Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/wtjkGdM1ogJE1Fd0CEPHN6UIxxM.roa
File: wtjkGdM1ogJE1Fd0CEPHN6UIxxM.roa (raw, json)
Hash identifier: GHeHQuk4nG74u44qDS2xdTy1Fuxgn9wnN1vmPCkcsDA=
Subject key identifier: C2:D8:E4:19:D3:35:A2:02:44:D4:57:74:08:43:C7:37:A5:08:C7:13
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 018CC94E340701B7CC7E73E759DAB5FD6D66
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/wtjkGdM1ogJE1Fd0CEPHN6UIxxM.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 146.0.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 11:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:34:07:01:b7:cc:7e:73:e7:59:da:b5:fd:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d8e419d335a20244d457740843c737a508c713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:e5:97:7e:c9:14:e6:20:d6:35:87:4c:76:
11:9f:39:2c:88:07:1e:85:60:75:46:8f:8a:72:4f:
f6:53:8d:00:2c:7f:db:c4:e9:10:eb:94:b0:9a:09:
f0:e6:b4:85:28:65:3c:16:52:5d:fd:1a:e2:8c:be:
5d:8f:ae:8d:8e:0a:bc:25:28:86:1d:26:4c:20:49:
57:2c:14:ba:cf:88:2b:f2:13:ab:44:14:d8:97:b1:
f5:52:69:3f:96:9e:25:03:f8:a9:82:91:c8:df:e5:
80:57:0f:40:45:f0:5f:00:6c:cf:b9:af:c9:50:d6:
9e:8e:f3:2c:2f:0d:67:b6:32:67:23:b4:0a:a8:02:
7e:8a:84:20:d6:b0:94:3c:2a:ea:0a:51:81:6d:c8:
13:58:1a:99:b9:bd:b1:6b:bf:af:02:bc:77:c9:bc:
cc:60:4a:5b:88:83:e2:5e:79:af:f2:80:da:54:e8:
90:cb:f6:75:d2:9b:c9:b1:dc:38:76:ec:0d:cd:5c:
96:de:96:4e:86:80:14:58:f9:c7:91:68:31:d7:a2:
f9:ad:e5:30:b4:b6:9b:1d:b3:f9:f9:8b:b2:ec:05:
57:e9:1f:91:95:49:82:7b:2e:01:60:b5:46:98:f0:
06:d3:45:8a:6c:33:19:8d:c0:4a:2d:6d:4e:6a:43:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:E4:19:D3:35:A2:02:44:D4:57:74:08:43:C7:37:A5:08:C7:13
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/wtjkGdM1ogJE1Fd0CEPHN6UIxxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:43:38:9b:f0:b4:56:88:37:a5:2e:e1:bb:ce:d0:16:61:d7:
7d:73:6e:a9:fd:e8:f7:30:ba:2a:7e:d8:c2:7c:22:3c:91:d7:
65:58:58:2b:a1:a1:96:7b:38:03:ec:3c:54:12:76:96:f9:c4:
b1:1f:12:3a:0c:33:85:bb:53:d9:9c:65:57:3a:81:35:85:30:
a6:e5:36:34:dd:3f:4d:85:c7:bc:2c:17:e3:a1:9e:d4:49:c7:
f7:4b:8e:bb:55:2e:f7:22:43:63:5e:0e:9b:8d:01:85:a7:81:
d3:e3:7b:0e:43:b1:61:3b:3d:2a:e3:cc:a6:c6:8a:58:82:17:
fa:06:49:ae:bc:f4:24:20:b4:83:a4:fb:99:c6:6a:69:06:c6:
29:a3:58:e1:da:90:66:8e:ac:50:b9:a0:9c:1f:71:65:0a:69:
fc:8a:ee:c2:b4:fc:d7:36:fa:0a:d3:2a:ab:b8:4b:ec:96:be:
29:18:05:5f:d3:fc:70:d4:35:80:37:e1:e5:f4:e4:84:e3:38:
f8:88:6b:f5:ab:b9:a0:3b:5d:37:e4:f1:e2:e7:2d:4d:5b:8f:
56:0e:f5:59:49:7b:98:c7:97:81:02:52:1d:3e:7d:76:a0:05:
d1:0c:87:1c:3e:c1:47:e3:43:3b:9b:86:d2:ba:0d:fa:eb:b4:
eb:58:e6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:25 2024 by rpki-client on console-ams.rpki-client.org