Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wzUm0-AOtdWUkgmqxCrDLNyxqWY.roa
File: wzUm0-AOtdWUkgmqxCrDLNyxqWY.roa (raw, json)
Hash identifier: OWBh4ApRj9Jo8fPcOB/e8Nc6WpqT5ZewWNpMBSgKvLk=
Subject key identifier: C3:35:26:D3:E0:0E:B5:D5:94:92:09:AA:C4:2A:C3:2C:DC:B1:A9:66
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018D59193117FAEBCD7CBE3585C04FF23A4A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wzUm0-AOtdWUkgmqxCrDLNyxqWY.roa
Signing time: Tue 30 Jan 2024 06:40:39 +0000
ROA not before: Tue 30 Jan 2024 06:40:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 185.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 17:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:19:31:17:fa:eb:cd:7c:be:35:85:c0:4f:f2:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 30 06:40:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c33526d3e00eb5d5949209aac42ac32cdcb1a966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:2e:b9:ea:f2:6b:68:cd:3f:8b:0b:bc:53:
9f:fb:c8:c6:6b:20:fd:cc:60:ae:b1:c1:7d:ce:f8:
ff:ed:0d:2f:ad:a7:5e:1d:fd:b0:30:a0:b6:41:44:
cd:ca:a2:cd:92:1c:27:9b:0b:f6:f4:82:c3:b6:5a:
e1:dd:53:72:c1:6a:c8:50:e5:97:28:ea:b3:23:15:
34:5a:da:e8:8d:32:db:8e:c9:7a:f6:00:c0:11:c9:
34:39:09:c0:be:b8:43:7f:1f:40:45:17:84:27:6c:
dc:56:27:3b:42:e4:5d:ce:95:4b:ca:79:f8:0b:b4:
10:ca:dc:52:51:1d:7b:f9:de:18:7d:4e:e6:e8:d3:
41:1e:4d:da:cb:43:99:21:d5:f8:58:2f:b7:23:52:
9b:27:94:93:6e:70:d2:aa:21:e7:a9:45:55:e2:2f:
d1:bc:b7:3d:56:30:7f:e1:85:7d:7f:9b:47:88:b5:
84:33:5d:65:29:55:bf:86:9c:98:6b:31:0d:71:72:
ad:41:5a:d6:47:0c:12:9e:37:b3:23:5a:69:b0:a9:
4e:2c:c1:c2:e5:74:58:57:9d:4b:dc:65:db:c6:21:
da:73:2c:9a:6b:47:ee:30:ce:a0:7b:8b:59:47:ec:
e3:13:88:69:24:60:0a:b7:f4:c9:e7:33:a6:58:b7:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:26:D3:E0:0E:B5:D5:94:92:09:AA:C4:2A:C3:2C:DC:B1:A9:66
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wzUm0-AOtdWUkgmqxCrDLNyxqWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:34:b0:a4:26:40:2c:3e:6e:ea:42:44:af:7b:f1:71:38:
34:6d:df:41:8b:04:28:35:25:4d:96:73:f4:62:8d:37:3e:73:
d5:cd:ae:a5:00:8a:50:ef:a8:6d:9f:ca:b4:ca:70:4a:bf:5c:
62:02:ad:91:fd:90:d2:1e:17:bc:bb:7d:4a:a5:92:d5:c2:35:
ec:50:69:f6:cf:f0:d8:95:a2:12:9b:5c:e6:28:d3:83:5d:50:
8b:92:6c:17:9f:5e:30:d4:4b:17:10:61:7d:0c:8c:02:ff:30:
11:91:c2:3f:78:70:f2:4c:34:4b:e0:c7:ec:4f:1f:7d:5f:9a:
a0:4f:24:92:77:80:70:54:74:2a:3c:79:41:c8:8f:77:14:8b:
3e:b5:8f:80:fc:22:e0:bd:e4:22:60:75:4f:f9:31:37:65:8d:
9c:3c:a0:c9:89:8a:e6:a5:91:fa:a8:3c:46:6c:c1:7b:1b:bf:
70:c6:b5:3b:a6:95:e4:6e:59:27:2e:59:e3:f1:c3:08:88:fb:
02:f3:15:ec:dd:ca:f6:7d:d5:67:1e:82:24:87:42:a7:4d:f7:
47:c6:85:64:34:30:e5:6b:2d:5b:8a:66:cc:01:af:90:c7:53:
b3:70:b0:47:bd:1d:a5:f6:ca:01:ba:10:97:7c:53:5f:ac:f2:
74:7e:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 20:21:28 2024 by rpki-client on console-ams.rpki-client.org