Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WetZS0JRs-SS1Ixoc0JiRHm5ub0.roa
File: WetZS0JRs-SS1Ixoc0JiRHm5ub0.roa (raw, json)
Hash identifier: AmqN2BqooEI/PzzoKJBetbO4Eu7Pk4wVyL3+pK6TqUM=
Subject key identifier: 59:EB:59:4B:42:51:B3:E4:92:D4:8C:68:73:42:62:44:79:B9:B9:BD
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD4211301F3693C502CCFC172B20B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WetZS0JRs-SS1Ixoc0JiRHm5ub0.roa
Signing time: Mon 02 Jan 2023 17:15:07 +0000
ROA not before: Mon 02 Jan 2023 17:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204821
IP address blocks: 185.238.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d4:21:13:01:f3:69:3c:50:2c:cf:c1:72:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59eb594b4251b3e492d48c687342624479b9b9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:c9:31:2c:99:60:38:97:20:db:40:1e:8f:
40:30:c9:a4:a1:e1:1c:6f:a9:ba:20:f4:78:7e:2c:
a5:7e:9e:ce:53:ac:51:4d:d8:cf:7d:c6:ed:4e:b6:
d8:12:9c:41:98:5e:05:c4:b4:ed:dc:a5:be:6a:32:
b1:92:dc:0d:10:5e:76:98:49:06:2d:6c:7d:21:5d:
af:e2:c5:e6:f9:ca:e4:d1:ad:a1:aa:f3:41:f9:f9:
f5:7f:b2:0e:6c:9e:bd:bc:dd:96:de:98:65:83:85:
3b:92:37:a1:96:3f:3b:d7:2e:bb:de:ef:2a:37:19:
11:00:29:bc:6b:a9:3d:fb:83:76:81:51:75:84:48:
63:46:33:43:62:af:df:84:5b:53:a2:43:a8:54:5e:
99:6e:07:7a:9a:ea:26:8e:b7:79:fd:eb:a3:2a:fa:
72:05:ad:3a:e5:5e:32:e0:5f:59:9e:0d:42:34:3d:
a6:47:ec:ed:68:4e:e3:ce:1e:40:b4:bf:aa:c9:30:
87:db:1f:8a:4a:e6:6f:3a:23:fe:5d:34:e2:6c:62:
29:b2:38:9e:7a:17:30:20:38:8c:c5:e7:23:ad:0d:
7e:88:a0:26:af:79:c2:65:92:3f:dd:20:a7:e5:8a:
98:d0:35:01:0c:be:f2:ea:61:a8:90:f0:4d:4f:ce:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EB:59:4B:42:51:B3:E4:92:D4:8C:68:73:42:62:44:79:B9:B9:BD
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WetZS0JRs-SS1Ixoc0JiRHm5ub0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.232.0/22
Signature Algorithm: sha256WithRSAEncryption
78:65:ce:f7:a5:3c:82:ba:ed:45:51:76:15:95:e1:84:d9:6f:
f9:61:0f:84:e9:28:74:f6:17:55:ed:10:6b:af:66:3d:ae:f7:
4c:e4:71:1f:24:78:59:f7:dd:3e:69:32:6f:5d:75:fd:3b:d1:
2d:be:33:f7:6e:66:ae:63:57:47:cd:b5:de:e8:b5:89:31:3f:
0e:22:e6:99:b7:79:02:a9:36:92:1c:65:33:e0:41:da:48:5d:
33:ae:61:b8:ae:4e:8d:9f:6a:9d:4a:a3:13:35:2c:d2:2c:6d:
12:5d:e6:03:58:b6:b0:07:d2:20:20:de:d6:86:80:c0:6d:5e:
93:4d:a1:3c:d7:d1:08:66:60:58:bf:32:e6:9c:37:35:08:cd:
1b:5c:8d:36:d0:62:e1:5b:c9:5c:40:fb:93:ed:db:a7:61:42:
dc:d3:ba:11:a5:84:0f:91:5a:49:c1:84:7d:24:ef:bc:57:e3:
15:e9:d4:f3:e9:c3:28:df:1c:60:a1:e6:0b:e3:bc:0b:eb:ce:
13:19:e7:24:a2:90:09:bc:80:47:1b:80:00:01:8d:73:fa:93:
56:32:d7:2e:d4:61:7d:26:52:b3:08:36:87:8b:57:3e:24:95:
b2:8f:2e:56:49:49:6c:72:a7:26:b6:73:f3:42:b0:46:5e:fb:
19:10:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org