Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e1a472-14ef-46af-b4c9-e6f89903ee7d/1/WAFqsF_wy0rrwV9dQvW4sl7vXyA.roa
File: WAFqsF_wy0rrwV9dQvW4sl7vXyA.roa (raw, json)
Hash identifier: eFCR7pm6Nw9mf4F8B6SkZPvXJgh9ZcyFbVDSK2y1b5o=
Subject key identifier: 58:01:6A:B0:5F:F0:CB:4A:EB:C1:5F:5D:42:F5:B8:B2:5E:EF:5F:20
Certificate issuer: /CN=b56f0e2fe6da00d2cd01f73a1c7d264eaa722661
Certificate serial: 0189D7B6F4C81E6AFADA2020268CA250A97A
Authority key identifier: B5:6F:0E:2F:E6:DA:00:D2:CD:01:F7:3A:1C:7D:26:4E:AA:72:26:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8OL-baANLNAfc6HH0mTqpyJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e1a472-14ef-46af-b4c9-e6f89903ee7d/1/WAFqsF_wy0rrwV9dQvW4sl7vXyA.roa
Signing time: Wed 09 Aug 2023 00:33:58 +0000
ROA not before: Wed 09 Aug 2023 00:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209281
IP address blocks: 86.62.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:b6:f4:c8:1e:6a:fa:da:20:20:26:8c:a2:50:a9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f0e2fe6da00d2cd01f73a1c7d264eaa722661
Validity
Not Before: Aug 9 00:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58016ab05ff0cb4aebc15f5d42f5b8b25eef5f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:70:6c:23:d4:f9:4c:de:15:8d:2c:81:5a:
b3:43:7b:bf:d4:e6:fd:fc:b2:40:12:15:b6:b4:2a:
1c:3a:3f:11:a9:6e:f6:5f:b2:c7:fd:20:d4:ac:94:
91:ea:b7:6e:19:d1:1c:bb:5a:a9:90:9e:cc:b5:80:
4b:ce:ab:f7:21:eb:4d:05:f4:aa:e9:ef:98:1f:49:
cd:cb:e1:e0:15:f6:b4:1f:8b:c3:57:8b:b8:b2:c4:
e5:a5:60:6c:fc:64:25:3d:e1:ee:96:a4:70:7d:3e:
26:4b:49:e0:2d:9e:4a:f1:96:47:8b:bd:ad:5d:cc:
03:f4:b9:04:1a:6c:cc:e3:12:80:27:8c:52:01:f8:
fd:01:84:55:dc:e0:bd:db:2b:98:41:0e:44:d8:f0:
f0:35:36:ac:f3:54:43:4b:de:30:2a:22:20:d8:a2:
92:d0:19:60:c2:a0:2f:54:16:cd:5c:46:27:e0:b8:
43:69:fa:ac:67:b3:3d:8a:82:69:37:ae:23:c0:0a:
2a:d1:63:3b:d0:02:22:67:7b:2f:6d:a6:4e:fd:5a:
a4:f2:69:85:8d:00:4f:11:ee:c5:f2:86:2a:d4:13:
4d:f2:15:f0:49:e2:7f:1f:6d:fa:be:ac:35:4f:67:
4e:c9:8c:21:2a:ae:d0:a0:46:53:5b:8c:c7:62:d1:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:6A:B0:5F:F0:CB:4A:EB:C1:5F:5D:42:F5:B8:B2:5E:EF:5F:20
X509v3 Authority Key Identifier:
keyid:B5:6F:0E:2F:E6:DA:00:D2:CD:01:F7:3A:1C:7D:26:4E:AA:72:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8OL-baANLNAfc6HH0mTqpyJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1a472-14ef-46af-b4c9-e6f89903ee7d/1/WAFqsF_wy0rrwV9dQvW4sl7vXyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1a472-14ef-46af-b4c9-e6f89903ee7d/1/tW8OL-baANLNAfc6HH0mTqpyJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.20.0/24
Signature Algorithm: sha256WithRSAEncryption
78:04:7d:c7:86:1f:3d:2b:3f:ba:a1:53:42:45:91:73:2f:4e:
94:a1:2d:73:ad:f8:cc:37:bd:cc:e5:3e:9c:43:93:9d:36:a4:
31:3a:21:56:fd:27:6d:f5:1f:85:2b:9d:e9:ab:de:c0:96:0c:
97:05:ab:c4:ac:c0:c9:be:33:e9:61:13:5a:bb:14:14:dc:dc:
1f:54:89:9f:a2:df:39:b1:e2:da:76:4d:43:eb:87:62:96:a4:
1d:f8:5c:63:90:4b:a5:70:ec:d9:96:04:49:9b:2c:a6:15:03:
13:c2:50:03:3e:ac:37:72:bd:db:a1:9c:c8:7d:55:1c:03:4b:
bc:fd:21:9d:8b:10:8f:cd:3c:f8:d4:09:30:8d:9f:6e:11:db:
40:d1:93:e6:a7:0b:06:57:a0:8e:07:97:fa:04:e4:e8:4d:93:
7b:dc:f8:6d:52:53:57:be:15:cf:d9:d7:d6:2b:24:1f:47:26:
54:43:4e:b9:62:2e:e2:91:b5:25:87:75:04:c0:34:74:e1:56:
6f:1b:89:28:8c:29:2f:35:0e:13:00:3e:f4:d7:c1:cd:63:57:
05:e0:2a:4d:42:aa:e1:b6:68:cc:77:23:f9:38:81:68:5b:f5:
b9:28:ce:05:a0:0e:51:9a:4b:dd:37:be:a2:cb:87:1d:66:90:
b9:d6:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:54 2024 by rpki-client on console-ams.rpki-client.org