Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wCXv2YU1PO995OvN_zBLWRCefXY.roa
File: wCXv2YU1PO995OvN_zBLWRCefXY.roa (raw, json)
Hash identifier: aZCn/kUqJO04ZW/fkONTf/47O6Ie7718OlMydYBIdBY=
Subject key identifier: C0:25:EF:D9:85:35:3C:EF:7D:E4:EB:CD:FF:30:4B:59:10:9E:7D:76
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F9FCAD215B1C2E641814E144648C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wCXv2YU1PO995OvN_zBLWRCefXY.roa
Signing time: Sun 01 Jan 2023 07:55:20 +0000
ROA not before: Sun 01 Jan 2023 07:55:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 185.137.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f9:fc:ad:21:5b:1c:2e:64:18:14:e1:44:64:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c025efd985353cef7de4ebcdff304b59109e7d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:3f:e0:8d:4a:14:8e:40:58:0a:f5:a1:ea:
08:cb:69:61:f7:8b:e0:55:1b:9f:de:f5:9e:70:c5:
cc:8c:95:a7:3e:6f:7c:a7:6a:ff:73:71:7d:8d:6f:
18:32:f4:2c:a5:9c:95:1b:0b:80:9d:34:d4:6e:b0:
4d:ba:d6:5f:5e:b3:a0:83:6e:ec:2b:a6:1a:5e:98:
a3:74:8b:11:d6:c7:15:b2:2f:62:36:ae:2a:87:9e:
9f:11:c0:4a:1b:fa:35:a2:d2:50:c5:1a:24:be:4b:
06:8d:f2:80:eb:f0:e6:8c:7d:d6:8b:ef:c9:be:ed:
6c:81:b4:67:77:ec:fe:bc:81:63:f3:7e:ac:fd:37:
72:38:2f:8e:9f:69:82:8d:b7:90:76:18:b1:1e:65:
ca:ff:6f:b3:25:3d:ff:b4:8e:6b:c5:f0:6b:cb:06:
37:79:b6:0e:af:6f:fc:91:de:fb:5e:2b:bc:df:05:
1a:5e:66:c3:2f:fb:68:27:80:0f:62:76:65:bf:c7:
e2:40:7e:1c:d0:da:88:82:f9:7a:5d:2f:e3:de:7b:
fc:e2:e2:03:58:73:3e:01:ac:27:44:ae:e8:82:57:
1b:57:a6:99:d6:d6:ec:2c:e4:b7:a1:ab:90:2d:0d:
57:d1:18:c0:1e:53:3e:61:06:cd:f3:ef:6a:b1:df:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:25:EF:D9:85:35:3C:EF:7D:E4:EB:CD:FF:30:4B:59:10:9E:7D:76
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wCXv2YU1PO995OvN_zBLWRCefXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.180.0/24
Signature Algorithm: sha256WithRSAEncryption
16:62:f1:23:34:95:aa:f7:61:4e:2d:42:ae:b9:c0:62:1c:2b:
7a:4c:32:89:66:e8:f5:14:f9:50:6d:03:3d:b4:e7:67:9c:c0:
25:90:26:89:af:26:99:38:64:dd:1f:22:3f:97:4e:38:53:83:
f4:05:55:2e:d1:05:3e:43:24:2b:27:9a:6b:9c:13:f6:84:b0:
fe:20:ae:c0:58:6a:08:55:a8:b7:79:a7:94:cd:16:bd:b1:e2:
f8:d0:a6:81:fe:76:97:90:90:86:68:c8:6d:61:2e:ea:78:00:
1d:1e:e7:6a:41:bd:5f:db:ed:56:ba:9c:f1:00:44:93:97:f5:
47:fb:55:00:e7:3a:22:06:08:1b:34:5c:42:f8:be:c7:5f:db:
67:7d:2a:bd:d4:58:a6:c2:a8:08:ae:9a:95:7f:fb:ee:a8:09:
76:36:47:53:7d:ed:21:61:81:74:e3:92:a3:79:84:e7:46:51:
ef:0a:59:62:a0:d5:1c:68:07:c5:ee:88:01:70:e3:bb:20:f5:
f7:48:aa:10:9d:16:6c:07:04:32:6a:a3:eb:81:f8:23:03:ad:
9d:9f:1e:50:e8:8b:02:b9:6a:4a:2e:55:72:65:20:8c:64:56:
cb:76:20:d9:7a:7a:69:f7:fe:44:2c:e9:1a:16:7c:61:f2:d9:
68:7c:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org