Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WT1tbFaB8Kgi5c3r8bMpXCEm7XU.roa
File: WT1tbFaB8Kgi5c3r8bMpXCEm7XU.roa (raw, json)
Hash identifier: +EdT6exx52/t+Ik7sDa0jW2PhhyMtMlwTImzv1qz06M=
Subject key identifier: 59:3D:6D:6C:56:81:F0:A8:22:E5:CD:EB:F1:B3:29:5C:21:26:ED:75
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246D8A877819C43836B295C0AA2BBE0
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WT1tbFaB8Kgi5c3r8bMpXCEm7XU.roa
Signing time: Mon 02 Jan 2023 11:38:43 +0000
ROA not before: Mon 02 Jan 2023 11:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49387
IP address blocks: 85.187.203.0/24 maxlen: 24
85.187.201.0/24 maxlen: 24
85.187.202.0/24 maxlen: 24
85.187.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d8:a8:77:81:9c:43:83:6b:29:5c:0a:a2:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593d6d6c5681f0a822e5cdebf1b3295c2126ed75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:5b:ad:f3:0f:e5:eb:b1:1c:5a:87:78:cb:
09:18:db:e9:68:de:9b:ce:b7:c6:c4:21:7d:58:b8:
84:b5:37:8a:4f:7c:b9:b7:28:15:d4:6a:7e:84:03:
d6:7a:77:05:51:fb:70:e2:2b:c0:9e:d5:ac:47:96:
8c:b6:69:00:b1:de:3e:9a:9c:72:5e:e8:2a:ce:31:
a4:e5:26:f0:77:e8:6f:87:58:97:e3:43:07:1a:11:
8f:08:2f:8b:d6:35:dd:29:94:44:7a:07:87:aa:89:
ba:ec:f1:d4:96:95:70:b1:1c:76:55:a9:7b:81:62:
7c:38:5d:3a:70:0b:2b:01:6c:8f:0e:36:e8:1e:45:
53:97:47:a8:f7:05:25:46:45:ba:bb:fe:9c:24:b7:
ae:0a:d7:e6:7a:e2:1a:e1:12:4f:43:9a:51:fe:b2:
f8:ed:d7:be:1e:b4:01:fb:30:63:92:27:a0:59:b0:
d5:78:be:d1:b6:81:1c:78:1d:b0:55:45:41:fb:13:
f3:fe:26:21:93:b2:e8:8a:f5:11:98:9f:3c:f2:af:
6c:2d:d2:92:15:fa:9c:e0:64:29:9d:c9:73:d4:a9:
a5:d1:52:36:80:b6:5a:fb:8c:1d:0f:6b:ce:ab:d8:
0a:c8:20:8b:6d:da:e8:3d:92:c0:16:e6:14:ca:b7:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3D:6D:6C:56:81:F0:A8:22:E5:CD:EB:F1:B3:29:5C:21:26:ED:75
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WT1tbFaB8Kgi5c3r8bMpXCEm7XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.200.0/22
Signature Algorithm: sha256WithRSAEncryption
38:8c:63:7b:27:8d:52:ec:ba:28:29:4c:4c:8e:ce:8b:bb:76:
26:b1:7a:04:08:ae:2c:62:7d:40:fc:a1:ff:95:55:ec:2a:c7:
80:20:df:80:dc:65:9f:49:b9:c0:f4:80:7b:6c:e4:76:cf:ba:
78:8e:90:c4:c0:79:36:c0:dd:39:4d:7b:51:15:28:56:8d:61:
9a:a6:ff:a6:fb:6b:2e:d4:e1:2f:2e:7b:49:e1:cb:57:19:d3:
a5:dd:29:d9:d0:72:41:82:e5:df:d4:ed:a2:7b:ca:8d:66:e3:
2b:f1:26:15:ad:d7:c9:36:f1:47:07:d1:e7:cd:56:42:98:ec:
ea:a9:48:d7:e6:e3:cb:b9:95:52:68:80:98:4a:c0:40:4a:a5:
10:d6:40:2d:e9:b8:22:e7:8b:ec:fe:0f:de:44:93:b5:52:4f:
bf:17:17:15:9d:b7:9a:00:db:4d:44:cf:e9:d5:60:01:f1:5e:
1f:91:26:df:66:ee:65:42:d8:87:ef:88:35:32:83:14:61:c0:
2a:8e:34:0e:43:62:f4:67:f2:a2:01:61:da:cf:65:59:a8:ed:
a3:3d:71:d8:9d:68:8a:84:25:ea:42:14:57:4e:c4:62:aa:85:
5c:cd:6e:96:30:f4:10:38:01:d6:ef:bb:f9:32:2b:b2:a8:5b:
86:a9:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org