Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/WExV7egCRwHjYCu8cRXYnIroTo8.roa
File: WExV7egCRwHjYCu8cRXYnIroTo8.roa (raw, json)
Hash identifier: 6kmnx/ypoKxVi9V9yGMp8awWFB+WE9cQ7FPBpIK+Lck=
Subject key identifier: 58:4C:55:ED:E8:02:47:01:E3:60:2B:BC:71:15:D8:9C:8A:E8:4E:8F
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 01856D2F58FF663036B64C5981B46EA69751
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/WExV7egCRwHjYCu8cRXYnIroTo8.roa
Signing time: Sun 01 Jan 2023 11:54:57 +0000
ROA not before: Sun 01 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:58:ff:66:30:36:b6:4c:59:81:b4:6e:a6:97:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=584c55ede8024701e3602bbc7115d89c8ae84e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:34:28:88:81:ff:f0:02:88:d8:c6:59:1b:
f1:64:2a:65:30:56:47:c2:bb:30:8f:1b:a7:4d:c6:
eb:23:bc:ed:73:6b:26:f0:84:e7:ed:76:f2:d9:8c:
d5:24:f1:11:f8:9c:5c:54:dd:21:a0:82:c2:8d:97:
31:5f:91:c1:69:7b:69:91:db:7c:92:ba:79:3a:91:
98:0f:a7:61:05:c7:d1:8a:8c:38:7f:80:d8:72:6a:
76:1a:a6:6d:17:2e:69:f2:8e:4b:d2:38:7e:28:c8:
ba:50:f0:7a:0d:ee:c4:e6:76:ac:39:4e:70:b3:13:
b6:09:bb:2a:2b:fd:a9:11:f5:7d:89:9b:49:71:bd:
03:7d:11:20:10:bc:97:16:0c:fc:95:77:8a:27:f0:
ab:22:f4:c7:f1:24:03:1f:b8:56:87:5b:6f:e5:62:
27:d2:e4:11:aa:d9:bc:08:47:29:87:19:0e:ea:8c:
36:b4:97:c9:4b:17:ae:dd:e5:fa:1c:3a:01:cf:86:
ac:10:9f:d7:a6:22:ea:63:aa:a0:ca:7b:64:de:fa:
e7:cd:04:04:bb:42:d4:a3:7e:29:69:d1:58:13:c2:
d3:46:2a:86:0d:1d:8e:ec:e1:0e:ed:e3:56:43:d4:
f2:55:9f:91:05:ee:d0:64:b4:21:e6:90:be:7b:fb:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:55:ED:E8:02:47:01:E3:60:2B:BC:71:15:D8:9C:8A:E8:4E:8F
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/WExV7egCRwHjYCu8cRXYnIroTo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
19:4e:69:00:8f:d3:17:be:ec:61:ce:10:fe:5f:f7:69:8a:ca:
ad:b9:2f:8b:f0:48:e3:fd:46:35:64:9e:6b:d6:55:6f:57:6b:
6d:21:76:5e:38:88:e8:c1:15:24:e4:04:37:b9:cd:d8:ff:69:
ac:a1:32:65:39:57:f5:55:97:d0:d3:21:5a:e0:ff:12:24:0f:
d9:d5:43:8c:08:36:27:04:ff:30:a0:6f:0e:23:2c:14:01:1c:
e5:60:9f:54:22:5e:ce:3e:e1:90:13:a9:72:3c:55:35:8c:94:
54:c6:4a:a7:b4:6c:9a:12:04:49:a9:c1:bc:a3:b4:16:d2:00:
da:a4:55:13:16:f3:94:e3:44:ca:e4:b6:8b:a4:25:8f:6a:e8:
3f:a7:2c:24:95:31:cd:c4:1c:d2:bd:21:b2:77:c8:76:b8:1a:
54:fd:56:ea:c3:74:ca:c1:3a:c4:4c:0d:c7:e7:41:85:43:4a:
af:fe:40:0c:89:a8:01:f0:d5:e6:35:86:44:10:ca:d9:fc:32:
65:e2:d2:02:55:a5:4c:76:bf:bc:be:3c:b5:72:86:15:b6:1b:
00:e5:6d:5d:a9:e2:58:df:e5:1e:26:a3:84:b3:e6:c3:e0:77:
aa:ca:fb:b6:fa:e3:d9:74:fc:e4:ae:c0:f0:48:2e:f3:e8:72:
dc:56:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:15 2024 by rpki-client on console-ams.rpki-client.org