Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/WCQWVpYKqRGad3V5IVOG9A5GQV4.roa
File: WCQWVpYKqRGad3V5IVOG9A5GQV4.roa (raw, json)
Hash identifier: ka+mf3gr4+KS8osO14cCaybp3Hgmy5dID2+F3JCUSrs=
Subject key identifier: 58:24:16:56:96:0A:A9:11:9A:77:75:79:21:53:86:F4:0E:46:41:5E
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0185C9FEE5537651C9FC914076D48D324139
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/WCQWVpYKqRGad3V5IVOG9A5GQV4.roa
Signing time: Thu 19 Jan 2023 12:26:43 +0000
ROA not before: Thu 19 Jan 2023 12:26:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 20:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:fe:e5:53:76:51:c9:fc:91:40:76:d4:8d:32:41:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 19 12:26:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58241656960aa9119a777579215386f40e46415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:8a:20:63:fa:6e:85:43:38:5e:89:c7:fa:
c9:6f:93:ef:18:3f:72:cc:61:ca:24:4f:f7:75:28:
f0:8b:9e:2d:08:85:4d:56:f4:d8:a7:c6:aa:f0:c4:
09:f7:8d:c4:30:a3:9b:e9:ef:23:cd:82:aa:c1:fc:
6a:fd:47:94:4d:02:0a:e6:42:92:c0:70:ae:14:32:
33:45:03:99:fe:55:e1:4b:8a:b3:93:99:dd:30:0c:
a9:fd:89:ff:06:91:5f:57:5b:54:d8:75:6f:4b:c9:
e9:5a:cd:5a:61:26:5c:9e:46:06:c2:6b:8c:42:cc:
80:f4:69:7d:00:6b:8b:3c:59:f7:86:af:68:8b:ae:
eb:86:84:8c:8d:46:19:58:04:7c:ef:fa:9c:40:8d:
85:b3:60:dc:34:83:4d:a9:8e:75:90:10:df:0e:c4:
7f:5c:fc:14:47:3d:b2:4a:dc:f4:3b:c9:d3:46:ea:
0b:f8:e1:84:a2:a0:84:c0:9c:f7:f8:be:d8:00:44:
63:32:14:df:5e:50:79:b5:38:53:4a:5a:5d:e4:e1:
c9:e2:7a:86:f7:2e:2d:44:27:b5:ca:bc:5e:be:ae:
05:e9:77:69:61:fe:b3:ee:96:a8:15:86:1d:3f:7a:
53:fb:46:3e:4f:03:dc:22:dc:eb:06:09:c9:a6:af:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:16:56:96:0A:A9:11:9A:77:75:79:21:53:86:F4:0E:46:41:5E
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/WCQWVpYKqRGad3V5IVOG9A5GQV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5d:cc:77:98:13:80:59:77:9b:91:66:2d:91:6c:9c:e9:c5:
9b:42:7e:53:fe:ed:09:a7:d7:3f:23:67:fe:3b:0b:7a:ed:c5:
e6:40:59:1a:ee:79:0d:ca:dc:af:6f:7c:2b:be:c1:60:be:38:
82:c5:d1:30:ae:45:a8:96:c4:3d:de:92:45:20:44:97:ec:33:
fc:60:d1:e2:3d:bb:90:40:0b:ef:87:ba:48:2c:49:10:0b:43:
ac:06:8c:a7:a0:f1:f3:3b:df:46:5a:53:ee:2b:39:56:7c:d8:
ad:e4:f7:78:f1:90:25:f3:66:b3:ee:47:68:f1:b9:62:d5:d3:
7c:47:24:04:00:1e:3f:db:1c:5d:ee:7d:18:ab:bb:d8:1b:ca:
9e:16:c6:3e:c1:d5:09:b7:b5:0d:80:66:87:86:f6:7c:4c:65:
89:ac:0d:6a:bc:eb:af:44:9e:58:4b:25:bc:0e:9b:8e:d9:f2:
d4:f6:c1:3b:75:5f:8a:c4:04:09:93:a2:80:ee:38:59:40:78:
ba:07:ff:83:6b:3e:8e:9a:71:f4:09:ba:ba:62:42:8a:23:36:
1e:14:8a:6f:a4:d7:ec:bb:13:8b:d2:17:6c:04:9f:0e:ff:dc:
1f:65:35:ba:53:a3:df:c7:23:ba:0c:c1:79:41:e7:dd:ad:e2:
8a:01:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org