Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WP1T2dumsN8Az5V0FunsOIkS-eU.roa
File: WP1T2dumsN8Az5V0FunsOIkS-eU.roa (raw, json)
Hash identifier: zwZlZaX6GJ3ac3mW6UW2/8i6zW+IVSTMZz8YrYzzZXw=
Subject key identifier: 58:FD:53:D9:DB:A6:B0:DF:00:CF:95:74:16:E9:EC:38:89:12:F9:E5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E88A73677403C2BDE0CFCC2E251F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WP1T2dumsN8Az5V0FunsOIkS-eU.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35000
IP address blocks: 195.144.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e8:8a:73:67:74:03:c2:bd:e0:cf:cc:2e:25:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58fd53d9dba6b0df00cf957416e9ec388912f9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:d4:a0:14:96:6f:88:0d:04:ea:48:ca:eb:
8c:a6:c2:ff:ea:6d:b7:40:1c:54:76:aa:96:5a:ef:
7d:d6:11:04:3a:79:69:59:9c:f5:e3:e0:9a:7c:58:
2f:af:36:b3:77:03:6d:18:e6:ac:92:d8:f2:0d:e1:
93:d1:57:52:ac:20:1d:02:1e:79:2a:05:df:ac:84:
0f:1b:34:2a:dd:39:ac:2d:1b:24:69:60:c7:1a:b2:
cb:04:f3:c5:73:c0:d4:d6:aa:17:48:cc:22:a6:cc:
6a:b8:64:9a:bf:98:e5:9d:dd:12:22:b7:a5:b1:c7:
0e:a2:61:43:31:8c:00:94:58:03:33:0b:37:d3:7d:
ca:61:b5:01:50:1c:fd:a8:cc:d4:15:5b:52:b8:69:
e5:3f:66:b8:3a:f1:5b:6f:9d:51:fb:2a:9d:07:c7:
0d:61:87:e9:5b:b9:83:0a:16:60:76:a4:bc:f5:72:
94:47:37:3a:18:a7:0d:e5:4a:03:6d:12:ad:65:6b:
94:23:52:cb:2a:b1:2d:e6:ce:32:b1:9c:d2:94:a5:
64:fa:52:8b:ae:ba:fb:52:42:6c:0d:a6:8b:08:92:
71:57:65:c2:20:9f:26:d4:3e:8b:1b:ec:a2:9c:3d:
59:4d:66:cf:e6:44:06:96:7e:1c:40:05:b9:6b:f0:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:53:D9:DB:A6:B0:DF:00:CF:95:74:16:E9:EC:38:89:12:F9:E5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WP1T2dumsN8Az5V0FunsOIkS-eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.243.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c2:45:3b:f8:f3:5e:15:8d:7e:d0:1e:d8:52:f4:73:9a:28:
d8:82:0f:33:40:99:51:55:d3:ad:0a:17:cd:73:db:35:ba:0e:
75:94:5c:13:6b:69:c9:f2:9f:c9:c0:75:55:4a:a9:07:56:07:
ff:6e:cf:17:f8:f9:05:98:77:3d:1b:83:df:0c:9a:d5:53:53:
df:ae:08:51:93:08:67:03:f7:d3:36:b9:e7:34:6a:5e:6c:72:
86:7f:d9:d2:05:98:0f:8a:b0:70:df:6b:96:52:a6:8c:04:81:
9d:51:3a:cb:1d:5f:c2:f7:f3:84:bf:3f:32:c1:81:95:de:ac:
f9:b8:64:f9:2e:3d:d9:9b:62:33:3e:5b:10:6c:f7:0f:9e:60:
8b:af:ec:00:97:09:ff:0d:e6:8a:4b:7d:1f:59:38:0b:5c:b0:
d4:03:ec:0f:14:13:c2:6b:13:30:a5:df:b3:d3:3f:24:e0:23:
d0:31:7b:0a:8f:1d:de:7a:aa:f0:98:5c:bd:58:43:cd:43:5d:
25:18:4c:9d:3b:87:4a:31:8c:6c:e5:d1:ee:12:bd:2e:ee:7a:
c7:27:1b:c1:5e:e9:38:d1:b0:91:e5:25:a0:03:7e:9e:aa:b1:
f6:bb:68:ac:f4:31:8b:9e:d2:6e:dc:e8:c0:e7:f0:34:76:93:
4e:ee:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org