Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/w0U3ADR6Gpb7xce7o3fTYoyodtI.roa
File: w0U3ADR6Gpb7xce7o3fTYoyodtI.roa (raw, json)
Hash identifier: sbYdtangQW5/QLVGVHwM3Fv2xGFcGw5MZiRQkIQc6UI=
Subject key identifier: C3:45:37:00:34:7A:1A:96:FB:C5:C7:BB:A3:77:D3:62:8C:A8:76:D2
Certificate issuer: /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial: 01856C1389B1C7DB6867AB728CA70DB9BD12
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/w0U3ADR6Gpb7xce7o3fTYoyodtI.roa
Signing time: Sun 01 Jan 2023 06:44:57 +0000
ROA not before: Sun 01 Jan 2023 06:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42541
IP address blocks: 194.62.216.0/23 maxlen: 23
2a0c:fec0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:89:b1:c7:db:68:67:ab:72:8c:a7:0d:b9:bd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Validity
Not Before: Jan 1 06:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3453700347a1a96fbc5c7bba377d3628ca876d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:06:d7:ce:0a:4b:84:8c:c3:4b:6c:aa:37:
81:b8:0a:9f:94:bd:f5:f9:02:18:cf:37:ec:de:72:
87:a6:fc:a6:31:52:c5:a9:f8:5f:33:5b:07:0d:15:
ca:e0:1f:8a:5d:bd:bc:66:bb:dc:59:be:fa:58:e8:
a0:d8:a8:6d:e2:1c:f1:91:41:5a:25:d0:cc:92:37:
07:35:5c:65:03:0f:2b:8e:80:37:72:92:7c:ba:08:
f3:db:89:a8:a1:8f:b2:ee:e1:37:8e:e0:4c:24:f3:
42:04:7f:ab:19:89:9d:fb:e8:af:8b:9c:ba:4d:03:
a5:f8:90:61:7f:29:3e:94:f5:f8:48:bc:8c:e0:20:
fb:16:04:98:12:a5:e1:47:a9:60:fc:18:c3:a9:9f:
d7:19:d7:ea:6d:f1:63:5b:15:cf:d3:50:f4:d2:63:
a5:6b:37:03:d4:21:1a:13:ed:3e:15:44:57:6a:5a:
93:3d:7b:0e:06:a4:9a:e2:a5:bc:0b:ca:a1:28:2b:
35:90:d7:64:6e:65:65:f7:90:84:0e:b7:9b:88:41:
f3:48:46:74:f4:80:3a:ac:e2:88:b5:4e:63:aa:ca:
6f:50:71:cd:54:0f:5c:ec:1e:9e:6b:3d:61:3f:0a:
e9:12:bd:e4:fb:de:37:32:eb:07:eb:77:a0:2e:f9:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:45:37:00:34:7A:1A:96:FB:C5:C7:BB:A3:77:D3:62:8C:A8:76:D2
X509v3 Authority Key Identifier:
keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/w0U3ADR6Gpb7xce7o3fTYoyodtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.216.0/23
IPv6:
2a0c:fec0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:fc:ad:85:64:bc:6b:17:0d:f6:b7:a7:fc:8e:21:ca:8f:62:
2d:2c:0b:71:95:d3:8d:0c:14:28:6c:ec:05:38:72:b1:5e:07:
00:50:46:77:d3:15:a9:b0:e4:d6:16:f8:1f:14:ac:67:9c:45:
89:cf:be:5d:83:58:1e:d4:e7:d0:2b:c4:5a:c2:be:0b:0e:95:
a2:89:13:01:73:14:e0:e4:f9:7c:91:26:b3:5e:4d:86:3e:08:
f7:b0:72:cd:0b:78:bd:28:66:45:99:9b:5c:4e:cd:9f:12:96:
31:f4:54:cd:d2:0d:83:c8:1f:e9:c5:b7:67:44:aa:0e:11:68:
eb:c3:6d:04:e0:d2:32:4f:20:63:84:78:83:ed:0c:32:68:a1:
5a:67:b9:e6:b8:4f:b9:ce:ef:bb:5a:f1:7b:30:c1:58:21:09:
58:d2:7b:8a:6b:83:69:3b:30:a7:b7:31:82:83:23:22:b0:ad:
4c:62:18:e2:c6:eb:0c:fa:20:2e:63:cf:94:06:61:4e:c6:21:
ab:f9:68:08:22:ba:5b:bb:92:17:e0:dd:e3:0f:0c:0b:e1:0a:
4a:5a:e0:d6:40:ca:a5:f7:bf:de:22:c5:a7:c2:59:bc:f5:ab:
94:e0:f1:ed:46:6f:7b:a6:5e:6c:d0:11:5b:e9:c4:79:16:d1:
61:07:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:52 2024 by rpki-client on console-ams.rpki-client.org