Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/wvhuAjFFW205yoU6Qls4J4OdCCs.roa
File: wvhuAjFFW205yoU6Qls4J4OdCCs.roa (raw, json)
Hash identifier: gdArw23R0oRsnlsX0m/2BsLK+6h2q5hYhNSFY5csxSk=
Subject key identifier: C2:F8:6E:02:31:45:5B:6D:39:CA:85:3A:42:5B:38:27:83:9D:08:2B
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 0185701509357986387A9C6E55F4884F6C6B
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/wvhuAjFFW205yoU6Qls4J4OdCCs.roa
Signing time: Mon 02 Jan 2023 01:25:04 +0000
ROA not before: Mon 02 Jan 2023 01:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134548
IP address blocks: 83.223.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:09:35:79:86:38:7a:9c:6e:55:f4:88:4f:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Jan 2 01:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2f86e0231455b6d39ca853a425b3827839d082b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:0b:bb:f7:c1:9d:a2:15:00:48:ed:70:c3:
38:65:a4:8f:44:5f:81:c4:ec:23:cc:41:c1:f7:d1:
45:0b:ae:0e:26:67:7e:7f:59:31:82:c2:e9:b0:57:
23:bb:30:46:e5:d9:ac:0a:2d:1b:45:66:e2:75:43:
02:df:3c:50:7c:59:f6:ce:93:f9:c3:65:c9:b4:71:
84:51:ee:0b:11:34:41:40:e2:b1:92:49:27:ae:23:
2c:86:6f:69:70:4b:79:96:57:d3:fb:66:01:f9:fc:
d6:4b:1b:67:60:60:6d:d2:8d:33:34:78:dc:18:72:
9e:eb:5c:17:41:44:a8:85:ec:e0:9f:c5:18:69:2b:
76:bc:52:22:c4:01:93:42:65:39:d0:19:a7:8d:12:
8a:02:d6:2c:b1:ab:2b:cd:d1:9c:7a:b7:fa:e6:46:
4a:5a:6c:65:4b:aa:22:32:98:9c:d4:16:97:75:d8:
6c:b4:42:0d:14:61:72:a1:70:ad:5c:0b:07:e1:9f:
e3:74:50:34:3c:82:82:6c:4f:ef:2c:18:6d:9f:4d:
af:ec:5f:04:22:61:27:0f:f8:8c:2f:df:36:ae:51:
c7:17:92:ac:f0:49:4c:dc:7c:4a:37:ab:53:34:2d:
8a:02:b2:35:63:6b:76:81:a6:6e:50:61:1b:3a:eb:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:6E:02:31:45:5B:6D:39:CA:85:3A:42:5B:38:27:83:9D:08:2B
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/wvhuAjFFW205yoU6Qls4J4OdCCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bb:09:bd:67:cd:d9:6d:d0:34:5f:10:5e:6a:73:a6:3d:8d:
13:e5:1a:04:68:eb:d3:63:15:44:db:83:65:ba:49:da:b3:be:
97:6c:4b:ab:c0:1e:62:bb:62:5c:41:3c:b0:b4:9e:4c:eb:d5:
db:a7:a3:db:98:64:5a:f9:0e:b7:43:8f:84:75:5d:cd:3b:30:
43:2f:9d:df:4d:8f:bf:c8:ac:6e:8e:d2:70:ec:34:f9:8d:77:
a2:09:14:17:cc:1d:ec:85:f0:55:15:8c:dd:89:dd:26:50:9c:
f8:2e:0e:ab:76:b4:b6:e4:4e:62:b9:bd:2c:b7:ed:18:b9:9d:
cf:50:77:0f:6a:60:83:0b:1d:27:78:de:1b:1e:32:c7:e5:87:
88:7f:0f:ed:8c:7d:84:5c:9f:bb:bf:ae:7d:01:5e:8d:c5:b1:
d2:62:05:51:33:4d:06:fe:87:0d:0e:f4:7f:ac:df:ef:a2:5f:
bf:6d:fd:43:ac:8e:eb:64:f0:f8:51:4d:08:eb:c7:1a:5a:4e:
ab:93:33:7e:7a:fd:c9:3a:45:68:bf:e3:a6:b5:2b:65:d3:5a:
ff:04:c1:0a:91:fd:b3:a4:17:9d:a3:20:cf:26:de:d3:68:66:
a5:fc:5d:36:f6:9c:ad:58:96:5d:dd:5d:f0:9f:62:8d:9c:1d:
33:9f:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:39 2024 by rpki-client on console-ams.rpki-client.org