Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/WHr35u-ONegQKs7fk5G9KpTqKCA.roa
File: WHr35u-ONegQKs7fk5G9KpTqKCA.roa (raw, json)
Hash identifier: K6LCSEpC7s7ABDnP04WQkEwSUOZ388fr8u4gMMueBuU=
Subject key identifier: 58:7A:F7:E6:EF:8E:35:E8:10:2A:CE:DF:93:91:BD:2A:94:EA:28:20
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 01856FF01920E564E0FA5587C87FFEF29B7D
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/WHr35u-ONegQKs7fk5G9KpTqKCA.roa
Signing time: Mon 02 Jan 2023 00:44:44 +0000
ROA not before: Mon 02 Jan 2023 00:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209042
IP address blocks: 5.182.248.0/22 maxlen: 24
2a0e:a400::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:19:20:e5:64:e0:fa:55:87:c8:7f:fe:f2:9b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jan 2 00:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=587af7e6ef8e35e8102acedf9391bd2a94ea2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:36:a3:e1:00:3f:cc:a2:3b:5b:71:c4:01:
82:33:3f:b6:f8:38:71:ed:7a:74:f1:01:7b:d7:98:
ea:3a:a8:5c:95:8a:e9:be:f1:a5:4a:93:9d:26:88:
03:9b:3a:3e:51:00:e3:60:43:8b:23:62:41:5a:1f:
b2:01:72:b7:24:53:8b:0e:ca:37:83:05:2a:61:58:
cd:cb:2e:d8:54:fc:47:81:48:41:d0:b5:fd:0f:8b:
c9:53:46:91:8d:96:99:2b:23:e8:a4:00:57:d1:d7:
97:94:f0:6d:13:78:dd:ea:00:50:bf:5e:a8:c3:9f:
31:a4:f2:a8:7a:b0:04:f1:7f:6e:66:5f:fb:eb:71:
0c:bd:d1:d7:d0:ad:94:67:f2:20:bb:d5:f2:c0:4a:
53:8d:d2:28:3d:52:71:26:ef:e9:b7:8d:8e:b9:a3:
b8:6c:3b:25:58:a2:6f:98:a1:49:23:d5:5c:2c:a8:
10:23:8a:b6:3d:f2:2e:7a:68:73:9a:2f:4c:cd:a5:
31:22:19:55:43:04:70:27:b5:88:a6:12:53:e0:78:
8c:71:9e:24:4e:aa:26:4b:38:34:79:36:1c:aa:b1:
b3:20:f1:f8:c2:13:a6:2e:91:bd:e2:68:4f:e7:f6:
fa:d0:a6:c6:f7:a5:6d:9e:12:a6:9c:1e:98:ca:85:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7A:F7:E6:EF:8E:35:E8:10:2A:CE:DF:93:91:BD:2A:94:EA:28:20
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/WHr35u-ONegQKs7fk5G9KpTqKCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.248.0/22
IPv6:
2a0e:a400::/29
Signature Algorithm: sha256WithRSAEncryption
3d:8d:8d:84:19:26:2d:01:83:bd:da:e5:2d:27:c0:89:a7:65:
29:57:17:24:a0:79:05:f8:6e:b2:bc:2f:90:f7:46:b2:4f:de:
1c:55:e9:32:9d:9b:1e:ad:38:e8:11:fb:2d:e6:37:00:08:44:
cd:1e:fb:2f:4f:cb:f8:c7:e7:1d:5c:b2:ed:eb:1f:f7:db:d4:
60:0d:f1:90:33:97:74:e1:11:23:c3:84:06:bf:a6:26:ac:19:
39:02:2a:e0:46:d8:41:ce:40:32:16:db:3a:d4:8d:a4:fb:20:
be:bf:d6:71:6e:e9:f5:cd:37:29:a4:05:39:a0:82:38:5e:cf:
58:25:5e:51:eb:84:3a:30:b2:f2:d1:a3:2c:0b:5b:a1:1a:75:
7c:cf:7f:f1:be:e0:b5:c9:0e:02:24:3e:e3:93:af:e2:da:cc:
db:48:62:62:19:8e:3b:98:8e:6f:2a:c1:c9:ee:e8:05:27:77:
f1:62:83:88:af:de:20:d0:15:38:5b:21:db:89:26:27:ee:a5:
ef:bb:05:5d:2c:0b:e5:db:3b:c8:41:8f:98:00:09:94:a8:37:
b0:cd:f2:38:76:cc:13:f0:43:a3:7f:e9:09:94:ac:a7:16:20:
a1:85:59:99:ec:a1:b0:41:d4:84:01:fd:c2:ff:66:82:fd:3c:
f9:7f:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:54 2024 by rpki-client on console-ams.rpki-client.org