Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/wulGIti_k3worNOwkb_ltx38laI.roa
File: wulGIti_k3worNOwkb_ltx38laI.roa (raw, json)
Hash identifier: PUM0fek4JQ1kEo2x6bR7SHTw3qT0urQJeKVvZSPoKQA=
Subject key identifier: C2:E9:46:22:D8:BF:93:7C:28:AC:D3:B0:91:BF:E5:B7:1D:FC:95:A2
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 018DD556BE9BCC1933F41431EC84F6EC0E91
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/wulGIti_k3worNOwkb_ltx38laI.roa
Signing time: Fri 23 Feb 2024 09:40:48 +0000
ROA not before: Fri 23 Feb 2024 09:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 185.129.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 09 Mar 2024 13:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:56:be:9b:cc:19:33:f4:14:31:ec:84:f6:ec:0e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Feb 23 09:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2e94622d8bf937c28acd3b091bfe5b71dfc95a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:a6:8c:74:d7:03:05:09:07:5b:3f:93:f0:
2f:b9:67:a9:7c:1e:46:cc:6c:c3:e0:62:bc:b2:1a:
a0:5a:b2:e6:94:20:92:9f:25:13:cb:63:74:1f:1b:
dc:7c:99:85:46:c8:db:80:3d:31:5c:bb:88:6d:b7:
84:3e:33:80:90:96:16:63:c4:9d:d5:1e:8e:f7:23:
b5:1e:65:d8:3a:bd:28:c4:b5:01:44:24:10:aa:f8:
85:91:ce:3f:7b:8a:e3:64:08:86:76:8b:56:35:68:
c1:fc:20:95:6d:06:7a:f5:1e:07:af:70:51:39:b1:
a4:71:a1:ec:a5:04:cf:2c:47:7d:1a:0f:26:0a:a5:
35:68:64:3b:1a:fa:78:de:f2:58:62:63:7b:86:57:
61:7a:ec:9f:53:05:bf:bd:22:3e:ee:da:7b:a5:13:
6f:8a:23:87:b0:84:e6:97:2f:c5:ab:74:8a:f9:a1:
0f:9a:4e:98:da:b7:d1:71:32:e2:c4:28:da:58:e3:
33:0c:4a:dc:e2:17:a5:49:0e:99:06:d5:44:02:9c:
da:3d:52:1c:c7:24:25:b7:9c:8f:db:0e:ae:43:07:
2a:76:24:9a:f0:2d:1b:39:92:24:33:1f:de:0b:dc:
6a:8c:b9:28:6c:52:0a:40:34:5e:28:a4:e0:10:78:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:46:22:D8:BF:93:7C:28:AC:D3:B0:91:BF:E5:B7:1D:FC:95:A2
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/wulGIti_k3worNOwkb_ltx38laI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.208.0/22
Signature Algorithm: sha256WithRSAEncryption
78:2f:27:c0:18:bb:29:59:e2:83:86:5b:5b:1e:b6:79:82:50:
70:20:ba:cc:26:41:5b:29:73:6e:ae:3d:ba:f1:70:47:1c:63:
56:d0:b6:f1:07:f4:6f:69:c0:83:1e:94:d7:c4:e7:28:eb:12:
25:d2:65:14:74:f0:81:cb:7c:19:e1:e7:2d:35:e4:75:cf:69:
65:00:84:a9:85:28:e6:55:48:d5:e9:1f:5d:5f:55:2d:ea:4b:
f9:17:55:f0:3d:ee:aa:98:0d:78:a2:28:50:af:28:ed:a8:8d:
96:f2:b9:d1:cb:b5:30:0c:54:c2:3f:fd:30:31:bf:f4:3d:68:
8b:55:b8:ad:f9:f6:a9:75:7e:25:70:5f:d1:98:13:2d:ec:e2:
9b:9a:35:65:af:de:41:46:ec:16:c1:d3:63:ce:01:98:8d:55:
59:84:4a:1f:e6:26:2d:18:ef:6c:9e:9f:87:46:67:5e:d1:56:
b0:a9:b8:3c:bc:9f:86:df:c9:40:10:11:4f:f6:34:73:2d:08:
3c:b7:e6:5e:6c:c1:50:70:fc:c4:35:7d:fd:8c:a5:d5:43:00:
b6:d5:0d:d1:6f:be:59:4a:6d:fa:bd:05:22:e4:e8:b5:75:83:
93:95:3e:b2:1b:2d:0e:e7:28:5a:72:a0:43:16:08:dd:c3:87:
2d:9b:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 17:14:16 2024 by rpki-client on console-ams.rpki-client.org