Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/_A_WTNmTdLiodho2zcsdDiqX_YA.roa
File: _A_WTNmTdLiodho2zcsdDiqX_YA.roa (raw, json)
Hash identifier: IykNdu7oLzvo4k5JBTVslLU7fQApIJ5C/s134WVezu4=
Subject key identifier: FC:0F:D6:4C:D9:93:74:B8:A8:76:1A:36:CD:CB:1D:0E:2A:97:FD:80
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 01856CF865C95DB913F5688EEE0BC560677C
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/_A_WTNmTdLiodho2zcsdDiqX_YA.roa
Signing time: Sun 01 Jan 2023 10:54:56 +0000
ROA not before: Sun 01 Jan 2023 10:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47578
IP address blocks: 185.109.139.0/24 maxlen: 24
2001:1424::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:65:c9:5d:b9:13:f5:68:8e:ee:0b:c5:60:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Jan 1 10:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0fd64cd99374b8a8761a36cdcb1d0e2a97fd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:a0:5c:12:a6:0e:7d:38:38:b5:77:ac:97:
0e:56:8f:44:a9:72:a6:d3:f9:e8:ec:91:7f:93:a0:
1c:3c:3a:db:81:ef:3e:95:d4:c7:17:7e:f8:db:3b:
34:4e:73:b8:b6:01:58:e8:a3:d0:53:c4:3b:54:3d:
ba:95:6c:1a:16:4f:aa:f1:91:72:e7:f7:1b:2e:16:
93:71:f9:16:51:ea:c8:b4:53:c2:70:db:e6:34:82:
5c:6c:96:b3:73:e5:cc:bc:e9:8e:1e:80:12:6e:4c:
b3:aa:a9:44:7c:14:0e:27:58:b4:d0:11:6a:56:20:
41:08:2d:bb:1b:65:0a:25:1f:1d:50:c1:c6:68:21:
e3:a1:3e:d3:32:8d:38:7f:9e:3b:02:bb:45:6a:15:
33:55:06:86:6b:d9:fc:fa:68:84:8c:74:25:44:66:
01:e6:cd:25:ab:7d:aa:32:a2:90:cf:a4:96:85:c0:
62:8e:04:c5:9e:cc:f8:20:bc:90:4c:5f:e9:0c:a6:
79:c6:6b:78:ce:d7:4a:30:08:87:3f:52:f9:9a:33:
71:8c:2f:d5:8c:56:7b:0b:8e:d6:01:81:b7:83:a8:
bf:3f:13:ac:59:c5:19:67:0e:50:87:7b:41:f2:63:
b4:a7:19:1c:8c:9e:ba:8b:85:04:20:50:6b:76:f5:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:D6:4C:D9:93:74:B8:A8:76:1A:36:CD:CB:1D:0E:2A:97:FD:80
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/_A_WTNmTdLiodho2zcsdDiqX_YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.139.0/24
IPv6:
2001:1424::/48
Signature Algorithm: sha256WithRSAEncryption
5b:e2:74:aa:55:6c:bb:83:d0:ed:c6:6b:38:7e:23:ff:4d:ec:
41:37:02:dd:8e:25:cd:1c:93:d0:58:8a:be:94:7a:91:73:4e:
af:54:d2:2c:ad:ef:e7:a9:2e:cc:b9:43:f9:81:56:0b:9f:9c:
c2:ca:81:16:97:2f:d6:ae:86:43:86:37:9a:f3:5f:24:86:d5:
fc:89:e3:b9:06:76:f5:ee:3e:94:27:27:43:2b:9a:5a:8c:b6:
4f:8a:6b:63:64:2b:cd:2d:af:74:e8:8f:6b:61:2d:a4:5d:81:
4a:7e:b6:98:39:7d:52:29:18:4a:9d:f6:08:43:c4:62:10:31:
15:43:ca:29:d0:30:03:4f:64:81:70:5c:7a:7b:b6:3b:8f:11:
15:43:c2:36:78:f5:6f:85:8d:02:fc:6f:71:05:8f:7e:e1:5a:
04:ed:db:62:4c:d0:af:03:37:c7:ce:59:94:a7:14:ee:be:8f:
f5:fc:62:1c:1b:57:12:d7:27:9b:8d:cf:2e:01:0d:8b:7c:3f:
a7:35:9c:d3:a2:91:1c:a2:70:b8:e8:12:84:e4:a2:54:9b:87:
b7:f2:69:c4:c2:f3:18:bd:06:2c:fc:11:cb:61:39:ca:d3:82:
f2:5c:26:f6:4e:d2:f7:45:74:32:46:9b:23:f1:26:85:f4:60:
8f:14:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:12 2024 by rpki-client on console-ams.rpki-client.org