Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w6BCn0y0VgYc9SNbA_fikG50Nww.roa
File: w6BCn0y0VgYc9SNbA_fikG50Nww.roa (raw, json)
Hash identifier: WqfMZ91T8ESR/3g2Bkz/GsmnTfkY9wjEFwuIAo6zSI0=
Subject key identifier: C3:A0:42:9F:4C:B4:56:06:1C:F5:23:5B:03:F7:E2:90:6E:74:37:0C
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0187BD3E7D0E2B55D34D937A753CFD70D9C2
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w6BCn0y0VgYc9SNbA_fikG50Nww.roa
Signing time: Wed 26 Apr 2023 11:06:41 +0000
ROA not before: Wed 26 Apr 2023 11:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 2.58.54.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 26 Apr 2023 13:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:3e:7d:0e:2b:55:d3:4d:93:7a:75:3c:fd:70:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Apr 26 11:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3a0429f4cb456061cf5235b03f7e2906e74370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:a2:84:6f:23:3b:47:7a:54:6b:09:3c:aa:
37:70:5a:2e:41:d6:7e:59:e6:3d:59:4d:4f:a2:73:
1d:ef:8e:fc:72:74:de:32:8f:8d:88:f8:5a:30:a0:
e6:0a:d4:27:2e:10:bb:40:d9:b8:28:a8:e1:f9:7b:
13:1e:6e:a3:6c:f1:35:b9:36:0c:2e:3f:b1:57:65:
92:8b:6a:62:16:dc:b5:c1:9c:cc:f2:71:f9:6a:bd:
50:88:54:00:c8:89:46:01:04:8c:5f:f6:3c:3c:30:
09:87:c0:6f:dc:df:c8:2d:1c:67:14:b8:0c:d0:4d:
92:19:38:22:89:45:73:15:a4:d5:76:ba:bc:74:fd:
77:e6:f2:f6:70:75:74:c9:c9:7e:a2:1b:fc:8b:39:
af:33:10:a2:8a:8e:8d:34:7c:b7:f6:a8:ac:df:b0:
e9:54:dd:e7:6a:e2:8c:87:7a:c1:6c:7a:0b:09:8c:
44:06:b2:bf:90:3b:b3:1c:9c:a5:dc:a8:bf:49:ec:
67:f0:61:56:ec:54:da:8d:b2:d0:28:f0:f5:28:12:
0d:55:2e:2d:93:7a:16:10:57:dc:9f:2b:05:85:ff:
38:c9:1f:10:64:a8:35:25:f2:9d:3c:9c:67:13:6c:
3e:66:fc:eb:a0:f9:ee:38:6b:53:5c:9b:d9:64:6b:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:42:9F:4C:B4:56:06:1C:F5:23:5B:03:F7:E2:90:6E:74:37:0C
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w6BCn0y0VgYc9SNbA_fikG50Nww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1d:1e:88:0d:88:70:67:74:dd:b2:47:5d:3c:20:58:2b:d4:
4f:6c:94:cf:87:ea:4a:71:c5:a6:50:13:38:96:d3:0a:34:e7:
cc:bb:53:de:41:2f:ba:ec:52:e6:98:0f:49:16:2e:7d:d7:2a:
b8:47:14:64:e8:74:45:45:43:15:1f:1a:aa:15:65:29:ed:89:
fc:2c:2f:46:f7:c9:df:4a:6b:a1:53:33:0a:69:30:72:01:bb:
bc:63:c7:8a:03:8b:9b:70:cd:de:53:89:86:a7:9f:85:75:65:
33:7d:69:d0:55:de:24:7a:1e:97:a9:03:22:88:ff:2e:93:bc:
44:d0:04:13:a7:4c:9c:94:94:d9:37:f2:2c:3d:4c:ad:ca:0c:
da:4b:80:5b:2b:b6:58:6e:73:37:e8:df:a8:1f:4f:8c:a8:a0:
a4:56:df:22:70:73:b2:09:fe:90:ac:2b:e5:e9:1b:d0:a1:4d:
a6:ce:a7:7e:81:23:d0:6e:af:eb:0e:5a:67:db:a7:6c:55:44:
00:b6:65:56:9d:3b:22:37:9b:6f:a1:e7:6f:32:af:58:c4:3d:
62:d1:a5:02:37:41:0b:e1:d3:1d:79:38:9d:45:2e:11:0d:4d:
13:24:69:49:b3:ca:7a:15:d5:90:da:ef:e8:a7:76:f3:0b:8e:
cb:de:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org