Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/W4TvLDDb0KxcQBpPqgd42NTo0kM.roa
File: W4TvLDDb0KxcQBpPqgd42NTo0kM.roa (raw, json)
Hash identifier: jWgAd5BR+157cMUo8c9xwC6GBGFH60xYW/dBctHdbX0=
Subject key identifier: 5B:84:EF:2C:30:DB:D0:AC:5C:40:1A:4F:AA:07:78:D8:D4:E8:D2:43
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 018BCB2BA603133964302691B63B9B021745
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/W4TvLDDb0KxcQBpPqgd42NTo0kM.roa
Signing time: Tue 14 Nov 2023 00:11:57 +0000
ROA not before: Tue 14 Nov 2023 00:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208290
IP address blocks: 81.2.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:2b:a6:03:13:39:64:30:26:91:b6:3b:9b:02:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Nov 14 00:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b84ef2c30dbd0ac5c401a4faa0778d8d4e8d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1f:ac:38:e5:7e:c7:d7:f1:b8:1f:74:92:05:
a1:20:82:bc:eb:aa:ae:9d:b5:d0:5c:14:32:99:f2:
4e:63:9c:15:24:0b:b8:f6:2d:24:37:f4:12:7f:52:
79:62:41:1c:2f:0a:0b:83:41:91:31:ec:f0:68:4d:
74:2a:78:12:2c:b2:f4:48:c7:44:a7:43:2b:80:f6:
a4:7c:d4:f2:2a:92:8a:da:64:6b:8d:44:0d:6b:69:
b1:6e:24:dd:8f:27:de:5e:8c:a5:2b:34:b3:95:a1:
46:77:83:79:3a:30:84:60:06:b5:b4:89:85:68:79:
3b:d1:0c:91:c8:80:a3:2f:e5:24:49:cb:4d:fb:38:
8d:18:7d:d1:d0:ba:af:8f:5f:34:9c:dd:2e:a5:59:
fb:c0:0b:ab:3b:f2:c7:ed:57:74:71:82:4c:2a:02:
e7:6f:a8:95:84:44:49:2f:9b:0b:f1:3b:c2:6e:43:
77:2a:d4:7a:49:7f:b4:81:97:74:a3:1c:54:40:80:
72:39:53:36:11:98:4f:4b:84:ce:91:59:9b:a8:5c:
d5:c6:e0:be:39:33:10:e8:c5:eb:fa:91:46:59:c2:
10:8c:ca:21:77:bf:47:36:8d:e5:bd:56:1f:10:a4:
f5:be:d7:a5:d6:c3:1f:d8:46:c9:98:72:ee:e3:11:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:EF:2C:30:DB:D0:AC:5C:40:1A:4F:AA:07:78:D8:D4:E8:D2:43
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/W4TvLDDb0KxcQBpPqgd42NTo0kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.2.187.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d6:45:26:99:17:82:17:2f:ad:80:76:0b:33:17:f2:da:72:
ac:8d:c7:48:de:80:06:fd:f9:23:8d:b9:12:c8:98:36:3d:9a:
45:1a:34:fb:37:d6:9d:4e:f5:11:d5:f0:53:7c:30:b1:2e:68:
0f:3f:b8:0c:e1:25:da:f9:36:2e:a8:94:90:ec:63:9c:95:9e:
02:07:4e:46:f2:a3:1a:f6:33:b3:2b:d6:14:05:31:f1:16:b7:
43:72:24:52:bb:b6:4e:d5:82:33:f3:eb:b2:1d:05:25:d1:22:
9e:c7:1f:bc:29:aa:ba:4f:bb:db:14:3f:c0:e6:af:da:3e:70:
7e:d8:ac:e4:fb:c4:b7:9a:c5:12:4c:5d:ca:13:a0:8b:5c:28:
57:f3:ad:e9:2b:44:7c:d3:8f:58:c3:87:50:11:64:72:a8:a4:
0d:95:4a:c6:dc:5d:c2:29:17:db:a2:be:fc:d6:e4:e5:43:91:
ae:6e:c3:f0:e2:c1:de:b4:93:ad:44:cd:8f:e2:15:80:df:c2:
1e:2a:07:7c:e0:71:ec:d9:66:50:4f:b7:0b:3a:1c:68:d1:26:
a2:ca:0e:2a:66:3e:c5:ab:c2:83:52:d4:6f:14:63:86:be:a5:
23:b0:90:89:43:4d:51:fb:e5:45:34:1b:60:90:14:27:3c:e9:
9f:36:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:49 2024 by rpki-client on console-ams.rpki-client.org