68:bb:f3:0c:4b:f7:c7:8f:5d:71:4b:15:
e4:76:b3:ca:cc:75:26:06:e8:57:86:c0:91:22:19:
f9:e3:40:4b:d5:6f:b7:52:58:06:00:c2:44:e2:1a:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:6B:89:01:3F:54:95:AC:C3:EA:ED:18:79:F9:66:14:8B:9F:86
X509v3 Authority Key Identifier:
keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/whJriQE_VJWsw-rtGHn5ZhSLn4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:13:a1:c3:9b:d3:ed:66:c2:98:70:8f:c9:08:5f:89:99:53:
ed:96:c8:9f:c4:6f:0b:fb:87:27:b7:2a:d5:a6:da:bc:ce:2a:
70:aa:58:01:3b:48:9f:5b:eb:ae:64:d5:e1:56:42:6a:46:b7:
1b:32:45:27:1d:a6:77:60:de:fe:17:3f:70:b8:24:54:7e:e2:
77:ef:66:0d:2c:1e:28:6b:16:e0:6c:0d:6f:71:28:c9:15:d6:
7d:44:82:6e:6a:3f:61:c2:16:96:0e:f6:89:54:4b:d5:dd:0f:
cc:b7:c1:3e:46:92:31:e0:83:e6:78:b0:9b:c9:b3:33:4d:90:
b0:d4:cd:b7:47:b7:be:3f:5a:b2:a1:a0:c1:db:f8:67:b1:44:
9c:8e:f7:b8:4f:cb:a7:32:3b:fb:2b:25:5f:86:09:dd:cb:98:
3a:87:f4:90:3c:64:72:5e:19:52:70:48:ac:82:04:f7:52:eb:
84:76:4d:b3:63:1b:92:87:99:8a:59:25:3d:c0:f5:ff:df:08:
75:5e:e7:6a:ce:ed:1e:54:03:28:65:43:dd:21:4e:a8:37:0f:
6d:ae:b2:4f:f7:39:fa:53:fc:ce:52:e1:72:0d:4f:46:a9:6f:
39:d1:0a:db:a6:53:f4:fc:0b:b2:28:37:f0:5a:92:4a:f1:06:
09:54:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:26 2024 by rpki-client on console-ams.rpki-client.org