Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/WuwGNl44Av81JrYe85P6z1f01-k.roa
File: WuwGNl44Av81JrYe85P6z1f01-k.roa (raw, json)
Hash identifier: HHK89SqwYuGBFxNxO34F4Mv63Zv0zedztyIquCItn9c=
Subject key identifier: 5A:EC:06:36:5E:38:02:FF:35:26:B6:1E:F3:93:FA:CF:57:F4:D7:E9
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 018571B0FBA77DA145F21D38D0567A390505
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/WuwGNl44Av81JrYe85P6z1f01-k.roa
Signing time: Mon 02 Jan 2023 08:55:02 +0000
ROA not before: Mon 02 Jan 2023 08:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209964
IP address blocks: 185.6.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:fb:a7:7d:a1:45:f2:1d:38:d0:56:7a:39:05:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 2 08:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aec06365e3802ff3526b61ef393facf57f4d7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:95:7d:dd:58:1f:38:41:fe:0a:a3:d7:33:
d4:d0:d6:5e:2b:a0:37:a3:f0:d9:64:3c:10:10:f5:
c8:86:84:6c:ef:68:05:fc:7c:e0:ec:21:3a:b1:8e:
95:a8:8a:0a:80:93:bd:93:ed:20:04:90:12:06:22:
8c:9c:24:ac:af:9b:80:7c:0f:46:77:b5:47:ab:4f:
10:8d:a0:ad:e9:99:6a:08:8e:db:04:9e:17:e7:53:
d1:42:b2:b2:d5:cd:e6:fa:80:43:4b:54:e8:d1:86:
96:9b:5c:bc:59:e1:3f:4e:77:13:6c:45:f9:d2:10:
54:75:c6:6f:51:9a:7c:22:1a:e4:8b:2f:4c:40:c6:
24:dd:bc:52:91:94:8b:c4:a3:ce:7c:cf:72:78:b4:
ef:9e:f2:fb:6f:bf:8a:78:68:54:ef:4c:c4:0c:16:
d6:9b:69:67:80:86:4d:2d:b1:82:3b:37:61:5b:a3:
c2:58:bc:0b:6d:ee:7b:c8:0e:c4:76:0c:3b:03:02:
5d:6a:38:be:13:38:d3:5b:d0:23:16:2a:25:77:f7:
af:85:c5:f4:71:9d:5a:16:59:62:92:81:b7:ce:a4:
97:54:d8:db:ec:d5:18:df:fb:19:18:8c:d1:5e:2a:
31:fa:6e:c9:31:7c:39:5c:52:80:fb:f9:80:b2:23:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:06:36:5E:38:02:FF:35:26:B6:1E:F3:93:FA:CF:57:F4:D7:E9
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/WuwGNl44Av81JrYe85P6z1f01-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.0.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ee:ed:43:93:7a:19:87:d8:ca:12:3d:7a:f2:8b:0c:c6:49:
80:89:be:df:45:5c:1b:62:a9:2e:c3:d7:95:6c:1b:94:27:b5:
87:c4:ff:2d:fc:42:8a:9c:2b:2b:36:15:9f:69:89:60:1c:d2:
8f:5d:91:2f:b3:a7:9d:5a:68:db:60:46:c7:29:90:17:a0:cb:
99:47:64:f7:4a:9e:0f:b2:eb:aa:d3:90:f3:bf:2f:b6:92:6f:
b6:ef:85:18:e5:da:5c:b2:ba:3a:ca:a5:28:76:ca:2c:02:3d:
e2:94:d9:2c:59:5c:2d:b0:d5:6e:69:0d:59:00:05:8d:25:aa:
07:82:26:35:59:54:a0:18:4f:0f:ea:e7:05:f1:05:c0:ea:a2:
ba:9e:b1:3d:ea:6f:b6:6b:38:46:90:83:5d:87:90:51:e9:a6:
85:8b:d2:ab:8e:77:9a:70:fc:c0:c4:98:0d:47:e1:24:a6:f2:
c5:04:a2:7b:fd:5d:55:fa:34:b6:79:97:bd:12:e6:e0:19:ad:
6b:3c:28:b1:19:79:3e:39:ea:97:7d:bf:3f:bd:fa:42:28:9c:
cd:ff:da:10:eb:ad:f4:c7:7f:c5:ed:d4:11:29:28:bd:3d:96:
f9:63:8c:a0:d9:ad:8a:6f:f8:72:7d:92:3d:7a:f2:64:f8:af:
5c:9d:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:22 2024 by rpki-client on console-ams.rpki-client.org