Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/WCGvbKNHIJ4hOvbbTCD0sU6HMfg.roa
File: WCGvbKNHIJ4hOvbbTCD0sU6HMfg.roa (raw, json)
Hash identifier: FfZQYk8WREv1UWBeiUCbCC09LdqPAmkxPHKZiNPbelo=
Subject key identifier: 58:21:AF:6C:A3:47:20:9E:21:3A:F6:DB:4C:20:F4:B1:4E:87:31:F8
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01889B5AB0810E4C3F3ED39D1B6FC7A143A9
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/WCGvbKNHIJ4hOvbbTCD0sU6HMfg.roa
Signing time: Thu 08 Jun 2023 14:13:11 +0000
ROA not before: Thu 08 Jun 2023 14:13:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 85.237.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 10:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:5a:b0:81:0e:4c:3f:3e:d3:9d:1b:6f:c7:a1:43:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 8 14:13:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5821af6ca347209e213af6db4c20f4b14e8731f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:c7:36:d3:55:fe:76:4c:e5:97:ad:b1:0f:
e7:b8:44:f0:52:91:59:47:ba:0c:64:c5:ac:5a:49:
e0:a4:5f:ba:da:80:f1:e5:ee:36:8a:26:25:43:f8:
b6:84:cc:af:fd:98:09:52:a2:63:e3:70:12:23:a1:
24:eb:8b:6c:5b:74:d8:af:b2:60:bf:e9:d4:86:1c:
82:79:e2:14:90:01:c6:23:06:4e:1c:2f:ec:62:5c:
b8:8e:01:1d:d9:d6:9e:82:0a:00:07:fe:5b:c1:62:
69:96:12:3e:93:62:e1:9a:5d:09:21:b7:ad:fb:0e:
35:25:a0:5a:f3:b3:f4:9c:22:29:5a:cd:98:08:b4:
95:69:06:d5:d6:6b:a6:2f:35:b8:46:c2:3d:d8:a8:
f7:04:6b:b0:a4:c0:44:3b:ad:11:12:f8:df:b6:41:
d4:82:76:12:68:63:29:fc:0b:fc:d1:59:cb:e9:a6:
ff:82:4e:6d:62:8d:8a:54:4e:6a:af:9b:6e:8a:a9:
54:d7:9b:f1:16:1a:a5:4d:16:8f:42:59:32:51:3e:
d2:11:f5:c8:6d:06:93:77:57:65:e4:74:17:48:82:
28:f8:62:b7:cd:88:97:7c:c1:57:6c:55:02:79:16:
e4:bc:0b:70:43:7c:ba:3e:10:ff:d7:da:12:65:71:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:AF:6C:A3:47:20:9E:21:3A:F6:DB:4C:20:F4:B1:4E:87:31:F8
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/WCGvbKNHIJ4hOvbbTCD0sU6HMfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.89.0/24
Signature Algorithm: sha256WithRSAEncryption
35:54:ae:1b:94:7b:97:e8:54:b5:c8:39:d0:34:0c:23:3f:81:
0c:14:a0:72:a0:b1:51:c2:d0:ee:78:55:41:a5:65:55:3b:87:
99:f7:bd:b8:96:61:97:6a:8d:53:02:b1:f1:7f:88:49:97:82:
4c:b4:98:29:f8:11:4f:4a:22:84:7b:27:1d:5f:37:c4:83:2c:
92:7e:1c:e7:a8:3d:87:85:42:43:45:35:77:df:94:c6:24:c7:
08:9f:c4:77:43:5e:49:47:bd:99:64:57:13:c4:f6:4f:ba:2d:
99:6a:49:c8:d6:8c:1f:81:21:2d:68:f5:51:6f:65:e0:09:1e:
fe:27:b4:5d:40:b0:d4:fa:0d:f8:0b:27:ba:da:f8:4d:39:6a:
fa:d3:48:1f:49:be:26:44:e7:7b:86:cf:92:2b:1f:26:89:01:
ed:6a:4e:19:04:09:dd:cb:38:e0:75:a0:0c:26:2a:96:dd:14:
8f:f5:7d:37:e7:2d:cd:ec:d1:68:16:4c:75:71:d0:57:11:be:
ce:03:d3:b8:47:86:09:d7:58:5c:67:64:f0:ed:6e:64:59:96:
bf:0b:ec:89:35:c6:0b:37:ee:e4:59:2e:dc:dd:cf:ba:6b:87:
92:19:37:e0:12:e1:d2:61:72:49:74:b6:96:42:89:aa:ad:af:
55:fc:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org