Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/WK5T2vE9OdrmTAgd1oU6QO1sKtw.roa
File: WK5T2vE9OdrmTAgd1oU6QO1sKtw.roa (raw, json)
Hash identifier: oAajtz/GEYLjd3NvSuulLEE7DR0WfPATCl+wnaCuKNM=
Subject key identifier: 58:AE:53:DA:F1:3D:39:DA:E6:4C:08:1D:D6:85:3A:40:ED:6C:2A:DC
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7BE472F47D3C1BBE841077B889B2B
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/WK5T2vE9OdrmTAgd1oU6QO1sKtw.roa
Signing time: Mon 02 Jan 2023 09:37:22 +0000
ROA not before: Mon 02 Jan 2023 09:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41689
IP address blocks: 86.57.0.0/17 maxlen: 32
Validation: Failed, certificate revoked on Sun 18 Jun 2023 08:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:be:47:2f:47:d3:c1:bb:e8:41:07:7b:88:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58ae53daf13d39dae64c081dd6853a40ed6c2adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:e3:b8:5d:58:53:01:13:86:a9:c8:42:da:
a0:03:33:cf:cb:5b:0c:2e:bb:4a:55:81:94:4f:c0:
f9:9e:91:a5:4b:85:e8:3a:e2:fe:4d:16:6d:3a:dd:
8f:a6:f9:7e:03:21:a9:54:6b:6e:8e:5c:ec:70:64:
17:98:bc:ea:42:8e:e0:b8:db:5a:34:dc:87:31:42:
01:21:07:1a:9a:4f:ec:9a:22:7c:a5:d9:49:91:cd:
f3:6f:8f:3c:ec:30:f3:e1:1d:9e:26:e0:e4:e7:d1:
d8:60:b3:3b:78:28:19:6e:14:9f:aa:de:84:ed:ec:
b5:40:4c:c7:61:d0:37:06:90:b8:79:8c:34:a1:e7:
82:64:4f:e6:26:4e:ac:80:c4:5d:f1:63:3d:84:57:
d4:45:bd:ca:7c:46:c5:32:53:8c:41:11:dd:3e:44:
9c:45:a0:b0:e4:63:f4:ad:d2:c4:3f:a5:85:92:87:
c4:2f:1a:9a:bf:e8:60:82:d1:a4:7b:76:7a:7a:f8:
1d:3f:a0:de:a5:73:1a:76:21:b3:a1:53:92:39:a4:
4b:51:cb:c9:5a:b1:08:33:02:9a:19:84:86:76:d6:
2d:ba:6f:01:f8:82:86:c2:52:02:7e:9d:66:bc:0d:
43:16:9d:c2:87:b8:08:4b:2b:4c:b4:b7:6a:74:ca:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AE:53:DA:F1:3D:39:DA:E6:4C:08:1D:D6:85:3A:40:ED:6C:2A:DC
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/WK5T2vE9OdrmTAgd1oU6QO1sKtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.57.0.0/17
Signature Algorithm: sha256WithRSAEncryption
47:03:34:e0:71:07:80:24:f3:c0:88:13:2c:3b:25:ab:ba:27:
8e:fd:5d:cc:15:df:c0:7b:2e:8d:66:a5:f4:8d:bf:52:ba:45:
e0:f9:f8:27:24:0a:7c:9e:1c:46:15:60:e7:8b:09:84:fe:c4:
1f:b8:e9:b6:dd:7e:bc:a5:e7:9c:06:43:75:be:bc:e4:b7:f0:
91:e3:e2:1a:7c:ca:44:ba:e0:43:aa:03:48:60:0b:0d:86:67:
0d:2b:12:50:9f:09:89:64:20:35:d2:df:45:05:e1:07:c7:8a:
e1:1b:f1:7d:16:0b:e0:f7:0f:80:0b:98:49:64:09:2a:04:9e:
82:18:c8:d0:16:4e:47:19:0c:d7:6d:3d:f5:41:6a:b9:13:b9:
c9:ed:c4:d0:f8:1d:3e:60:ce:d0:49:5e:5c:37:6c:dc:ab:a8:
08:71:0d:41:b8:a8:7d:a6:9c:80:a0:ab:37:8b:90:c1:37:77:
5e:f8:74:c9:00:b4:93:88:e9:12:80:3d:16:db:93:f5:ab:e1:
2b:92:c4:92:e1:01:0f:63:6e:9f:38:5c:c6:d5:95:c6:e3:92:
0c:9c:47:f3:ba:da:55:0a:1d:7c:eb:68:04:de:08:53:47:c3:
8e:9c:2e:9e:8a:3a:7a:0a:d8:14:17:c5:8a:8a:ff:82:eb:34:
b3:db:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org