Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W9CYaUskBwg_doHdVow9PHjPl7w.roa
File: W9CYaUskBwg_doHdVow9PHjPl7w.roa (raw, json)
Hash identifier: ibxB0Hqjy0Qwg+ric8YF4q6NnzswkA/rdiqfF3jLbhA=
Subject key identifier: 5B:D0:98:69:4B:24:07:08:3F:76:81:DD:56:8C:3D:3C:78:CF:97:BC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B631D03CE00524448A09FF1FB8DA25
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W9CYaUskBwg_doHdVow9PHjPl7w.roa
Signing time: Mon 02 Jan 2023 09:00:43 +0000
ROA not before: Mon 02 Jan 2023 09:00:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42947
IP address blocks: 194.41.124.0/23 maxlen: 23
194.41.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:31:d0:3c:e0:05:24:44:8a:09:ff:1f:b8:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bd098694b2407083f7681dd568c3d3c78cf97bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:a7:86:11:86:bc:28:aa:d7:be:66:54:20:
a0:63:25:68:3f:3e:0c:66:a0:e8:fc:57:41:60:d9:
eb:e6:b9:ee:fa:42:f6:76:21:0e:c5:c2:2b:6e:1b:
89:fa:00:47:54:14:87:93:f3:87:cf:b3:fe:66:42:
4f:c2:a8:cd:6c:87:c7:70:62:99:d6:b5:36:b9:6d:
1c:0e:ca:e6:7d:9b:7e:a5:bb:0c:e2:e7:63:e2:df:
03:80:06:fe:04:a6:c9:1d:d1:16:ae:6a:4a:1a:48:
8f:40:00:2d:9c:6e:57:c4:eb:c6:eb:a3:8c:de:ed:
da:b1:18:9b:dc:67:b6:a3:b8:72:ef:7b:96:2e:f9:
8f:35:e6:86:a6:cb:c2:1b:e0:cc:32:54:11:70:8f:
3c:62:4f:27:c1:85:10:bd:2b:a7:1c:cf:c3:05:d7:
e7:b2:83:80:7f:b9:83:7f:e3:9d:eb:b5:50:0a:a1:
23:3a:57:df:bf:92:a6:14:e3:cf:2b:0a:04:c5:86:
d8:52:1b:32:7c:ad:b7:fd:20:f4:af:48:e7:a2:bd:
ec:97:59:68:3d:9a:e6:25:6b:83:b3:9b:f6:24:79:
88:9d:32:a2:cc:88:d9:df:01:df:13:cd:dd:7b:a7:
d8:cb:b2:69:2b:4e:4d:5a:f8:14:cd:f7:bc:56:94:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:98:69:4B:24:07:08:3F:76:81:DD:56:8C:3D:3C:78:CF:97:BC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W9CYaUskBwg_doHdVow9PHjPl7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.124.0/22
Signature Algorithm: sha256WithRSAEncryption
81:03:7a:48:26:67:5c:3a:c4:62:37:d3:12:bf:21:df:f3:c9:
43:88:d9:01:4f:5c:42:f8:db:07:83:79:a8:ad:07:eb:72:9c:
f1:57:90:a0:dc:7e:43:bc:1a:01:09:6b:d1:6b:1e:ce:06:39:
9f:6f:4c:1c:3d:1b:1e:f6:22:67:75:05:9a:25:84:03:73:c3:
0a:ee:7f:a6:51:70:86:57:1b:b5:cb:88:e1:b3:22:55:51:5c:
e4:da:a2:6d:52:9b:43:3a:fb:07:c9:a5:98:58:9f:d0:34:6b:
c9:52:67:f4:c6:79:47:e4:ac:90:a6:11:18:2e:ef:5e:d9:30:
24:80:7c:d5:02:c6:ad:cb:d8:4a:cc:48:5f:31:96:35:8e:cd:
63:9b:9f:14:00:6a:cc:b7:45:89:80:83:4a:26:17:54:2e:e1:
fa:c6:6b:70:ea:39:46:2f:5a:51:2f:27:07:e0:6b:0f:b1:66:
64:14:91:71:1d:bb:5e:26:73:1b:a4:a3:ad:bf:a3:74:2b:0c:
2c:02:58:53:69:a1:d7:fd:0c:04:f5:1f:55:be:77:da:a8:ef:
a4:b6:99:66:02:60:48:12:1d:ed:b6:35:98:b5:32:f0:cb:9d:
31:89:06:bf:0e:de:06:1e:63:f3:a7:c0:e0:16:ca:d8:7d:d8:
d2:85:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org