Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/wlh9HM1Yi73VMqGfaqT5d8AGmFs.roa
File: wlh9HM1Yi73VMqGfaqT5d8AGmFs.roa (raw, json)
Hash identifier: 4DuFpEmnIZLAhZedIz0kGD6nrYsS97D54smq6ePgzco=
Subject key identifier: C2:58:7D:1C:CD:58:8B:BD:D5:32:A1:9F:6A:A4:F9:77:C0:06:98:5B
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 01856CCB04C105CADDDF37D282540D20B665
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/wlh9HM1Yi73VMqGfaqT5d8AGmFs.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62193
IP address blocks: 185.44.108.0/22 maxlen: 24
2a01:6420::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:04:c1:05:ca:dd:df:37:d2:82:54:0d:20:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2587d1ccd588bbdd532a19f6aa4f977c006985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:25:1a:c6:d9:f3:d4:90:5e:7c:53:65:d9:
d8:6d:3d:cb:a3:ba:c7:fe:0d:b8:15:02:fe:07:fe:
cc:2a:5e:27:d5:b8:1d:78:77:eb:92:8f:e5:34:bc:
39:a4:de:42:fd:5e:9b:5a:0f:06:fb:a7:67:ba:d5:
b0:0d:06:13:87:c8:ed:82:6f:52:70:96:7f:44:54:
ab:96:a0:fc:7b:63:85:9c:16:fb:d5:f6:98:6f:12:
a8:49:18:77:66:e3:4a:79:bb:0a:20:7e:e2:3c:82:
4f:76:65:41:c0:15:fc:34:4c:05:af:50:3a:4b:4d:
ad:09:65:7d:f6:16:89:80:c5:a6:78:5b:d6:d1:3b:
c4:a6:d6:30:42:f5:eb:c5:87:48:4d:58:57:41:a0:
2c:25:0f:c3:eb:19:24:4a:10:dd:95:9a:05:32:9d:
0d:32:c0:aa:f2:1a:bf:32:fc:2f:f6:9d:eb:4c:81:
d1:2f:0a:3f:6d:e0:2b:18:c8:7a:06:cd:65:47:0f:
02:82:a3:73:d9:c4:64:32:ea:b5:a1:b6:2a:6f:0d:
28:df:5b:6b:cd:2a:fa:0b:38:a6:7d:5f:93:cc:dc:
c6:8b:69:43:c0:f3:04:ac:1d:0b:b9:d6:59:50:c9:
16:37:aa:fe:ca:6b:72:f2:de:c1:6c:61:cb:3f:0e:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:7D:1C:CD:58:8B:BD:D5:32:A1:9F:6A:A4:F9:77:C0:06:98:5B
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/wlh9HM1Yi73VMqGfaqT5d8AGmFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.108.0/22
IPv6:
2a01:6420::/29
Signature Algorithm: sha256WithRSAEncryption
17:4c:9a:bd:2c:7c:74:34:8d:ef:5d:34:35:6d:b4:11:d9:f8:
49:5b:83:b1:8c:71:17:e7:20:36:bd:60:c6:47:82:6c:57:27:
8b:4b:af:3b:ac:77:95:70:af:60:02:9b:e3:29:d2:eb:cf:c5:
8f:96:a4:47:ca:cf:f3:16:5c:4e:9b:f6:32:75:7a:a7:ac:af:
6a:e3:c2:a9:b9:30:dd:51:04:a6:e2:7a:fe:80:eb:af:34:2d:
ec:64:c8:d0:be:6f:0d:8c:5f:de:cb:bd:67:30:fe:78:dd:29:
8d:c0:ad:c3:bc:ac:07:f5:33:ad:71:dc:73:36:11:71:97:73:
54:c6:c9:e4:e6:4e:2f:3e:37:8c:ac:50:e3:31:66:a8:c3:74:
ee:9b:ad:73:46:51:8a:36:5d:90:7c:f3:9b:cd:6e:53:55:1a:
d5:39:d5:e6:d4:75:bc:5b:b1:86:52:c7:13:c5:b5:52:43:0b:
dd:c9:b3:1a:e4:9e:e2:68:1e:ca:d1:7b:e5:92:af:28:ab:60:
98:bf:16:74:73:55:94:3f:eb:ed:30:bd:57:f3:0a:00:88:63:
f9:f6:45:6c:c4:3c:cb:d9:ae:3b:c1:92:3a:46:5d:ec:6a:3d:
47:49:c6:ee:88:10:71:dc:93:ff:44:45:d1:d7:ec:82:09:4a:
75:54:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:43 2024 by rpki-client on console-ams.rpki-client.org