Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/wPooJJpZqMomp6AluX90hFGEqLo.roa
File: wPooJJpZqMomp6AluX90hFGEqLo.roa (raw, json)
Hash identifier: j/+iF9UQw8rnLAqmyGvzdPgsZmFLkg8LFDQfujcEioI=
Subject key identifier: C0:FA:28:24:9A:59:A8:CA:26:A7:A0:25:B9:7F:74:84:51:84:A8:BA
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018CCA2BDC08B7FE21F6E923D3D6D3EC0755
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/wPooJJpZqMomp6AluX90hFGEqLo.roa
Signing time: Tue 02 Jan 2024 12:35:21 +0000
ROA not before: Tue 02 Jan 2024 12:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 171.33.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:dc:08:b7:fe:21:f6:e9:23:d3:d6:d3:ec:07:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 2 12:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0fa28249a59a8ca26a7a025b97f74845184a8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:0e:49:71:1e:9c:5d:9b:84:2d:22:d8:a8:
96:32:51:b3:72:cb:9e:58:26:c5:37:e1:8e:ce:79:
64:31:c5:37:22:f7:7e:6f:79:4b:aa:38:3a:da:78:
9c:18:ed:5a:36:c6:ea:af:65:32:c3:ca:18:ad:db:
9e:e9:a6:26:59:5c:66:ec:6a:67:b3:0b:30:26:f8:
d2:25:0f:9a:52:ad:03:50:d4:0d:5b:2e:d0:88:90:
d6:84:28:f6:76:c6:1f:51:c5:7b:e6:1e:53:c2:d8:
93:b4:52:cd:40:e9:da:a1:d5:1c:93:4d:50:85:03:
04:6b:87:b3:4b:1e:48:01:33:96:4d:51:92:65:53:
e3:6b:24:82:8e:db:14:ae:27:95:b9:bd:23:cc:9f:
47:6d:22:c6:fd:39:23:22:d8:12:2d:66:08:3d:6f:
ab:e2:4a:e9:c0:14:d5:36:85:00:e3:29:7c:57:eb:
28:9d:f0:02:51:cf:32:b2:b3:1f:f0:fc:2f:10:b4:
e1:77:4d:c5:d1:ae:73:df:34:7f:1f:e7:ac:98:74:
72:d7:38:21:55:c6:42:50:77:03:1f:b9:50:8b:90:
35:b6:d6:66:e4:f2:68:88:85:a9:ae:99:d7:07:54:
e0:19:ab:da:62:ae:d2:0d:83:76:cc:02:3b:92:ec:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:28:24:9A:59:A8:CA:26:A7:A0:25:B9:7F:74:84:51:84:A8:BA
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/wPooJJpZqMomp6AluX90hFGEqLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4c:ed:2d:b6:44:5b:15:5c:f9:22:ee:18:19:ac:1c:4b:84:
49:2a:a5:d6:d6:35:8e:7a:3c:f4:9a:0d:c3:e4:41:72:a4:d6:
9d:df:cd:08:42:5a:a6:44:de:29:c6:8e:e1:e5:10:37:4d:63:
5b:d9:33:f7:f0:bc:f5:c5:5f:bc:9e:0c:57:e8:de:f8:3e:f9:
03:52:35:fb:96:a5:27:94:de:14:cd:c0:21:7f:56:08:40:7c:
9f:c7:e6:46:b1:6f:aa:51:d2:f9:bb:02:04:b9:88:b3:bd:ee:
94:dd:76:0a:1a:04:6e:a2:b6:45:62:72:15:09:89:81:8b:6a:
4f:b4:70:7b:4b:c4:3e:6f:fe:0a:8e:a0:ba:5d:de:7e:48:e5:
bf:25:cd:e0:81:61:a7:4f:f0:8b:ab:39:0c:75:ab:87:26:83:
0b:06:a4:5f:1e:7e:d7:b9:5d:bb:bc:d2:7e:9b:27:f1:e3:c8:
63:14:46:9a:b2:8d:61:fe:9a:65:98:cc:23:50:4a:77:fe:58:
91:2b:b2:f2:d2:0f:3d:a7:7b:71:08:3c:7c:70:57:64:96:c4:
81:c2:78:c0:7d:08:20:1a:67:ec:7a:23:82:27:a6:59:0f:4e:
53:9f:2a:c4:09:00:a0:11:44:93:53:96:23:fe:c8:59:e3:b3:
71:4b:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 07:26:01 2024 by rpki-client on console-fra.rpki-client.org