Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/WtX_JF428CSAbXnLBOS3yZefbUo.roa
File: WtX_JF428CSAbXnLBOS3yZefbUo.roa (raw, json)
Hash identifier: DNNWmUiFM+40L6AtqhMYdy90cTo9hqFvwm/lF9McKHU=
Subject key identifier: 5A:D5:FF:24:5E:36:F0:24:80:6D:79:CB:04:E4:B7:C9:97:9F:6D:4A
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 018C8B395067CABE8DFEB0AF867E72ED2F32
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/WtX_JF428CSAbXnLBOS3yZefbUo.roa
Signing time: Thu 21 Dec 2023 07:13:58 +0000
ROA not before: Thu 21 Dec 2023 07:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265919
IP address blocks: 192.35.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:39:50:67:ca:be:8d:fe:b0:af:86:7e:72:ed:2f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Dec 21 07:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ad5ff245e36f024806d79cb04e4b7c9979f6d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:95:91:e5:c4:3d:91:04:fd:15:aa:73:7f:
b4:ee:ba:9e:00:cd:53:11:68:59:d1:11:4e:82:6e:
84:de:4e:ac:ae:8e:6d:ad:0c:59:5a:00:71:bd:3c:
78:9f:dd:a6:b4:b8:1a:79:84:45:ea:5f:ef:ef:7f:
f7:0e:57:14:1c:0a:83:97:cf:e0:ac:b9:d8:93:3b:
d1:cb:a4:7b:8f:d0:46:99:0b:f0:bc:a8:b9:7d:5a:
d1:6b:32:d8:38:64:10:6d:99:25:0c:7c:05:dd:d7:
b8:ba:4b:09:0b:1a:15:1b:23:61:ac:9c:27:73:01:
08:cd:4a:3d:6a:88:5b:3e:8b:d4:16:5a:ef:eb:09:
be:5b:e0:8f:92:c3:d8:84:01:34:14:87:5e:80:7b:
0e:63:9c:6f:24:44:14:fc:3e:6a:f1:ab:fa:df:eb:
9e:cc:3a:24:41:14:42:3a:24:a4:e6:38:5f:9f:4f:
ef:c4:20:38:7a:45:de:6c:83:d8:e0:12:f2:91:b4:
eb:ce:f9:02:9d:7f:b5:35:d7:11:4a:43:79:0a:de:
fc:49:d4:24:b0:57:30:39:4a:33:36:e2:ec:2f:92:
58:93:79:4d:77:34:fb:17:a4:d6:84:e9:1a:34:e6:
f7:ca:24:ab:a8:33:93:fe:d3:d2:c7:07:3e:00:df:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:FF:24:5E:36:F0:24:80:6D:79:CB:04:E4:B7:C9:97:9F:6D:4A
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/WtX_JF428CSAbXnLBOS3yZefbUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.206.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c9:ce:e7:f1:62:7a:ce:39:89:cb:29:9d:40:91:b1:32:ff:
e0:3d:ab:64:33:e4:5c:10:9e:20:a5:2d:b2:19:f8:c3:84:e3:
6f:b9:58:57:8f:e8:11:30:c6:d3:90:5e:c2:58:0e:de:93:7e:
71:75:db:90:84:9a:55:cc:04:47:90:c3:58:33:24:58:ff:69:
e3:3a:6b:fa:77:f2:1d:9a:40:88:5f:8b:ee:2d:da:0f:45:22:
1f:6c:22:87:f1:0a:1c:10:cd:cf:1e:92:06:9f:ae:df:3b:5d:
b2:fe:a7:95:55:de:af:55:47:d6:9c:e2:11:c9:b4:3c:5b:39:
49:58:01:17:47:84:b0:aa:fd:4b:10:16:8f:36:92:52:a1:43:
bf:40:75:56:39:c0:ef:e8:1b:f3:65:5a:11:54:ba:11:bc:aa:
f2:97:cb:f0:8a:2a:3f:52:21:ce:b5:e7:91:16:26:fa:0d:86:
ed:c4:a4:0c:c8:d0:15:6e:cc:94:ef:d1:89:fd:56:fd:10:b5:
2e:32:a9:3f:b7:a5:84:cc:ce:f1:97:65:e0:48:c5:4f:dd:56:
78:9f:0b:e2:db:d0:cf:26:73:8c:6a:8d:e9:3e:d1:1f:18:88:
bc:ac:77:a7:6f:c1:58:00:85:b3:f4:ed:f6:eb:7d:75:51:62:
79:81:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org